Last updated: 8 October 2026
Winking Toad SEO Fixer for Shopify is operated by Winking Toad (winkingtoad.com), India. Contact: support@winkingtoad.com.
This policy covers the Shopify app and its embedded pages. The winkingtoad.com website has a separate privacy policy.
Data we process
We process the following to provide and secure the app:
- Your
.myshopify.comdomain, your Shopify Admin API access token (encrypted), and your Shopify billing status. - Product and collection content you select; URL redirects you approve; and the previous and new values of changes made through the app, so Changes and undo works.
- Public-storefront audit results, keyword lists and usage limits.
- IP addresses, request logs and support messages, for security, fault diagnosis and support.
The app requests permission to read and write products. It requests permission to manage URL redirects only if you choose Allow redirects. It requests no customer, order or checkout access. Shopify Admin API access tokens are encrypted at rest.
AI, keywords and service providers
When you request an AI draft, we send the information needed for it to an AI provider. This may include the product or collection title, vendor, type, tags, options, description, your note, and, where needed, the first product image. We do not keep a separate copy of the prompt or draft; the AI providers may keep requests for a limited time under their own terms.
When you use Find keywords, we send the phrase you enter to DataForSEO.
We use:
- OpenAI, Google Gemini and Anthropic for AI features.
- DataForSEO for keyword estimates.
- Shopify for the app connection, approved changes and billing.
- Cloudflare for security and delivery, and Hostinger to host the app in Mumbai, India.
These providers may process data outside India under their own privacy terms. We do not sell data or use it for advertising.
The app uses no advertising or analytics cookies. Cloudflare may use necessary security cookies.
Retention and deletion
We keep app data while the app is installed. Shopify sends a shop-redact request after you uninstall. When we receive it, we delete the app token, store data, change history, audits, keyword lists and usage data.
We keep only a minimal shop-domain and billing/uninstall record, for as long as needed for legal, billing, fraud-prevention and support purposes. Server logs, support messages and encrypted backups are kept only as long as needed for those purposes and are then deleted.
Changes already applied to your store remain in Shopify until you change or remove them.
Your rights
You may ask for access, correction, export, deletion, restriction of, or objection to processing by emailing support@winkingtoad.com. You may also complain to the relevant privacy regulator.
We respond to Shopify's mandatory privacy requests. The app stores no customer data.
Changes
We may update this policy by changing the date above.
← Back to Winking Toad