Privacy Policy
Last updated: 24 October 2026
This policy explains how Serqo (the "App"), a Shopify application that generates SEO content, handles personal data and store data. The English version of this policy prevails over any translation.
1. Who we are
Serqo is operated by KARLINN SARL-S, a simplified limited liability company registered in Luxembourg under number B277372 (VAT LU34916518, business permit no. 10153305/0), whose registered office is at 19, rue de l'Industrie, L-8069 Bertrange, Luxembourg ("we", "us"). We are the data controller for the data described below. Contact: support@serqo.app.
2. Data we collect
2.1 Shopify store data
When a merchant installs the App, Shopify gives us access to the store through the scopes the merchant approves. We access:
- store identifiers: shop domain, primary domain, primary language and published languages, sales markets, store country;
- catalog content: titles, handles, SEO titles and descriptions, descriptions (HTML), images (URL and alternative text), tags, product type, product options, prices, collections, blog posts;
- subscription status and plan, as reported by the Shopify Billing API.
We do not access customer or order data.
2.2 Google account and Search Console data
If the merchant chooses to connect Google Search Console, we request the following Google OAuth scopes:
| Scope | Why we need it |
|---|---|
https://www.googleapis.com/auth/webmasters.readonly | Read-only access to list the Search Console properties of the account and read search analytics (queries, pages, impressions, clicks, click-through rate, average position) for the pages of the merchant's store. |
openid, email | Identify which Google account is connected, display it to the merchant ("connected as…"), and manage account changes and disconnection safely. |
The App never modifies anything in the merchant's Google account or Search Console.
2.3 Content generated by the App
We store the content generated for the merchant, the data snapshot it was generated from, and the previous version of any field before it is published, so that it can be reviewed and restored.
2.4 Support requests
If you contact us, we keep your e-mail address and the content of the exchange to answer you.
3. How we use the data
We use the data only to provide the App's features: collecting the content of a page and its search queries, generating SEO content for it, checking that content against the queries, publishing it to the store when the merchant asks for it, keeping a history that can be restored, managing the subscription and credits, and providing support. We do not sell data, we do not use it for advertising, and we do not build profiles of individuals.
4. Google API Services: Limited Use
Serqo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- Google user data is used only to provide and improve the user-facing features described in this policy, which are prominent in the App's interface;
- it is transferred to third parties only as necessary to provide those features (see section 5), to comply with applicable law, or as part of a merger or acquisition with the user's prior consent;
- it is never used or transferred for advertising, including retargeting or personalized advertising, and never sold;
- it is never used to train or improve generalized artificial intelligence or machine learning models;
- humans do not read it, except with the merchant's explicit consent for a specific support request, when necessary for security purposes or to comply with the law, or when the data has been aggregated and anonymized for internal operations.
5. Service providers
We rely on the following providers, bound by data processing terms, only to the extent needed to run the App:
| Provider | Purpose | Location |
|---|---|---|
| Shopify | App platform, store access, subscription billing | Canada / worldwide |
| Google sign-in and Search Console API | United States / worldwide | |
| Anthropic | AI text generation: receives the page content and the related search queries, never Google credentials. Under Anthropic's commercial terms, these inputs are not used to train its models. | United States |
| Supabase | Database hosting | European Union (Frankfurt, Germany) |
| Application hosting provider | Running the App's servers | European Union |
| Cloudflare | Hosting of this website and routing of support e-mails | Worldwide |
Transfers outside the European Economic Area rely on an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework) or on the European Commission's standard contractual clauses.
6. Security
All data travels over encrypted connections (HTTPS/TLS). Google refresh tokens are encrypted at rest and are never sent to the merchant's browser. Access to production systems is restricted to what is strictly necessary.
7. Retention and deletion
- Google tokens are deleted as soon as the merchant disconnects Search Console in the App or uninstalls the App, and access is revoked on Google's side when no other store uses the same Google account. Users can also revoke access at any time from their Google account security settings.
- Credits not used at the end of a billing cycle expire; unconsumed credits are lost on uninstall.
- When a store uninstalls the App, Shopify sends us a data deletion request 48 hours later; we then delete the store's data, including generated content and history, within 30 days.
- Support e-mails are kept for up to 3 years after the last exchange.
8. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to data portability. To exercise these rights, write to support@serqo.app. You may also lodge a complaint with the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD, cnpd.public.lu), or with the authority of your country of residence.
9. Legal bases
We process store data and Google data to perform our contract with the merchant (providing the App), support requests on the basis of our legitimate interest in answering them, and billing data to comply with our legal obligations.
10. Children
The App is intended for businesses and is not directed to children under 16.
11. Changes
We may update this policy. The date at the top shows the latest version. Material changes will be announced in the App.