Privacy policy

Who we are

WeLab Studio (shown as WE Studio in the app and in the Shopify App Store) is operated by WebElephant. Questions about this policy go to info@webelephant.nl.

What WeLab Studio stores about you

To give you an account we store your name, email address and password hash, and the actions you take in WeLab Studio (an audit trail your organisation's administrators can see). Your organisation's data, such as products, images and reports, belongs to that organisation and is only visible to its users and to WebElephant staff who support it.

Google user data

Your organisation can connect Google Search Console, Google Merchant Center and Google Ads to WeLab Studio, each as a separate connection. Every connection asks Google only for the permission it needs, plus the email address of the connected Google account:

• Google account email (every connection): so WeLab Studio can show which account is connected.
• Google Search Console (read-only): the list of properties the account can access, and, for the properties your organisation selects, their search performance data.
• Google Merchant Center: the Merchant Center account your organisation registers in WeLab Studio (its name and ID) and, in future reports, its product and performance data. Google requires WeLab Studio to register its Google Cloud project with that Merchant Center account once; WeLab Studio does so with the connected Google account's email address as developer contact, which Google may invite to the account or give the API developer role. When your organisation sets an extra refresh for a feed, WeLab Studio asks Google to fetch that feed again at the chosen interval and reads the feed's processing status (time, number of items, warnings and errors); it does not store the feed's contents. WeLab Studio does not create or change products in Merchant Center. The developer registration of WeLab Studio's Google Cloud project on your Merchant Center account stays on that account after you disconnect, until you remove it there.
• Google Ads (read-only use): the Google Ads accounts the connected Google account can reach (their names and IDs), and the one account your organisation chooses. WeLab Studio uses that account only to request keyword ideas from Google's Keyword Planner (search volumes, trends, competition and bid ranges) for the keyword research your organisation runs. WeLab Studio does not read campaign performance and does not create or change campaigns, ads or budgets. The keyword ideas are stored per organisation until the research is deleted.

AI grouping of keyword ideas. When a user of your organisation chooses Group with AI in a keyword research, WeLab Studio sends the selected keywords and their monthly search volumes to an AI service provider that sorts them into themes on WebElephant's behalf. No other Google data is sent, and only when a user starts it. The provider may not use this data to train its models, and WeLab Studio does not use Google user data to train AI models.

Why. To show your organisation its search and shopping performance inside WeLab Studio, next to its catalog and marketing data. WeLab Studio uses this data for these user-facing features only.

How it is stored. The access and refresh tokens Google issues for each connection are stored encrypted on WeLab Studio's servers and are only used by WeLab Studio to call Google on your organisation's behalf. The list of properties is kept for the selection screen; the registered Merchant Center account is kept by name and ID. The chosen Google Ads account is kept by name and ID. Performance data, once reports exist, is stored per organisation.

Who can see it. The users of your organisation's WeLab Studio account, and WebElephant staff who support that account. WeLab Studio does not sell Google user data, does not share it with third parties except for the AI grouping described above, does not use it for advertising, and does not let people read it other than to support your organisation at its request or as required by law.

How long. Until your organisation disconnects that connection. On disconnect WeLab Studio deletes the tokens immediately and revokes its access at Google, unless another WeLab Studio connection of your organisation still uses the same Google account.

How to revoke. In WeLab Studio, under Integrations, open the connection and choose Disconnect. You can also remove WeLab Studio's access at myaccount.google.com/permissions.

WeLab Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Shopify store data

Your organisation can connect a Shopify store to WeLab Studio by installing the WE Studio app in Shopify and linking it to your WeLab Studio account. The app asks the store to read and write products and files, and to read the online store's pages, navigation, sales channel publication and themes. For those last four WeLab Studio only reads; it never changes them.

• Products and collections: titles, descriptions, handles, status and product images, so WeLab Studio can show your catalog.
• Files: WeLab Studio uploads the images your organisation approves, and can remove the ones it uploaded.
• Online store pages: pages, blogs and articles (titles, content, handles), so WeLab Studio can analyse them for search engines.
• Navigation and redirects: menus and URL redirects, to check the site structure and redirect chains.
• Sales channel publication: which products and collections are published on the online store, so the analysis only covers what visitors can see.
• Themes: the store's themes and their template files, to check technical SEO settings such as meta tags and structured data.

Accessibility fixes. If your organisation uses the accessibility check, WeLab Studio opens your public storefront in a browser to check it. Fixes you choose to add are stored in a setting of the WE Studio app in your store and applied by the WE Studio app embed, which you switch on in the theme editor. WeLab Studio does not change your theme files. Uninstalling the app removes the setting and the embed.

WeLab Studio does not store customer or order data. When Shopify sends a customer data request or erasure request, WeLab Studio records that it arrived; it has nothing to return or delete.

How it is stored. The access and refresh tokens Shopify issues are stored encrypted on WeLab Studio's servers and only used to call Shopify on your organisation's behalf. A store that installed the app but was not linked to an account within 30 days is forgotten. The imported catalog is stored per organisation.

How long. Until your organisation disconnects the store or deletes the integration. 48 hours after the app is uninstalled, Shopify asks WeLab Studio to erase that store's data, and WeLab Studio deletes its tokens and the imported catalog.

How to revoke. In WeLab Studio, under Integrations, open the Shopify connection and choose Disconnect, and uninstall the app in Shopify → Settings → Apps.

Free accessibility check

When you use the free accessibility check on our website, we store your email address, the store address you entered, whether you want to be contacted, a one-way hash of your IP address (to prevent abuse) and the report. If you ask us to fix the issues, we also store your name and phone number to contact you. We use your email address to send you the report and, only if you ticked the box, to contact you about it. The report link works for 30 days. We delete the rest after 12 months.

Cookies

WeLab Studio only uses the cookies needed to keep you logged in. There are no tracking or advertising cookies.

Changes

When this policy changes, the date above changes with it. Material changes to how Google user data is used are announced inside WeLab Studio before they take effect.