Privacy Policy

1. Purpose

This policy explains how Dave Loevel CHENDJOU SIHANOU collects, uses, discloses, retains and protects the information obtained through the Articlo app for Shopify. It is intended for the merchants who install Articlo and the members of their team. It is a translation of the French version, which prevails in case of discrepancy.

2. Who we are

Articlo is published by Dave Loevel CHENDJOU SIHANOU, a developer based in Quebec (Canada).

• Email: davesihanou@gmail.com
• Website: https://articlo.davechendjou.workers.dev

Articlo turns your Shopify catalog into a weekly editorial plan and into blog articles written in two to four languages, sourced and optimized for search engines, then shows you how they perform.

3. Information we collect

Articlo accesses your store only through the Shopify API, within the permissions you grant at installation: reading products, writing content (blogs and articles), writing translations, reading languages and reading the store's reports (visit statistics). If you decide to, Articlo also accesses Google Search Console, read-only, with the consent you give on Google's page.

Staff data. Articlo uses "offline" access tied to the store. It keeps neither the name nor the email of the members of your team who open the app. For each of them it only keeps their Shopify ID and the language of their Shopify admin, to show the app in French or in English; the language of the latest member to open the app is also used for the messages Articlo writes in the background (errors, publication notices). The other personal information you may choose to provide is the author name shown on articles and, if you connect Search Console, the email address of the Google account used.

Free text. The writing sample of your brand, your revision instructions, your custom article requests and the text you edit in Articlo (when you update the translations) are sent as is to the artificial intelligence provider you chose (section 7). Do not include personal information in them, in particular the names or contact details of customers or other people.

Payment information. Subscriptions are billed by Shopify on your Shopify invoice. We receive no card or bank account data.

4. Information we do not collect

Articlo requests no access to your customers, your orders or your payments. We therefore collect no information about your store's buyers: name, address, email, purchase history. The visit statistics we read are totals per page of your blog. Shopify ties the query that provides them to its protected customer data access, which also covers names, addresses, phone numbers and emails: Articlo reads and keeps none of them. From Google Search Console, we only read the figures of your blog pages and the searches that showed them, in the aggregated form Google provides: totals per search and per page, with nothing that identifies the person who typed them; Google itself leaves out searches that are too rare. We keep these searches in memory for at most one hour to show them to you, without storing them. The "Articlo SEO" embed of your theme only adds structured data and a stylesheet to article pages; it collects nothing about visitors.

5. Purposes

We use this information only to:

• suggest an editorial plan suited to your catalog, the season and your previous articles;
• find reliable sources, write the articles in your brand's voice and adapt them into your other languages;
• revise an article according to the instructions you give, or save the changes you make to it;
• choose the articles' images from your product photos;
• publish or schedule the articles, their translations and their SEO data on your store, without overwriting without your consent the changes you made to them in Shopify;
• show you the results of your published articles: visits, purchases, clicks, positions and searches (keywords) in Google;
• show the app in the language of your Shopify admin;
• manage your subscription and your article quota;
• ensure the security, proper operation and technical support of the app.

We do not sell your information, we do not use it for advertising and we do not use it to train artificial intelligence models.

6. Consent

By installing Articlo and accepting the permissions requested by Shopify, you consent to the processing described here. You may withdraw your consent at any time by uninstalling the app (section 9) or by writing to us. Withdrawal ends the service.

The connection to Google Search Console is optional: you authorize it on Google's consent page, for read-only access. You may remove it at any time with "Disconnect" in Articlo's settings, or from the security settings of your Google account; the rest of the service keeps working.

Articlo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements: this information is used only to show you your blog's statistics, is neither sold nor used for advertising or to train artificial intelligence models, and is not read by anyone at our company without your consent, except for security purposes or to comply with the law.

7. Disclosure to third parties and service providers

We disclose information only to the providers needed for the service, who act on our instructions and are bound by contractual confidentiality and security commitments.

Only the writing engine chosen in your settings receives the information needed for writing. No image generation service is used: the articles' images are your product photos. Source research consults public web pages through this engine (Anthropic's search tools, or Google Search for Gemini); only queries related to the article's topic are then sent. We may also disclose information when required by law or in a business transaction involving Dave Loevel CHENDJOU SIHANOU, subject to the protections provided by law.

8. Transfers outside Quebec and Canada

Some providers process information in the United States or in other countries. This is the case of our host, Cloudflare, an American company: the information Articlo keeps is stored at the location given in section 7, which may be outside Canada. Before any disclosure outside Quebec, we assess the privacy factors: sensitivity of the information, purpose, contractual protection measures and applicable legal framework. We govern each transfer by a written agreement. Transferred information may be accessible to the authorities of the country concerned, in accordance with its laws.

For merchants in the European Union, Canada benefits from an adequacy decision; transfers to the United States rely on our providers' safeguards: depending on the provider, their certification under the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses included in their data processing agreements.

9. Retention and deletion

• While you use Articlo: we keep your settings, plans and articles as long as Articlo is installed, so you can view, edit and republish them; your revision instructions and custom article requests remain in the app's task history, and these requests also in the article concerned. The admin language of each member of your team is kept as long as Articlo is installed.
• Statistics: Shopify and Google statistics, including the Google searches of your articles, are read when they are shown and kept in memory for at most 30 minutes (Shopify) or one hour (Google). They are never stored in our database.
• Google Search Console connection: kept until you disconnect it. When you click "Disconnect", we delete the account's email address, the access token and the chosen property, and ask Google to revoke Articlo's access; you can also remove this access from your Google account.
• On uninstallation: access tokens are deleted immediately, pending tasks are cancelled and the Google Search Console connection is deleted, with a revocation request to Google.
• After uninstallation: Shopify sends us an erasure request (shop/redact) 48 hours after uninstallation. As soon as we receive it, we delete all your store's data: settings, plans, articles, usage log, tasks, Google Search Console connection and the admin language of your team members.
• Published content: the articles, translations, images and metafields published on your store belong to you and remain there after uninstallation. You can delete them from your Shopify admin.
• Logs and backups: technical logs are kept for 7 days by our host. Our database can be restored to any state it was in during the last 30 days: a deleted piece of information may therefore remain for up to 30 days in this restore mechanism, which is only used in case of an incident. We make no other backup copy.
• AI providers: they keep requests for a limited time, according to their terms, to prevent abuse. As of October 2, 2026: at most 30 days at Anthropic (longer for a request flagged as violating its usage policies), 55 days at Google for the paid Gemini API. None of them uses these requests to train its models.

10. Security

We apply security measures suited to the nature of the information, including:

• access to the app restricted to users authenticated by Shopify, with a signed session token;
• strict separation of each store's data;
• verification of the signature of the notifications sent by Shopify;
• store access limited to the strictly necessary permissions, through tokens with a limited lifetime;
• secrets kept out of the source code, encrypted at our host;
• execution of the app in an isolated environment managed by our host, with no server to administer;
• encryption of communications (HTTPS) and of the database at rest, provided by our host;
• encryption of the Google Search Console access token (AES-256) and read-only access to Google, with a connection protected against forgery (signed link and state, verification cookie);
• sanitization of the generated content and of the text you edit, before publication;
• human review of articles offered by default before publication.

No measure is infallible. In the event of an incident presenting a risk of serious injury, we notify the people concerned, the Commission d'accès à l'information du Québec and, where applicable, the other competent authorities.

11. Your rights

Subject to the exceptions provided by law, you may:

• access the personal information concerning you;
• have it corrected if it is inaccurate, incomplete or equivocal;
• withdraw your consent to its use;
• obtain it in a structured, commonly used technological format (portability);
• request its deletion when it is no longer needed;
• file a complaint with the Commission d'accès à l'information du Québec (https://www.cai.gouv.qc.ca) or, as the case may be, the Office of the Privacy Commissioner of Canada or the data protection authority of your country.

To exercise these rights, write to the person in charge of the protection of personal information (section 12). We reply within 30 days and may ask you to confirm your identity.

12. Person in charge of the protection of personal information

• Name and title: Dave Loevel CHENDJOU SIHANOU, publisher of Articlo
• Email: davesihanou@gmail.com

13. Cookies and similar technologies

Articlo runs in the Shopify admin and authenticates you with Shopify's session tokens. It uses no advertising cookie or audience measurement tool. Shopify's scripts and fonts (App Bridge, Inter font) are loaded from its servers, under its own policy. The "Articlo SEO" embed adds no cookie to your storefront.

Only the connection to Google Search Console sets a technical cookie, articlo_google_nonce, on Articlo's domain: it ties Google's response to the browser that started the connection, only contains a random value, expires after 10 minutes and is erased at the end of the connection. The visit statistics shown by Articlo are those Shopify already measures on your store, under its own policy; Articlo adds no measurement tool.

14. Artificial intelligence

Articlo uses artificial intelligence models to produce editorial content. No decision about you is made based solely on automated processing. Generated content may contain errors: we recommend that you review each article, in each of its languages, before it is published, which the app offers by default; you can also edit its text yourself in Articlo. You remain responsible for the content published on your store.

15. Changes to this policy

We may change this policy, in particular when a provider or a feature is added; the date of the update appears at the top. Any significant change is announced to you in the app or by another appropriate means before it takes effect.

16. Contact us

For any question about this policy or about the protection of your information: davesihanou@gmail.com. This address is also the support address, shown in the "Need help?" box of Articlo's dashboard and on the help page (https://articlo.davechendjou.workers.dev/help).