AdWorks Bid | SEO and AI Search Agency

CitedSEO for Shopify — Privacy Policy

Last updated: 12.08.2026

AdWorks.Bid (“we”, “us”, or “our”) operates CitedSEO, a Shopify application (“the App”). This Privacy Policy explains what data the App accesses, how it’s used, and your rights as a merchant or as a customer of a store using the App. It applies specifically to the Shopify version of CitedSEO. Our WordPress plugin has a separate privacy policy.


1. What Data the App Accesses

When a merchant installs CitedSEO, Shopify grants the App the following permissions, used only for the purposes below:

  • Products and collections (read/write) — to edit meta titles, descriptions, alt text, and generate schema markup.
  • Online store pages and navigation (read/write) — to edit page-level SEO content and audit internal linking.
  • Content — articles/blog (read/write) — to edit blog SEO fields and detect content decay.
  • Themes (read/write) — to install the lightweight app embed that applies redirects (wildcard, regex, 307, 410 rules) and to read theme structure for audits.
  • Store locations (read) — for the Local SEO / NAP consistency and LocalBusiness schema features.
  • Online store navigation (read/write) — for internal linking suggestions.
  • Translations (read/write) — for hreflang and Markets SEO audits, and to let you edit translated SEO fields.
  • Markets (read) — to audit hreflang configuration generated by Shopify Markets.
  • Legal policies (read) — to reference your store’s existing policies where relevant.
  • Orders (read only) — used solely to show a sales-trend summary alongside SEO progress in the Client Reports feature. We do not access customer personal information beyond what’s necessary for this aggregate view, and this data is never shared with third parties.

We request the minimum scopes needed for the features you actually use, and Shopify prompts you to approve any scope change before it takes effect.

2. Where Your Data Is Stored

Data the App generates or reads (SEO field content, schema records, redirect rules, task logs) is stored in our own secure database, hosted on Railway infrastructure. It is not shared, sold, or used for any purpose outside operating and improving the App for your store.

3. Third-Party Services You Choose to Connect

CitedSEO integrates with the following services only when you actively connect them in the App’s Integrations settings. No data is sent to these services unless you provide credentials or authorize the connection:

  • Google Search Console & Google Analytics 4 — for rank tracking and content-decay data pulled from your own GSC/GA4 property via OAuth.
  • Google PageSpeed Insights / Chrome UX Report (CrUX) — for Core Web Vitals monitoring.
  • SerpApi — an optional alternative to GSC for keyword rank tracking, using a key you provide.
  • Bing Webmaster Tools — optional, using a key you provide, for Bing indexation data.
  • OpenAI, Anthropic, Google AI (Gemini), Perplexity — optional “bring your own key” AI providers you may connect for AI-assisted content features. Your API key is stored encrypted and used only to make requests on your behalf; we do not use your key for our own purposes.
  • ClickUp — optional, for agencies who want SEO tasks logged to their own ClickUp workspace.

Each of these services has its own privacy policy governing how they handle data you send them directly.

4. AI Crawler Logging

The App logs the User-Agent and request path of AI crawlers (such as GPTBot, ClaudeBot, PerplexityBot) that request your store’s llms.txt, llms-full.txt, or schema endpoints, so you can see AI crawler activity in the AI Crawler Log feature. This data is limited to bot identification and request metadata — no personal or customer data is captured.

5. Billing

All subscription billing for Pro and Agency plans is handled entirely through Shopify’s Billing API. We never see or store your payment card details — Shopify manages that relationship directly.

6. Data Retention & Deletion

We retain App data for as long as your store has CitedSEO installed. If you uninstall the App:

  • We receive Shopify’s app/uninstalled webhook and stop processing new data immediately.
  • If a customer or merchant requests deletion of their data via Shopify’s mandatory GDPR webhooks (customers/data_request, customers/redact, shop/redact), we process that request within Shopify’s required timeframe.

7. Your Rights

Depending on your location, you may have rights under GDPR, CCPA, or other applicable privacy laws to access, correct, or delete your data, or to object to certain processing. To exercise these rights, contact us using the details below.

8. Changes to This Policy

We may update this policy as the App’s features change. The date at the top reflects the most recent revision.

9. Contact

AdWorks.Bid Email: hello@adworks.bid Website: https://adworks.bid/