1. Who we are & scope
Growth Journey is a Shopify SEO and search reporting application. The operator and privacy contact are listed in the contact section below. This policy covers the public website and the application; Google and Shopify also have their own privacy policies for their services.
2. Information we collect
From Shopify: store identifiers and domain, authorized storefront resources such as product, collection and page content, SEO metadata and image information needed for SEO checks. From Google, only after your authorization: your account email and name, accessible Search Console property URLs and permissions, and search performance data such as dates, search queries, page URLs, countries, devices, clicks, impressions, click-through rates and average position. We also process authorization credentials, connection state, sync times and error information to operate the integration. If you contact support, we receive the information you send. This static website uses no analytics SDK, advertising tracker, cookies or browser storage. The hosting provider may process standard access logs such as IP address, requested URL, time and browser information to serve and secure the website.
3. Google permissions & why we need them
We request https://www.googleapis.com/auth/webmasters.readonly to identify a Search Console property matching your store and read its search analytics; https://www.googleapis.com/auth/userinfo.email to identify the connected account; and https://www.googleapis.com/auth/userinfo.profile to display the account name. Offline access allows the application to refresh reports while the connection is active, without asking you to sign in every day. We do not request Gmail, Drive, contacts or calendar access, and do not modify Search Console properties. Google authorization takes place in the app only after you choose Connect Google.
4. How we use information
We use store content to check SEO and present issues and evidence; Google account information to identify your connection; Search Console data to display your store’s search reports and help you prioritize SEO work; credentials to retrieve and refresh those reports; and operational information to resolve failures and protect the service. Google data is used only to provide these user-facing features. We do not sell Google user data, use it for personalized advertising, transfer it to data brokers, or use it to develop, improve or train generalized AI or machine learning models.
5. Sharing & human access
We exchange information with Google to authorize the connection and retrieve reports, and with Shopify to provide store features. Infrastructure providers process information only as needed to host, store, secure and operate the service, under instructions to protect it. We do not share Google user data with advertisers or unrelated third parties. Human access to Google user data is limited to your explicit consent for particular data, security investigations, applicable legal obligations, or aggregated and anonymized internal operations as permitted by Google’s Limited Use requirements. If a merger or asset transfer involves this information, we will obtain prior explicit user consent where required. We may disclose information when legally required or necessary to protect rights and security, subject to applicable law and Google’s policies.
6. Storage & security
Google authorization is handled by the application backend. Refresh tokens are encrypted before storage and are associated with the relevant store; they are not stored in this website or its browser storage. Connection records contain the account name and email, store domain, matched property and cached reports. We restrict access to information to what is needed to operate the service. No method of storage or transmission provides absolute security. Infrastructure may process information outside your location, subject to applicable data protection requirements.
7. Retention, disconnection & deletion
We retain Google connection information, the encrypted refresh token and cached reports while your Google connection is active so the reporting feature can operate. To stop access and delete the active Google connection data, open Technical SEO → Google Search Console → Disconnect in Growth Journey. After successful token revocation, the connection record, stored token and its cached reports are removed from active storage. If disconnection fails, retry or contact support. You can also revoke authorization at https://myaccount.google.com/connections revocation stops further access but does not itself request deletion of data already stored by us. Contact us to request deletion of other application data, support records or retained copies. Any legally required records or isolated backups are retained only for the necessary legal or recovery period and are not used for continued reporting.
8. Your choices & rights
Google connection is optional. You may decline authorization and still use features that do not require Google data. You may disconnect, revoke access, or contact us to request access, correction, export or deletion of your information, subject to applicable law. We may ask for enough information to verify your authority over the store before fulfilling a request.
9. Google API Services User Data Policy
Growth Journey’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. See https://developers.google.com/terms/api-services-user-data-policy Growth Journey uses Google APIs for store search reporting. It does not use them to create, facilitate or distribute AI-generated non-consensual intimate imagery (AI NCII) or to violate the rights of others.
10. Children & policy changes
Growth Journey is intended for merchants and authorized store administrators, not children. We do not knowingly collect children’s personal information. We may update this policy as the service or legal requirements change, update the date above, and notify users of material changes where required. A new purpose for Google user data will require appropriate disclosure and consent before use.
Contact
Operator: EMERGENT INTELLIGENCE TECHNOLOGIES LIMITED
Support & privacy requests: service@magicat.ai