Privacy Policy
Last updated June 2, 2026
Krawfly ("we", "us") provides a GEO app for Shopify catalogs. This policy explains what data we process when you install and use Krawfly, and the choices you have.
1. Data we collect
To analyze and prepare your catalog for generative engines, Krawfly accesses product data from your Shopify store via the official Shopify API — titles, descriptions, tags, images, prices and locale settings. We also store account details (store domain, contact email) and usage data needed to operate the service.
2. How we use data
Product data is used solely to compute GEO Readiness Scores, generate product signals for AI agents, track AI citations, and apply changes you approve. We do not sell your data, and we do not use your catalog to train third-party foundation models.
3. AI processing
GEO suggestions are produced by large language models. Relevant product fields may be sent to AI providers strictly to generate suggestions for your store. Outputs are returned to you for review before anything is applied.
4. Data retention
We retain product snapshots and version history so you can revert changes. You can request deletion of your data at any time by emailing us; uninstalling the app triggers deletion in line with Shopify's requirements.
5. Contact form
When you contact us through the website, we process your name, email address, message and privacy consent only to reply to your request. We do not add you to marketing lists unless you separately opt in.
6. Cookies & local storage
The public website does not currently use advertising cookies or retargeting pixels. We may use local storage to remember your theme preference. See our Cookie Policy for details.
7. Sharing & subprocessors
We share data only with subprocessors that help us run the service, each bound by confidentiality and data-protection obligations. Our current subprocessors are:
| Provider | Purpose | Location |
|---|---|---|
| OpenAI, Inc. | GEO signal generation (fallback) | United States |
| Google LLC (Gemini) | GEO signal generation (primary) | United States / EU |
| Perplexity AI, Inc. | AI citation tracking | United States |
| Brave Software, Inc. | Search context for GEO analysis | United States |
| Neon Inc. | Database hosting (PostgreSQL) | United States |
| DigitalOcean, LLC | Server & application hosting | Germany (FRA1) |
| Cloudflare, Inc. | CDN, DDoS protection, SSL | Global |
| Upstash, Inc. | Session & cache storage (Redis) | Global / EU |
| Resend, Inc. | Transactional email delivery | United States |
Transfers of personal data to subprocessors outside the European Economic Area are governed by Standard Contractual Clauses or equivalent safeguards.
8. Your rights
Depending on your jurisdiction you may have rights to access, correct, export or delete your personal data. Contact us to exercise them.
9. Contact
Questions about this policy? Email [email protected].