Privacy Policy - Winking Toad SEO Fixer for Shopify

Last updated: 22 October 2026

Winking Toad SEO Fixer for Shopify is operated by Devtech (Devendra Sharma), B 30 Vidyut Nagar, Ajmer Road, Jaipur 302021, India (winkingtoad.com). Contact: support@winkingtoad.com.

This policy covers the Shopify app and its embedded pages. The winkingtoad.com website has a separate privacy policy.

Data we process

We process the following to provide and secure the app:

Your .myshopify.com domain, your Shopify Admin API access token (encrypted), and your Shopify billing status.
Product and collection content you select; URL redirects you approve; and the previous and new values of changes made through the app, so Changes and undo works.
Public-storefront audit results, keyword lists and usage limits.
If you choose to use the app with Claude (see below): a record of that connection, made up of a one-time pairing code and connection tokens, which we store only in hashed form.
IP addresses, request logs and support messages, for security, fault diagnosis and support.

The app requests permission to read and write products. It requests permission to manage URL redirects only if you choose Allow redirects. It requests no customer, order or checkout access. Shopify Admin API access tokens are encrypted at rest.

AI, keywords and service providers

When you request an AI draft, we send the information needed for it to an AI provider. This may include the product or collection title, vendor, type, tags, options, description, your note, and, where needed, the first product image. We do not keep a separate copy of the prompt or draft; the AI providers may keep requests for a limited time under their own terms.

When you use Find keywords, we send the phrase you enter to DataForSEO.

We use:

OpenAI, Google Gemini and Anthropic for AI features.
DataForSEO for keyword estimates.
Shopify for the app connection, approved changes and billing.
Cloudflare for security and delivery, and Hostinger to host the app in Mumbai, India.

These providers may process data outside India under their own privacy terms. We do not sell data or use it for advertising.

The app uses no advertising or analytics cookies. Cloudflare may use necessary security cookies.

Using the app with Claude (optional)

You can connect your store to Claude, Anthropic's assistant, so that you can ask it about your audit results. This is off until you choose it: in the app, open Settings and press Get pairing code, then type the code on Winking Toad's sign-in page when Claude asks. The connection is read-only. Claude cannot change your store, start an audit, or apply a fix.

When you ask Claude a question that needs your results, we send it from our server to Claude, which is running under your own Claude account. What we send depends on the question and can include:

the status of your audit and your site health score and issue counts;
the problems the audit found, with example page addresses and the suggested next step;
your broken links, and the page addresses linking to them;
the history of changes the app made to your store, including the previous and new values (for example SEO titles, descriptions and image text, shortened when long).

Some of this text comes from your public website and product data. Once it reaches Claude, Anthropic handles it under your Claude account and its own privacy policy, not ours. We do not receive your Claude conversations.

We keep a record of the connection (the pairing code and tokens in hashed form, not readable). The pairing code works once and expires after 10 minutes. A connection stops working when you press Disconnect Claude in Settings, when you uninstall the app (at once), or if it is not used for 30 days. When Shopify sends the shop-redact request after an uninstall, we delete these records.

Retention and deletion

We keep app data while the app is installed. Shopify sends a shop-redact request after you uninstall. When we receive it, we delete the app token, Claude connection records, store data, change history, audits, keyword lists and usage data.

We keep only a minimal shop-domain and billing/uninstall record, including how many free AI drafts the store has used so the free allowance is not repeated, for as long as needed for legal, billing, fraud-prevention and support purposes. Server logs, support messages and encrypted backups are kept only as long as needed for those purposes and are then deleted.

Changes already applied to your store remain in Shopify until you change or remove them.

Your rights

You may ask for access, correction, export, deletion, restriction of, or objection to processing by emailing support@winkingtoad.com. You may also complain to the relevant privacy regulator.

We respond to Shopify's mandatory privacy requests. The app stores no customer data.

Changes

We may update this policy by changing the date above.

← Back to Winking Toad