Privacy Policy

1. What Topify does

Topify connects your Shopify store to Google Search Console (GSC) to pull read-only search performance data (e.g., queries, pages, impressions, clicks, CTR, positions, countries, devices) and visualize insights such as growth/decay trends, “Near-Top 5” keywords, cannibalization, and optional AI-assisted suggestions.

2. Information we collect

2.1 From Google (via OAuth)

When you connect a Google account, you grant Topify read-only access to the selected properties in Google Search Console.

• Scopes requested: https://www.googleapis.com/auth/webmasters.readonly (read-only GSC) and basic profile/email for account identification.
• Data pulled from GSC: site property identifiers, performance metrics (queries, pages, impressions, clicks, CTR, average position), dimensions (date, country, device), and other metadata exposed by GSC read-only APIs.
• Tokens: We store OAuth access/refresh tokens encrypted at rest to securely fetch data on your behalf. You may revoke access at any time in your Google Account or inside Topify (Disconnect).

2.2 From Shopify

When you install Topify on your store, Shopify shares store-level identifiers, domain(s), plan, and owner/admin contact details necessary to operate the app. We also receive webhooks related to app installation/uninstallation and basic store status.

2.3 From you

You may optionally provide labels, topics/clusters, annotations, and (in Growth/AI plans) business metrics used for modeling (e.g., revenue by page/category). You can delete this data in the app or by contacting us.

2.4 Usage data & cookies

We collect limited usage telemetry (e.g., feature interactions, error logs, device/browser, timestamps) to keep the Service reliable and improve UX. Our website and app may use essential cookies; we may use analytics cookies where permitted. You can control cookies via browser settings. We do not intentionally collect information about children under 16.

3. How we use information

We process data to:

• Provide and maintain the Service (dashboards, exports, alerts, AI suggestions);
• Troubleshoot, secure, and optimize performance;
• Communicate with you about changes, incidents, and support;
• Comply with law and enforce agreements.

AI features

Some features use machine learning or large language models. Outputs are probabilistic and should be reviewed by you before publishing. We do not use your Google user data to train generalized models.

4. Google API Services User Data Policy (Limited Use)

Topify’s use of Google user data complies with Google’s User Data Policy (including the Limited Use requirements):

• We only access, use, and store Google user data to provide or improve user-facing features within Topify.
• We do not sell Google user data.
• We do not use Google user data to serve ads or for advertising purposes.
• We do not transfer Google user data to third parties except (a) as necessary to provide or improve Topify (e.g., secure hosting/processing providers under confidentiality and data-protection terms), (b) to comply with law, or (c) with your explicit consent.
• Human access to Google user data is restricted and occurs only with your consent, for security/abuse prevention, to comply with law, or when data is aggregated and anonymized.
• You may disconnect Topify from your Google account at any time; upon disconnect or uninstall we revoke tokens and delete associated Google user data per Section 7.

5. Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, our legal bases include: Contract (Art. 6(1)(b)) to deliver the Service; Legitimate Interests (Art. 6(1)(f)) for security, product improvement, and fraud prevention; Consent (Art. 6(1)(a)) where required (e.g., optional analytics cookies); and Legal Obligation (Art. 6(1)(c)) for compliance.

6. Sharing and processors

We do not sell personal information. We may share with:

• Hosting & databases (e.g., cloud infrastructure, managed ClickHouse)
• Job queues / background workers
• Email delivery & support tools
• Product analytics / error monitoring (minimized, no Google user data unless necessary)

All vendors are bound by confidentiality and data-protection obligations and act as our processors. A current list is available on request at [email protected].

7. Data retention, access & deletion

• While your subscription is active, we retain Customer Data to provide historical charts, comparisons, and exports.
• Uninstall or disconnect Google: we revoke tokens immediately. We delete or anonymize related Google user data within 30 days, except where retention is legally required or strictly necessary for security/accounting (which we minimize).
• Your rights: access, rectification, erasure, restriction, portability, and objection (where applicable). To exercise rights or request deletion, email [email protected]. We may verify identity before fulfilling requests.

8. Security

We use industry-standard measures: encryption in transit/at rest, network isolation, role-based access, audit logging, backups, and least-privilege principles. No system is 100% secure; please notify [email protected] of any suspected issues.

9. International transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) for transfers.

10. Your choices

• Disconnect Google anytime in Topify (Settings → Connected Google account) or via your Google Account security page.
• Export data using built-in export tools while your account is active.
• Opt-out of optional analytics where offered in app settings or via cookie controls.
• Close account / uninstall app from Shopify; you can also email us to request deletion.

11. CCPA/CPRA (California)

We are a “service provider” to merchants for store data we process on their behalf. We do not “sell” or “share” personal information as defined by CPRA. California residents may exercise rights (access, deletion, correction, limit use of sensitive data) by contacting [email protected].

12. Children’s data

Topify is not directed to children under 16. If you believe a child has provided personal information, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified in-app or by email. Continued use of the Service after the effective date means you accept the updated policy.

14. Contact

• Email: [email protected]
• Security: [email protected]
• Help Center: https://help.topify.pro/