Skip to main content

Privacy Policy

Last updated: May 2026

This policy describes how Zeferous (“we”) collects, uses, and protects information when you use our products, including the GEOptimizer Shopify app and the zeferous.com website. We collect only what we need to operate the service.

1. What we collect

When you install GEOptimizer on Shopify, we receive the data scopes you authorize during install — typically read access to your products, orders metadata, and the ability to write metafields. We store:

  • Your shop domain, plan, and Shopify access token (encrypted at rest).
  • Product metadata: title, handle, vendor, product type, description, variant SKU/price/availability/barcode.
  • Schema audit history, JSON-LD versions, and citation tracking results we generate on your behalf.
  • Persona configurations and citation rates per product.

We do not collect customer personal data, payment details, or order line items beyond aggregate revenue used for the Opportunity Map. We never sell or share your data with advertisers.

2. Where data is stored

Application data is stored in Supabase (PostgreSQL on AWS), encrypted in transit and at rest. Row-level security policies ensure store data is isolated per merchant. Backups are encrypted and retained for 30 days.

3. Third-party services

To deliver our features, we send minimal product context to:

  • OpenRouter (Claude Sonnet 4.5 by Anthropic) for generating descriptions, additional product properties, and custom personas. Sent: product title, vendor, product type, and (for description fixes) existing description text.
  • Perplexity AI (Sonar) for citation tracking. Sent: synthetic search queries derived from product type/category. Your store URL is checked against the response, but never sent in the prompt.

We do not transmit customer data, order data, or payment details to third parties.

4. Cookies

Our marketing site (zeferous.com) uses essential cookies only, for embedding the Shopify session in our admin app. We do not use advertising or cross-site tracking cookies.

5. Your rights (GDPR / CCPA)

You have the right to access, correct, export, or delete your data at any time. Email support@zeferous.com and we’ll respond within 30 days.

6. Data deletion

When you uninstall GEOptimizer from Shopify, we automatically receive the app/uninstalled webhook and mark your store inactive. Customer-data and shop-data deletion requests from Shopify (customers/redact, customers/data_request, shop/redact) are honored within 30 days. To request immediate deletion, email support@zeferous.com.

7. Security

We use industry-standard encryption (TLS 1.3 in transit, AES-256 at rest), HMAC-verified Shopify webhooks, and least-privilege access controls. We’ll notify affected merchants within 72 hours of any confirmed data breach.

8. Children’s privacy

Our products are for businesses. We do not knowingly collect information from anyone under 16.

9. Changes to this policy

We’ll post material changes on this page and notify active merchants by email at least 14 days before they take effect.

10. Contact

Privacy requests, security disclosures, and questions: support@zeferous.com.