GeoKit Privacy Policy

What data we collect

GeoKit accesses the following data from your Shopify store:

• Product data — titles, descriptions, images, prices, variants, SKUs, barcodes, categories, and product types. Used to generate llms.txt files, run product audits, and power the AI Simulator.
• Store policies — shipping, refund, and privacy policies. Used to check if AI agents can answer customer questions about your store.
• Theme information — your active theme name and version. Used to check Online Store 2.0 compatibility for app embeds.
• Navigation menus — your online store navigation structure. Used for generating structured data (BreadcrumbList schema).
• Market/shipping regions — which countries your store ships to. Used for the shipping region audit and AI Simulator country filter.
• AI traffic events — when a visitor arrives from an AI platform (ChatGPT, Gemini, Perplexity, etc.), we record the source name, the page visited, and the timestamp. No personal visitor data (IP addresses, cookies, names, emails) is collected.

What we do NOT collect

• Customer personal information (names, emails, addresses, payment details)
• Order or sales data
• IP addresses of store visitors
• Browsing behavior beyond AI referral source detection

How we use your data

• To display your AI readiness score and product audit results
• To generate llms.txt and llms-full.txt files for AI crawlers
• To show AI traffic analytics (which AI platforms send visitors)
• To run the AI Shopping Simulator (comparing your products with competitors)
• To inject structured data (JSON-LD) into your theme

We do not sell, rent, or share your data with third parties. We do not use your data for advertising.

Third-party services

GeoKit makes API calls to:

• Shopify Storefront MCP — to search your store's catalog as an AI agent would. This is Shopify's own API.
• Shopify Catalog MCP — to search the global Shopify catalog for competitor comparison. This is Shopify's own API.
• IndexNow API — to notify search engines when your products change (paid plans only). Only your store URL and product URLs are submitted.

No personal or customer data is sent to any third-party service.

Data storage

• All app data is stored in a database managed by GeoKit's server infrastructure.
• AI traffic events are retained for a maximum of 90 days and automatically pruned.
• Audit scores are retained for historical tracking and deleted on app uninstall.

Data deletion

When you uninstall GeoKit, all your data is permanently deleted within 48 hours. This includes:

• Session data
• Generated llms.txt content
• Audit scores and history
• AI traffic events
• Saved simulator reports
• App settings (IndexNow keys)

You can also request data deletion at any time by emailing us at privacy@krylli.com .

GDPR compliance

GeoKit complies with the General Data Protection Regulation (GDPR):

• Data minimization — we only access the store data needed for the app's features.
• Right to deletion — all data is deleted on uninstall, or on request via email.
• Customer data requests — GeoKit does not store customer personal data. If Shopify forwards a customer data request, we confirm no customer data is held.
• Compliance webhooks — we handle all mandatory Shopify compliance webhooks (customer data request, customer redaction, shop redaction).

Cookies

GeoKit uses a single cookie (i18n) to remember your language preference within the app. No tracking cookies are used.

Changes to this policy

We may update this policy from time to time. Changes will be reflected in the “Last updated” date above.