BlogBuddy Privacy Policy

Last updated: August 3, 2026

BlogBuddy is a Shopify app that helps merchants write, edit, and improve their store's blog posts. It is operated by the BlogBuddy team ("we", "us"). This policy explains what data the app touches, why, and what we do with it.

Data we collect from your Shopify store

When you install BlogBuddy, we access your store's blog posts, blog settings, and basic shop details (store name, domain, plan, email) through Shopify's API. We use this data to show your articles inside the app, run the edits you ask for, and bill your subscription through Shopify. We do not read your customer data, orders, or payment information.

Data from Google Search Console (optional)

If you choose to connect Google Search Console, BlogBuddy requests read-only access to your Search Console data using the https://www.googleapis.com/auth/webmasters.readonly scope. With it we fetch clicks, impressions, average position, and search queries for your store's blog pages, and we show that report to you inside the app.

• We store the refresh token Google gives us, encrypted, so we can fetch your report without asking you to sign in every time.
• We cache the report numbers (clicks, impressions, positions, queries per page) so the page loads fast.
• We never write or change anything in your Google account. The access is read-only.
• We do not sell this data, share it with third parties, use it for advertising, or use it to train AI models.
• If you use the "Improve with AI" feature, the search queries for the one post you picked are sent to our AI provider (OpenAI) solely to draft a better SEO title and description for that post. The provider processes it to answer the request and does not use it to train models.

BlogBuddy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Search Console at any time from the app's Search Performance page. Disconnecting deletes the stored token and cached report data. You can also revoke BlogBuddy's access from your Google Account permissions page.

AI features

When you use an AI feature (generating or improving a post, titles, meta descriptions, alt text, or audio), the relevant article text is sent to our AI providers (OpenAI, and ElevenLabs for premium voices) to produce the result you asked for. We send only what the feature needs, and the providers do not use it to train their models.

Data storage and security

App data lives in a managed PostgreSQL database. Access tokens are stored encrypted. Traffic between your browser, our servers, Shopify, and Google is encrypted with TLS. Only the app itself and the operators maintaining it can access the database.

Data retention and deletion

We keep your data while the app is installed. When you uninstall BlogBuddy, Shopify notifies us and we delete your shop's data, including any Google tokens and cached Search Console reports, within 30 days. You can also email us at any time to request deletion.

Your rights

Depending on where you live (GDPR, CCPA, and similar laws), you can ask us what data we hold about your store, ask for a copy, or ask us to delete it. Email us and we'll sort it out.

Changes to this policy

If we change this policy, we'll update the date at the top. Meaningful changes will be announced inside the app.

Contact

Questions or requests: hello@tarun.codes