Privacy Policy

This policy explains what Christopher Nixon, 420 West Golf Road, Libertyville, IL 60048, United States ("NameIO", "we") collects when you use NameIO, why, who processes it, and the choices you have. Effective October 25, 2026.

What we collect

• Your account. Your name, email address and profile picture from Google when you sign in, your organization and team details, which version of the Terms you accepted and when, and, for each signed-in session, its IP address and browser.
• Your projects. The store URL, brand, category, competitors, buying questions and other settings you save, and the results NameIO collects for them: AI answers, citations, search data, rank history, site-audit findings, page-speed reports and reports.
• Fix drafts. When your AI assistant drafts a fix for a page of your store, or you paste in its reply, NameIO saves the draft: the page it's for, the questions it targets, the search title, meta description, page section, questions and answers, the assistant's reasoning, who saved it, and the name of the app that sent it (or that it was pasted in). To build the brief for that draft and check it, NameIO reads that page of your store, as any visitor could, and keeps the page's title, meta description and main heading, the first 20,000 characters of its text, which kinds of structured data it has, and the product details in that data (name, price, availability, image and SKU). After you mark a fix applied, NameIO can read the page again to check that the change is there.
• Google Search Console and Google Analytics, only if you connect them: the Google account you connect with (its email address and ID), NameIO's access tokens for that account (encrypted), the properties you pick, and the reports NameIO fetches for you. We ask Google only for read-only access.
• Connected assistants. When you connect an AI assistant, NameIO keeps the connection: which app it is, the access you allowed (read-only or changes) and its sign-in tokens. It also keeps any API keys you create, stored hashed, with when each was last used.
• Shopify, only if you connect your store. See "Shopify" below.
• Billing. Your plan, credit balance, invoices and the email address billing uses. NameIO keeps a copy of your billing record from Autumn. Card details go straight to Stripe; NameIO never sees or stores them.
• Support. What you send us by email.
• Service logs. Technical records such as IP address, browser, request headers and errors, kept for security and debugging. An error record or trace can also include your account and project IDs, the web addresses NameIO fetched, and keywords, domains or other text from the request that failed.

The free store check

You can use the free store check at https://app.getnameio.com/check without an account.

• NameIO compares what you enter (your store's website, brand, what you sell, and up to two competitor websites and names) with ChatGPT answers it collected in advance for that category. Your website, brand and competitors aren't sent to ChatGPT, DataForSEO or anyone else, and NameIO doesn't store them. NameIO only notes which category was checked, with nothing about you, so it can collect or refresh that category's answers.
• If you choose Track all 20 questions free, NameIO puts what you entered in a cookie, check_save, so your sign-up can start from your check. The cookie stays in your own browser and NameIO keeps no copy. NameIO removes it once your setup is saved or you skip it, and it expires after 24 hours either way.
• To keep the check available, NameIO limits how many checks and saves one network can make in a minute. The limit uses your network address (an IPv6 address is grouped with its neighbours) through Cloudflare's rate-limiting service. NameIO doesn't store the address or put it in its own logs.

Like every request to NameIO, a check's request, including your network address, appears in the logs Cloudflare keeps for up to 7 days (see "How long we keep it"). While your browser holds the check_save cookie, it sends it with each request to https://app.getnameio.com, and those logs can include it too.

How we use it

To run NameIO for you: collect and show the data you ask for, bill you, keep the service secure, and answer support requests. We do not sell personal data, and we do not use it for advertising.

Who processes it

We use these providers, each only for its part of the service:

When NameIO collects answers to your tracked questions, when you start a check or on its schedule, the questions, which can name your brand and competitors, are sent through DataForSEO to the AI services being checked (OpenAI's ChatGPT, Google's Gemini and AI Overviews, and Perplexity). A prompt you try in Prompt Explorer is sent the same way to ChatGPT, Gemini or Perplexity. Search, backlink, page-speed and local-business lookups send DataForSEO the keywords, websites, page addresses, business names and map locations you look up. If you use IndexNow, NameIO sends the URLs you submit to Bing (or to Yandex or Yep if Bing doesn't take them), and IndexNow shares them with the other search engines that use it.

When you audit a website, NameIO's crawler visits it, identifying itself as NameIO-Audit/1.0. On the paid plan, an audit can render JavaScript instead, with Cloudflare's browser opening the pages: when you turn on Render JavaScript, when you use Scan my website on the dashboard, and in the first audit NameIO starts by itself when you add a project's website. Separately, on the paid plan, an audit with page-speed checks on has DataForSEO load up to 10 of its pages to measure page speed. When NameIO reads your site for project setup or a fix draft, it identifies itself as NameIO-Onboarding/1.0.

AI assistants you connect to NameIO (for example Claude, ChatGPT or Cursor) receive whatever they ask NameIO for on your behalf. That can include your project data, a fix brief with the text NameIO read from your page, and your Search Console and Analytics data if you connected them. An assistant you allow to make changes can also act in your projects as you could: create projects; save fix drafts, reports and settings; delete audits, reports and saved keywords; start checks, audits and rank checks that use your credits; and turn on a report's share link. Even an assistant you allow only to read can run lookups that use your credits. No assistant can publish to your store or roll a change back: only you can, in the app. Assistants are your choice, and their own privacy terms apply.

If you or your assistant share a report, anyone with its link can open the whole report, including any AI answers, competitor names, fix drafts and Search Console or Analytics numbers in it, and link previews show its title, website and the first line of its summary. Turning sharing off, deleting the report or archiving the project stops the link, though a copy already loaded can keep loading for up to a minute.

Shopify

If you connect your Shopify store, NameIO keeps its access tokens for the store, encrypted, and uses them only to publish the fixes you choose and to roll them back. NameIO reads your store's domains, and the title, search title, meta description and description of the product a fix is for, when you open that fix, publish it or roll it back. Through the connection it doesn't read your orders, customers, prices or theme. When you publish a fix, NameIO keeps a copy of the fields it writes as they were just before, so you can roll the fix back, and deletes the copy once you do. It also keeps a record of each publish: the store, the product, which fields changed, and who published or rolled it back and when. Nothing NameIO reads through your Shopify connection is sent to an AI assistant or model.

If you add Shopify's crawler signature so audits can reach your store, NameIO keeps it, encrypted, with the project and uses it only when auditing that store.

NameIO deletes its access tokens as soon as you disconnect the store or remove the app. It deletes the copies when Shopify asks it to (48 hours after you remove the app), and in any case 30 days after you disconnect or remove it.

Google user data

NameIO's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Search Console and Analytics data only to show you your own reports and to power features you use in NameIO, including passing it to an AI assistant you connect when that assistant asks for it on your behalf. We do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to you. A report you share, such as a fix's results, shows the Search Console and Analytics numbers in it to anyone who has the link, until you turn sharing off, delete the report or archive the project. We do not use the data for advertising, and no person reads it unless you ask us to for support, for security, or as the law requires.

Cookies

NameIO uses only the cookies it needs to work:

• the ones that keep you signed in to https://app.getnameio.com, including short-lived ones set while you sign in with Google;
• sidebar_state, set for 7 days when you open or collapse the sidebar. The app doesn't read it back yet, so the sidebar always starts open;
• check_save, set only if you choose Track all 20 questions free on the free store check, for up to 24 hours.

The app also keeps a few settings in your browser's own storage, such as your theme, the last project you opened, your filters and your recent searches. They stay on your device.

NameIO runs no analytics, advertising or referral tracking, and https://getnameio.com sets no cookies. If that ever changes, we will update this policy and ask first where the law requires it.

How long we keep it

• Account and project data: while your account is open, with three exceptions. AI answers and their citations are deleted 13 months after NameIO collects them, apart from any you or your assistant copy into a report or project notes, which stay until you delete them. The research log your assistant keeps for a project is cut to the last 90 days each time it adds an entry. An export file you download expires after an hour.
• Things you delete: audits, reports and saved keywords you delete are removed straight away. NameIO keeps the search numbers it fetched for a keyword (search volume, cost per click, difficulty), and a keyword you remove from a rank tracker keeps its past positions so its history stays visible; both stay with the project until you delete your account. Fix drafts can't be deleted yet. Dismissing one deletes the text of your page that NameIO kept for it, but keeps the page's title, meta description, main heading and product details.
• Sign-in records: the IP address and browser recorded for a sign-in are kept with that session. Signing out deletes them; a session that simply expires can stay with your account until you delete it.
• Assistant connections: until you remove them in Settings or delete your account. An assistant's access lasts a day at a time and lapses after 30 days unused. API keys last until you revoke them.
• Archived projects: archiving a project hides it and pauses its checks and its shared report links. Restoring it turns them back on, with the same links. NameIO keeps its data, including its Google and Shopify connections, so you can restore it; the time limits in this section, such as 13 months for AI answers, still apply. To have that data erased, ask us to delete your account (see "Your rights").
• Cached search results, Prompt Explorer answers and Google reports: 7 days, or sooner when you disconnect Search Console. NameIO otherwise reads Search Console and Analytics when you look at them and doesn't keep the results, apart from reports and notes you or your assistant save.
• Google connections no project uses any more: removed within a day or two. NameIO also revokes its access at Google once no NameIO connection uses that Google account. A connection an archived project still has counts as in use.
• Shopify: as described under "Shopify" above.
• The free store check: NameIO stores nothing about you. It notes which category was checked for up to 7 days. The check_save cookie stays in your browser for up to 24 hours.
• Billing records: when you delete your account, NameIO deletes its own billing records and your customer record at Autumn and Stripe. Stripe keeps the invoices and payment records that tax and accounting law require it to keep.
• Service logs: Cloudflare keeps request logs, error logs and traces, which include network addresses and request headers, for up to 7 days.
• Backups and background jobs: database restore points, and the working state of finished background jobs such as audits and checks, are kept for up to 30 days, so deleted data leaves them within 30 days.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your personal data, or object to how we use it. Email chris@getnameio.com from your account's address and we will respond within 30 days.

Deleting your account erases your account and every project in it, archived ones included. It also cancels any subscription, revokes the Search Console and Analytics access you gave NameIO, and deletes NameIO's access to your Shopify store. Remove the NameIO app in Shopify admin, and NameIO from your Google account's connected apps, as well. Backups and logs clear within 30 days, and Stripe keeps the billing records the law requires it to keep. You can also complain to your local data protection authority.

NameIO is for people 18 and over.

Security and location

Data is stored and processed by Cloudflare, which may serve it from data centres in several countries, and by the other providers listed above. Data is encrypted in transit. Google and Shopify access tokens and Shopify crawler signatures are encrypted at rest, and API keys are stored hashed.

Changes

If we change this policy in a way that matters, we tell you in the app or by email before the change takes effect.

Contact

Christopher Nixon, 420 West Golf Road, Libertyville, IL 60048, United States — chris@getnameio.com