Privacy Policy

When you install and use MetaForge, we collect the following data:

• Shop domain — your Shopify store URL (e.g. yourstore.myshopify.com), used to identify your account.
• Work email address — collected during installation to communicate with you about your account.
• Product data from Shopify — product titles, descriptions, tags, and product type, fetched via the Shopify API solely for the purpose of generating SEO metadata.
• Usage data — the number of SEO generations you have used, timestamps of generation activity, and your daily usage counts. This is used to enforce free trial limits and improve the service.
• Shopify access token — stored securely to authenticate API requests on your behalf. This token is never exposed in our UI or API responses.

We do not collect payment card details directly. Billing is handled by our payment processor.

• To provide the service — your shop domain and Shopify access token are used to fetch products and push generated SEO metadata back to your store.
• To generate SEO metadata — product titles, descriptions, and tags are sent to Anthropic's Claude API to generate meta titles, meta descriptions, and image alt text. No other personal data is sent to Anthropic.
• To enforce trial limits — usage counts are tracked to apply the 50-generation free trial cap and 10-per-day daily limit.
• To improve the product — aggregated, anonymised usage data (e.g. how many products are processed per session) may be used to understand how MetaForge is being used and to guide product improvements.
• To communicate with you — your email address may be used to send account-related communications such as upgrade reminders or important service notices. We do not send marketing email without explicit consent.

We do not sell your data. We share data only with the third-party service providers necessary to operate MetaForge:

• Anthropic — product content (titles, descriptions, tags) is sent to Anthropic's API to generate SEO metadata. Anthropic's privacy policy governs their handling of this data.
• Supabase — your shop record, product metadata, and usage data are stored in a Supabase-hosted PostgreSQL database. Supabase acts as a data processor on our behalf.
• Vercel — our application is hosted on Vercel's infrastructure. Request logs may be retained by Vercel in accordance with their privacy policy.
• Shopify — MetaForge interacts with the Shopify API on your behalf. Data flows between your store and MetaForge are governed by your Shopify Partner Agreement.

We do not share your data with any other third parties for marketing, analytics, or advertising purposes.

We retain your shop data — including your shop domain, email, access token, and generated product metadata — for as long as your account is active. If you uninstall MetaForge from your Shopify store or request account deletion, we will remove your data within 30 days of receiving a confirmed deletion request.

Anonymised, aggregated usage statistics that cannot be linked back to your store may be retained indefinitely for product improvement purposes.

Depending on your jurisdiction, you may have the right to access, correct, or delete the personal data we hold about your store and account. To exercise any of these rights, or to request complete account deletion, please contact us at:

calvin@metaforgeapp.com

We will respond to all verified requests within 30 days.

MetaForge uses a single session cookie: shopify_auth_state. This cookie is set during the Shopify OAuth installation flow to prevent cross-site request forgery (CSRF). It expires automatically after 10 minutes and is deleted once installation completes.

We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

If you have any questions about this Privacy Policy or how we handle your data, please reach out:

calvin@metaforgeapp.com