Privacy Policy

Last updated: 11 November 2026

Goppa helps online stores be found and understood by AI shopping agents, and measures the result. This page explains what data we handle, why, and for how long. It covers both the Goppa website and the our WordPress plugin published at wordpress.org/plugins/goppa-agentic-commerce.

The short version. The plugin does not collect anything about your visitors. It records what AI agents do on your store: which endpoint they called, what they searched for, which product they looked at, and only if you connect it to a Goppa account. With no token configured, the plugin makes no external connection at all.

1. Who we are

Goppa ("we") operates the Goppa service and publishes the WordPress plugin at wordpress.org/plugins/goppa-agentic-commerce. For questions about this policy or to exercise any of the rights below, contact privacy@trygoppa.com.

2. The plugin: what it sends, and when

2.1 With no token configured, nothing is sent

Out of the box, the plugin only serves files on your own domain (/.well-known/ucp, /llms.txt, /mcp, /goppa/catalog). It contacts no external server, and no data leaves your site. Reporting is opt-in by design.

2.2 With a store token configured

If you paste a token from your Goppa account into the Goppa screen of the WordPress admin, the plugin queues one small record each time an AI agent requests one of those endpoints, and sends the batch to https://trygoppa.com/api/ingest after the response to the agent has already been delivered.

Field	What it is	Example
`origem`	Which endpoint was requested	`mcp`
`ua`	The User-Agent string sent by the agent. We classify it server-side into a known agent name and store only that classification	`GPTBot/1.2`
`detalhe`	Which MCP tool was called	`search_products`
`consulta`	The search term or product identifier the agent asked for	`running shoes`
`produto`	Name of the product returned first	`Aurora Run`

Each record is tied to your store by the token. Text fields are capped at 200 characters.

2.2.1 SEO fixes (Goppa plans with SEO)

With a token connected and a plan that includes SEO, once a day the plugin sends to https://trygoppa.com/api/plugin/seo the list of your published products, product categories, pages and posts: the address, the title, the SEO title and meta description currently saved in your SEO plugin, the first product category, an excerpt of up to 400 characters, the number of products in each category and the address of product images that have no alt text. We use it to write the SEO fixes you review in your Goppa account; the text of those suggestions is written with OpenAI, which receives these same public fields and, for alt text, the image address. Hidden, draft and password-protected content is never sent. When you approve fixes and turn on SEO fixes in the plugin, it reports back which ones it wrote.

2.3 What the plugin never sends

No visitor or customer data of any kind
No IP addresses
No orders, carts, checkout or payment data
No email addresses, names or account data from your store
No content of your site beyond what is already public: the product fields of your catalogue and, for SEO fixes, the public fields listed in 2.2.1

Human traffic is not recorded at all. Only requests to the four agentic endpoints above. Your ordinary page loads never touch this code path.

2.4 Turning it off

Clear the token field on the Goppa screen and reporting stops immediately. Deactivating the plugin stops it and removes its scheduled task. Deleting the plugin erases every option it created, including the token.

3. The website: what we handle

Data	Why	Kept
Email address and account identifier	To create and authenticate your account	Until you delete the account
Domains you scan, and the resulting reports	To show the report and let you compare over time	Until you delete them; free-plan reports may expire earlier
Agent activity reported by the plugin (section 2)	To show what AI agents do on your store	Until you delete the store or the account
Visibility measurements	To show whether AI assistants recommend your store, and how that changes	Until you delete the account
Free ChatGPT check (trygoppa.com/check): the website and market you enter, your email address, whether you ticked the box asking a person from Goppa to email you the fixes for your site (with the date and the wording you saw), the site check and the one ChatGPT answer we got, and which ad or site sent you (campaign tags and the referring site's host only)	To run the check you asked for, show it to you, email you the result once, and let you reopen it from the link. If you choose Start or Keep it free, we create your Goppa account with that email, without a password, and email you a sign-in link	12 months, or until you ask us to delete it. An account we created for you that you never sign in to, and never pay for, is deleted after 30 days; once you use it, until you delete the account
Leads from an agency's audit widget: the website and email a visitor enters in the free SEO check an agency places on its own site, and the summary they saw	To deliver the lead to that agency, which is the controller of this data; we process it on the agency's behalf. The visitor agrees to be contacted by the agency before the check runs	Until the agency deletes the lead or its account
Billing details	To process subscriptions, handled by Paddle. We never see or store card numbers	As required by Paddle and by tax law

3.1 Google Search Console, Google Analytics and Bing Webmaster Tools

Each is optional, and each starts only when you connect it yourself.

Google Search Console. When you click Connect, you sign in with Google and grant read-only access (webmasters.readonly). Goppa reads, for the property of your own site only: clicks, impressions and average position by day, by search and by page, and whether a few of your pages are in Google's index. We use it only to show those numbers in your dashboard and monthly report. We never change anything in your Search Console, and we read no other Google data.
Google Analytics. When you click Connect, you sign in with Google and grant read-only access (analytics.readonly). Goppa lists the Google Analytics properties of that account to find the one whose web stream is your site (you choose if more than one matches), and reads, for that property only: the number of sessions and active users that started from each AI assistant (for example ChatGPT, Perplexity, Gemini, Claude and Copilot), the key events of those sessions, and the total number of sessions on your site, by day. We use it only to show those numbers in your dashboard. We never change anything in your Google Analytics, and we read no other Google data.
Bing Webmaster Tools. When you paste your API key, Goppa reads your site's indexing status, clicks, impressions, top searches and pages from Bing, for the same purpose.

The access token from Google and the Bing key are stored encrypted, and are used by our servers only to make those reads. Disconnecting in Goppa deletes them from our side and, for Google, revokes the access at Google too, unless another site in your account still uses the same Google connection (sites connected with the same Google account can share that access); you can also remove Goppa at any time from your Google account permissions.

Goppa's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, use it for advertising, or use it to train AI models, and no person at Goppa reads it except to help you when you ask us to.

3.2 AI assistants you connect (ChatGPT, Claude and others)

You can connect your Goppa account to an AI assistant that supports MCP, such as ChatGPT or Claude, at https://trygoppa.com/mcp/account. It is optional, and it starts only when you sign in to Goppa from the assistant and approve access. See Goppa in your AI assistant for how it works.

What the assistant can read. Your own organization's Goppa data, through the tools listed on that page: your plan and sites, AI visibility measurements, site checks, Google SEO data, the SEO fixes you approved and your next steps.
What the assistant can save to your account. Four tools write to your Goppa account, and only when the assistant calls them: run_site_check runs a new check of the public pages of a site in your account and saves the result there, add_site adds a website to your account, within the sites your plan includes (Goppa reads its home page to see its platform), run_ai_measurement starts an AI measurement of a site in your account after the assistant shows you its questions and you agree, and report_fixes_applied records which of the SEO fixes you approved the assistant applied on your site. That measurement works like one started in Goppa: it counts toward the AI measurements your plan includes and its result is saved to your account. The Goppa connection never changes your website: an assistant that you also let edit your site (your code or your site builder) can apply the fixes you approved, with its own access, and then tell Goppa. The connection cannot change your settings, approve fixes, start a measurement you did not agree to, remove anything, or reach any other part of Goppa. The access you approve is named goppa.read and covers these reads and these four saves.
Where your data goes. When you ask a question, the answer from Goppa is sent to the assistant you connected, inside your conversation. That provider (for example OpenAI or Anthropic) is not our processor: it handles that data under your own agreement with it. We send nothing to an assistant you have not connected.
What we store. The assistant's public registration details (its name and sign-in addresses), and the tokens we issue to it, as a hash only: access lasts one hour and renews for up to 60 days while in use. We also log each call (account, assistant, tool, time taken and result) for 180 days, to run the service, enforce limits and investigate problems. The log never contains your conversation, the tool arguments or your tokens. We receive only the tool calls the assistant makes, never the rest of your conversation.
Without an account. An assistant can also check any public site without signing in, at https://trygoppa.com/mcp. That check is not stored: Goppa reads the site's public pages and sends the result to the assistant, and we keep neither the domain nor the report. We use the network address only to apply rate limits. The same check (scan_site) from a connected account is not saved either; only run_site_check saves.
Turning it off. Disconnect any time in Goppa under Settings → Connected AI apps, or remove the connector in your assistant. Disconnecting revokes the tokens at once; deleting your account removes the connections and their log.

3.3 Cloudflare, if you connect it

It is optional, and it starts only when you set it up in Goppa, under Fixes, for a site that runs through your own Cloudflare account.

What it does. A Goppa Worker in your Cloudflare account puts the page titles and meta descriptions you approved in Goppa into the pages Cloudflare serves for your site, and serves an llms.txt only when your site has none. If Goppa does not answer, your pages are served exactly as your server sends them.
What Goppa stores. If you connect with a Cloudflare API token, the token is stored encrypted and used only to install the Worker and its routes on your site and to remove them when you turn it off. If you set the Worker up yourself, Goppa stores nothing from Cloudflare.
What the Worker sends to Goppa. Only your site's id in Goppa and the Worker's token, to read the fixes for your site. It sends no visitor data: no addresses, pages visited or cookies.
Turning it off. Turn off in Goppa stops the Worker's access at once and deletes the token; when you connected with a token, it also removes the Worker and its routes from your Cloudflare account.

3.3 Emails we send

Your check result, sign-in links and reports are emails you asked for. Follow-up emails, where a person from Goppa writes to you about the fixes for your site, go only to people who ticked the box, which starts unticked, and then confirmed by clicking the link in our email: ticking the box alone sends nothing. You can withdraw at any time with the unsubscribe link in every such email, or by writing to privacy@trygoppa.com; this does not affect the emails you ask for.

3.4 City reports from the AI local index

When you ask for the full report of a city on one of our AI local index pages, we keep your email address and which report you asked for, to send it, to stop the same report going out twice in a day and to know if you write back. We keep the request for 12 months, then delete it. The report itself lists businesses from public sources (the answers of AI assistants and Google Maps) and the technical score of sites we have already checked. Write to privacy@trygoppa.com to have a request deleted sooner.

3.5 Asking for an agency after the free check

After the free check you can ask for a web agency to do the work. We only do this if you tick the box that says so. We then send your site, your email address and your check result to one agency in your country that we list on our partners page, and that agency writes to you; if we list none in your country, a person from Goppa writes to you instead. The agency is a separate business and handles your email under its own privacy policy. We keep your request (your email, the site and which agency received it) for 12 months, then delete it. Write to privacy@trygoppa.com to have it deleted sooner.

3.6 Messages on WhatsApp

We sometimes write to a web agency on WhatsApp, at the business number it publishes on its website or its Google Maps listing. The first message is written and sent by a person from Goppa, never by software. When you reply, we receive your messages through the official WhatsApp Business Platform from Meta and keep them, with your number and the time of each message, so that we can answer you. Replies within 24 hours of your message may be written by software following our rules and a person sees the conversation; questions about prices, discounts or meetings are answered by a person. If you tell us to stop, we do not write again and we add your number to the list of people we never contact. We keep the conversation for 12 months, then delete it. Write to privacy@trygoppa.com to have it deleted sooner.

3.7 Booking a call on our website

When you book a 15-minute call with the button on our website, you give us your name, your work email address and your agency's website, and you may tell us how many client sites you manage. We also keep the time you chose, the page you booked from and the language of the site. We use this to email you the invite (a calendar file and, when we have one, the link to the video call), to hold the call and to know if you write back. The call is in English or Portuguese. We only book after you tick the box that says so. We do not store your IP address with the booking; a scrambled (hashed) copy of it is used only to limit how many requests one connection can make. A person from Goppa sees the booking in our internal inbox. We keep the booking for 12 months, then delete it. Write to privacy@trygoppa.com to have it deleted sooner.

4. Processors we use

Supabase: database and authentication
Vercel: application hosting, and aggregate page-view analytics. It sets no cookie and does not identify you: we see that a page was viewed, from which country and referrer, never who viewed it
Paddle: subscription payments and tax compliance; Paddle is the merchant of record and the seller on your invoice
OpenAI: the visibility measurement asks ChatGPT buying questions about your product category, and OpenAI models write text for you (SEO fixes, category guides, replies to your messages). We send the question, your domain and the public page fields the text is about; we do not send customer data. This includes the free check at /check: one buying question for the market you picked, and your domain. When the optional “what AI says about you” feature is on, we also send a few sentences of an AI answer that names your business, to label them positive, neutral or negative and to list the facts they state; we keep those sentences with the measurement, and your Correct / Wrong / Not sure marks on each fact with your site
Resend: sends our emails (check results, sign-in links, reports). We send your email address and the content of that email
Microsoft Clarity: only if you accept it in our notice, a recording of clicks and scrolling on our website, with what you type masked (see "Session recording" below)
Meta (WhatsApp Business Platform): carries the WhatsApp messages between you and us when you reply to us there (see "Messages on WhatsApp" above)
DataForSEO: the ChatGPT, Gemini, Google and Perplexity answers for the visibility measurement, and, on plans with SEO, your Google positions, keyword research, competitors and links from other sites. We send your domain, your country and the questions or keywords; we do not send customer data

We do not sell data.

Advertising cookie

If you accept it, we load a Meta advertising cookie so we can see which of our ads brought you here. Meta receives that you visited, that you entered your website to start a check, and that you signed up or asked for your result by email. It never receives your email address, your domain, or anything from your report.

It is off until you say yes. Nothing from Meta loads before that, the free check works exactly the same either way, and you can change your mind by clearing this site's data in your browser. We ask because under the ePrivacy rules an advertising cookie needs your consent, not our convenience.

Session recording (Microsoft Clarity)

When our notice asks for it and you accept, we load Microsoft Clarity on our website so we can see where our pages get stuck: it records clicks, scrolling and page layout. What you type into any field is masked by Clarity and never recorded, and we tell Clarity you have not agreed to advertising storage. Microsoft keeps recordings for 30 days, or up to 9 months for one we mark to keep. It is off until you say yes, it is not needed for the site to work, and you can change your mind by clearing this site's data in your browser.

Separately, without any cookie, our server counts the steps of signing up: that the sign-up form was shown, sent, or showed an error (and which kind of error), that the confirmation email was sent and used, and whether the browser was the one inside Instagram or Facebook. It also counts that a shared visibility report was opened, forwarded, or led to a new check. For these counts we store only the day, the step and that browser or report type, never your email address or anything you typed.

5. Legal basis and your rights (GDPR)

We process account and store data to perform the contract you have with us, and technical data to run and secure the service (legitimate interest). Agent-activity reporting is enabled only by your own act of configuring a token.

We run the free check and email its result because you asked for it (Art. 6(1)(b) GDPR). Follow-up emails rely on your consent (Art. 6(1)(a)), which you can withdraw at any time. Your network address is used only to apply rate limits and is kept for a few days (legitimate interest).

You have the right to access, correct, export, restrict and delete your data, and to object to processing. Write to privacy@trygoppa.com and we will respond within 30 days. You may also complain to your local data protection authority.

6. Security and retention

Data is transmitted over HTTPS and stored on managed infrastructure with access limited to what the service needs. Your store token authorises writing agent activity for that one store and nothing else; if it leaks, clear the field and reconnect the store to get a new one.

You can delete your account yourself at any time, in Goppa under Settings → Delete account. It removes your sites, reports, measurements, agent activity, Google SEO data, connected AI apps and your sign-in, and it revokes Goppa's access to your Search Console at Google. Your billing history stays with Paddle, as tax law requires. If you have a paid plan, cancel it first; if other people share the account, write to privacy@trygoppa.com and we will close it.

7. Changes

If this policy changes materially we will update the date above and note it in the plugin changelog.

← Goppa · Terms of Service · Refund Policy