Privacy Policy

Image SEO System (“we,” “us,” or “our”) operates the website imageseosystem.comand the related application that generates AI-powered alt-text for e-commerce product images (collectively, the “Service”). This policy applies to personal data we process as a controller. Where we process data on behalf of a merchant (for example, product data from a connected store), we act as a processor under that merchant’s instructions.

1. Information We Collect

We collect the following categories of information:

• Account information. Name, email address, and authentication credentials when you create an account.
• Store connection data. When you connect a Shopify or WooCommerce store, we receive OAuth access tokens or API keys and read product, image, and shop metadata needed to provide the Service. Credentials are encrypted at rest.
• Product images and metadata. Images and associated text (titles, existing alt-text, product details) that we process to generate and apply alt-text.
• Billing information. Subscription plan, billing status, and transaction history. Card details are collected and stored by our payment processor, Stripe — we do not store full card numbers.
• Usage and device data. Log data, IP address, browser type, pages viewed, and feature usage, collected via cookies and analytics tools.

2. How We Use Your Information

• To provide, operate, and maintain the Service;
• To generate, store, and apply AI alt-text to your product images;
• To process payments, manage subscriptions, and prevent fraud;
• To send transactional email (welcome, scan results, reports, billing);
• To monitor usage, enforce rate limits, and improve the Service;
• To provide support and respond to your requests;
• To comply with legal obligations and enforce our terms.

3. AI Processing of Images

To generate alt-text, we send product images and related text to our AI provider (OpenAI) for analysis. We instruct our AI provider to process this content solely to return a result to us and not to use it to train their models. AI-generated alt-text is a suggestion that you review and approve before it is applied to your store. We do not guarantee any particular SEO, ranking, or traffic outcome.

4. Merchant Customers’ Data

The Service is designed for store operators, not their shoppers. We do notcollect, request, or store personal data about a connected store’s end customers — we ingest only shop, product, and image records. For Shopify stores, we honor the mandatory GDPR webhooks (customers/data_request, customers/redact, and shop/redact).

5. How We Share Information

We do not sell your personal data. We share information only with service providers (“subprocessors”) who help us operate the Service, and when required by law or to protect our rights. Our key subprocessors include:

6. Cookies

We use cookies and similar technologies for authentication and analytics. See our Cookie Policy for details and choices.

7. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements. You may delete your account and disconnect stores at any time, which removes your encrypted credentials from our systems.

8. Security

We protect data using industry-standard measures, including encryption of OAuth tokens at rest (AES-256) and encryption in transit (TLS). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

10. Your Rights

Depending on your location, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing or withdraw consent. Residents of the EEA/UK (GDPR) and California (CCPA/CPRA) have specific rights, including the right to lodge a complaint with a supervisory authority. To exercise any right, contact us at support@imageseosystem.com.

11. Children’s Privacy

The Service is not directed to individuals under 16, and we do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version with an updated “Last updated” date and, where appropriate, provide additional notice.

13. Contact Us

Questions about this policy or your data? Contact support@imageseosystem.com. Data controller: [Company Legal Name], [Company Address].