Privacy Policy

Last updated: August 23, 2026

What we collect

Account data: your email address. We use passwordless sign-in (magic link), so we never store a password.

Site & content data: the domain you connect, its crawled homepage content, keyword research results, generated article drafts and their quality scores, and — if you connect a CMS — the API key or access token for WordPress, Webflow, Ghost, or your webhook endpoint, stored so we can publish on your behalf.

Payments: handled entirely by Stripe. We store only your Stripe customer and subscription identifiers — never card numbers.

How we use it

To operate the service: crawling the domain you connect, researching keywords, generating and quality-scoring articles, publishing to your CMS, and billing. Article generation sends your site's crawled content and target keywords to OpenRouter (which routes to Anthropic's Claude models) to produce outlines and drafts. If you enable real keyword data, search volume and difficulty are looked up via DataForSEO. We do not sell your data or use it for advertising.

Where it lives

Data is stored on Cloudflare's network (Workers + D1). Subprocessors: Cloudflare (hosting, database, transactional email), OpenRouter/Anthropic (article generation), DataForSEO (keyword data, optional), Stripe (payments), and the CMS you connect (WordPress, Webflow, or Ghost — your own account, not ours). Product analytics and session recordings run on Umami, which we host ourselves — that data is not shared with any third-party analytics vendor.

Cookies & analytics

One session cookie for authentication — no advertising cookies. We use Umami, which we host ourselves, for product analytics: it is cookieless and served first-party from our own domain. We do record how people move through the product — clicks, scrolling, and navigation — so we can find and fix the confusing parts. Recordings mask every form input: passwords, email addresses, CMS API keys, and anything else you type into a field are never captured, and recordings are deleted after 30 days. We honor the Do Not Track browser signal — switch it on and we record nothing at all.

Retention & deletion

Account, site, and article data is retained while your account is active. Email rankwriter@shovelware.ai to delete your account; we remove personal data within 30 days, except records we must keep for tax or accounting purposes.

Contact

Questions about this policy: rankwriter@shovelware.ai.