Privacy Policy

MGO Data · Contact: b@mgodata.com

The short version

When you apply to work with us, you email us your name, your business website, and whatever you choose to tell us. We use it to review your application, run your audit, and reply to you. We do not sell your information. Ever. You can ask us what we have on you, ask us to correct it, or ask us to delete it, and we will.

Who we are

MGO Data is an ecommerce SEO and AI-visibility software company that builds DT 1.5, an approval-gated Shopify SEO automation platform. We also provide separate human SEO, advertising, and branding services.

Contact for anything in this policy: b@mgodata.com

What we collect

What you send us when you apply:

Our contact page does not submit anything to our servers. The application form opens a pre-filled email in your own mail app, addressed to b@mgodata.com. Nothing is sent unless you press send yourself. What you choose to send us typically includes:

Your name
Your business website address
Your email address
Anything you write in the message

What you give us if you become a client:

Business details needed to do the work, such as your business address, phone number, hours, and, where you grant it, the access or authorization needed to work on your site, ad accounts, or business listings on your behalf
Payment is handled by our payment processor, Stripe. We do not see or store your full card number.

What we collect if you create a DT 1.5 account:

Your email address and sign-in credentials, handled by our authentication provider (Supabase); we never see your password
During the current open beta, DT 1.5 account access requires no payment. If paid access returns, Stripe will process payment; we will not see or store your full card number
Platform credentials you choose to connect (for example a Shopify Admin API token or an AI provider key) are stored encrypted server-side, are never shown back to a browser, are never logged, and are used only to run the work you ask for and approve
The work product itself: your audit findings, drafted fixes, approval decisions, assistant conversations, and business facts you ask the assistant to remember, kept so your workspace persists between visits. Do not put passwords, API keys, customer lists, or other sensitive personal data into assistant chat or memory.

What DT Page Lens handles:

After you click Inspect this page, the browser extension reads the active page's URL, title, meta description, canonical URL, robots directives, headings, and JSON-LD. It also reads visible page text and link destinations locally to calculate aggregate counts, including readable text, headings, links, images, and missing alt attributes. This first inspection stays on your device.
Only after you confirm that this is a public page and click Compare with DT does the extension send bounded SEO metadata, schema types, aggregate counts, and the selected workspace identifier to connect.mgodata.com over HTTPS. It does not send page bodies, link destinations, form values, cookies, passwords, browser history, browser storage, or screenshots. URL fragments and known tracking parameters are removed before transmission; known sensitive URLs and local/internal destinations are blocked. Other public page parameters may be included because they identify the content. These checks cannot identify every private page: do not inspect private accounts, admin pages, or previews.
For each inspection, you can confirm the page is public and include a bounded sample of visible headings, paragraphs, and action labels in the local page workbench. These excerpts stay on your device and are not included in the comparison request. Hidden content, forms, editable fields, and dialog content are excluded from that sample. The public-content choice resets for each inspection.
The extension stores display preferences and the last selected workspace in Chrome extension storage. If you explicitly save them, one reference page and one editable change brief also remain in this browser until replaced or deleted. Use Delete saved page + draft in the extension to remove both, even without inspecting another page. Copying or downloading a brief creates a separate local copy that you control. Its MGO access and refresh tokens use Chrome's in-memory session storage and are removed when you sign out or the browser session ends. Tokens are never exposed to the inspected page.
After connecting a matching workspace, the extension can load its existing DT opportunities, task states, search-impact evidence, and sampled AI citations. Prepare this proposal sends the workspace identifier, exact page URL, and existing opportunity identifier to MGO. The server rechecks access and current evidence before scheduling a draft under DT's existing limits and approval rules. Local draft text and saved reference excerpts are not sent with this request.
Check workspace asks MGO's server to audit the selected workspace's primary public website under the existing DT 1.5 rules. It is a workspace-wide check, not a promise to change the inspected page. Page Lens itself cannot approve, publish, or change a website.

What we collect automatically:

Our website host may log standard technical data such as IP address and browser type. We do not run advertising trackers.
If you run an audit in the public demo or DT 1.5 dashboard, the website address you type is sent to our audit service so it can crawl that site's public pages. The address and public page content are processed to return the report. Do not submit private, password-protected, signed-preview, or customer-specific links.

How we use it

To review your application and run the audit or services you asked for
To email you results, invoices, and service updates
To do the marketing work you hired us for
To respond when you contact us

We do not use your information for anything else. We do not send marketing email unless you asked for it, and every marketing email includes a working unsubscribe.

What we do not do

We do not sell your personal information.
We do not share it with third parties for their marketing.
We do not buy lists or add you to lists.

DT Page Lens uses extension data only to provide, secure, and maintain its page inspection, local change planning, comparison, and connected DT workflow. It is not used for advertising, credit decisions, unrelated profiling, or generalized market research. MGO Data's use of information received through Chrome APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Humans do not read extension data except with the user's specific consent for support, when necessary for security or legal obligations, or in aggregated and anonymized operational reporting.

Who else touches your data

We use a small number of service providers to run the business. They process data only to provide their service to us:

Email: applications and contact go straight to our email inbox at b@mgodata.com; no form vendor sits in the middle
Stripe: human-service and any future software payments; Stripe handles your card, we never store it
Supabase: DT 1.5 account sign-in and app data
Cloudflare: website hosting and the servers that run audits and store connected credentials in encrypted form
AI model and answer-engine providers: when you use the Assistant or an AI-answer scan, the provider you select, or the provider clearly labeled as included with MGO, processes the prompt and the business/public-site context needed to answer it. Depending on what is enabled, this can include OpenAI, Anthropic, Google, Groq, Perplexity, xAI, Mistral, DeepSeek, or Moonshot. Connected API keys are sent only to that provider as request credentials, not placed into the prompt. Provider privacy and retention rules also apply.

If the work you hire us for includes correcting your business listings (part of the branding lane), we submit your public business information (name, address, phone, hours, website) to directories and data sources. That is the service itself, and that information is business information you asked us to publish or correct.

How long we keep it

Application emails: deleted within 12 months if you never become a client
Client records: kept while you are a client and for as long as tax and accounting rules require afterward
Page Lens comparison evidence is used to create the immediate comparison response and is not written to an extension-specific history. A full DT check follows the normal workspace retention described above. Local extension preferences remain until you clear extension data or uninstall it; session tokens end when you sign out or the browser session ends.

Your rights and data requests

Email b@mgodata.com and we will, within 30 days:

Tell you what information we have about you
Correct it
Delete it, unless we are legally required to keep it (for example, invoices)
Stop emailing you

We honor these requests for everyone, regardless of where you live. Note: we are a small business that does not meet the coverage thresholds of laws like the California Consumer Privacy Act (roughly $26.6 million in annual revenue or data on 100,000 or more consumers, per the California Privacy Protection Agency and Clym's 2026 applicability guide), but we follow the spirit of those laws anyway.

Children

Our service is for businesses. We do not knowingly collect information from anyone under 18.

Changes

If we change this policy, we will post the updated version here. If a change is significant, we will email active clients before it takes effect.

Contact

MGO Data · b@mgodata.com