Privacy Policy — GEO-Score for Shopify
Last updated: October 14, 2026
GEO-Score is a Shopify app published by Be-Found. This policy covers only the GEO-Score Shopify app — it is separate from, and does not apply to, geo-score.online (a different product with its own privacy policy).
What GEO-Score reads
GEO-Score requests read-only access to three Shopify scopes:
| Scope | What it gives access to | Why GEO-Score needs it |
|---|
read_content | Pages, blog posts, and their metafields | To list them in the app and analyze the text on those pages |
read_products | Products, collections, and their metafields | To list them in the app and analyze product and collection pages |
read_legal_policies | Your store's policy pages (returns, privacy, terms, shipping) | To analyze policy pages when you choose to score them |
To analyze a page, GEO-Score also loads its public address on your online store, the same way a visitor or an AI crawler would.
What GEO-Score does not access
- No customer data. No names, no email addresses, no addresses.
- No orders, no order history, no cart data.
- No payment or financial data.
- No write access of any kind. GEO-Score cannot change a product, a page, or a theme.
What GEO-Score stores
- Your shop domain and the Shopify access token Shopify issues to the app when you install it, so the app can read your store.
- A list of the products, collections, pages, blog posts, policies and homepage the app can analyze: their titles, handles, public addresses and whether they are published.
- The results of each analysis: the page address, the scores, the recommendations, and the details extracted from the page that explain them. The full page as downloaded is not saved in the database; the analysis worker keeps it in memory for at most 24 hours.
- Your plan and the number of analyses run, to apply your plan's limits.
- Your storefront password, only if you enter one (see below).
- No customer personal data — none is ever requested, so none is ever stored.
Your storefront password
If your online store is password-protected (every Shopify development store is, and so is any store that hasn't launched yet), GEO-Score cannot read your pages without the storefront password. You can choose to enter it on the app's dashboard or Settings page. This is the password visitors type on your store's password page, found under Online Store → Preferences in your Shopify admin — not your Shopify account password.
- Why: so the analysis can get past the password page and read your pages the way a visitor would.
- How it is protected: it is stored encrypted (AES-256-GCM), is never shown again after you save it, is never written to logs, and is only ever entered on your own store's password page — on your myshopify.com address or your primary domain.
- When it is deleted: immediately when you remove it in Settings, and immediately when you uninstall the app.
How long data is kept
- Analysis results are kept while the app is installed, so you can see your progress over time.
- When you uninstall the app, the Shopify access token and your storefront password are deleted right away, and your shop is marked as uninstalled.
- Everything else for your shop — the resource list, analysis results and usage records — is permanently deleted when Shopify sends its
shop/redact request, which Shopify sends 48 hours after you uninstall.
Your GDPR rights
GEO-Score implements Shopify's three mandatory GDPR webhooks:
| Webhook | What happens | When |
|---|
| customers/data_request | GEO-Score confirms it holds no customer data | On receipt |
| customers/redact | No customer data is held, so there is nothing to delete | On receipt |
| shop/redact | All remaining data for your shop is permanently deleted | On receipt — Shopify sends it 48 hours after uninstall |
You also have the standard rights of access, rectification, erasure, restriction, portability, and objection over any data GEO-Score holds about your shop. Contact us at app@geo-score.online to exercise any of these rights.
Where your data is hosted
GEO-Score's app, analysis worker and database run in the EU (Netherlands). The one exception is the Google Knowledge Graph check described below, which sends a small number of names to Google.
Sub-processors
Third parties that GEO-Score relies on:
- Railway (Railway Corp.) — application hosting and database, EU region.
- Shopify — the platform GEO-Score runs on and reads store data through.
- Google (Google LLC) — the Knowledge Graph Search API, used by the "Knowledge Graph" metric when this check is enabled on our side. For each analyzed page it receives up to 10 names taken from that page's public text and structured data (for example your brand, product or organization names, or the name of a blog post's author), to check whether Google knows them as entities. It receives nothing else: no page content, no store credentials, no customer data.
Changes to this policy
If this policy changes materially, the "Last updated" date above will change and, where required, we will notify installed shops.
Contact
GEO-Score is published by Be-Found. For any privacy question or request, contact app@geo-score.online.