Privacy Policy

Last updated: 12 October 2026

Goppa helps online stores be found and understood by AI shopping agents, and measures the result. This page explains what data we handle, why, and for how long. It covers both the Goppa website and the our WordPress plugin published at wordpress.org/plugins/goppa-agentic-commerce.

The short version. The plugin does not collect anything about your visitors. It records what AI agents do on your store: which endpoint they called, what they searched for, which product they looked at, and only if you connect it to a Goppa account. With no token configured, the plugin makes no external connection at all.

1. Who we are

Goppa ("we") operates the Goppa service and publishes the WordPress plugin at wordpress.org/plugins/goppa-agentic-commerce. For questions about this policy or to exercise any of the rights below, contact privacy@trygoppa.com.

2. The plugin: what it sends, and when

2.1 With no token configured, nothing is sent

Out of the box, the plugin only serves files on your own domain (/.well-known/ucp, /llms.txt, /mcp, /goppa/catalog). It contacts no external server, and no data leaves your site. Reporting is opt-in by design.

2.2 With a store token configured

If you paste a token from your Goppa account into the Goppa screen of the WordPress admin, the plugin queues one small record each time an AI agent requests one of those endpoints, and sends the batch to https://trygoppa.com/api/ingest after the response to the agent has already been delivered.

Field	What it is	Example
`origem`	Which endpoint was requested	`mcp`
`ua`	The User-Agent string sent by the agent. We classify it server-side into a known agent name and store only that classification	`GPTBot/1.2`
`detalhe`	Which MCP tool was called	`search_products`
`consulta`	The search term or product identifier the agent asked for	`running shoes`
`produto`	Name of the product returned first	`Aurora Run`

Each record is tied to your store by the token. Text fields are capped at 200 characters.

2.2.1 SEO fixes (Goppa plans with SEO)

With a token connected and a plan that includes SEO, once a day the plugin sends to https://trygoppa.com/api/plugin/seo the list of your published products, product categories, pages and posts: the address, the title, the SEO title and meta description currently saved in your SEO plugin, the first product category, an excerpt of up to 400 characters, the number of products in each category and the address of product images that have no alt text. We use it to write the SEO fixes you review in your Goppa account; the text of those suggestions is written with OpenAI, which receives these same public fields and, for alt text, the image address. Hidden, draft and password-protected content is never sent. When you approve fixes and turn on SEO fixes in the plugin, it reports back which ones it wrote.

2.3 What the plugin never sends

No visitor or customer data of any kind
No IP addresses
No orders, carts, checkout or payment data
No email addresses, names or account data from your store
No content of your site beyond what is already public: the product fields of your catalogue and, for SEO fixes, the public fields listed in 2.2.1

Human traffic is not recorded at all. Only requests to the four agentic endpoints above. Your ordinary page loads never touch this code path.

2.4 Turning it off

Clear the token field on the Goppa screen and reporting stops immediately. Deactivating the plugin stops it and removes its scheduled task. Deleting the plugin erases every option it created, including the token.

3. The website: what we handle

Data	Why	Kept
Email address and account identifier	To create and authenticate your account	Until you delete the account
Domains you scan, and the resulting reports	To show the report and let you compare over time	Until you delete them; free-plan reports may expire earlier
Agent activity reported by the plugin (section 2)	To show what AI agents do on your store	Until you delete the store or the account
Visibility measurements	To show whether AI assistants recommend your store, and how that changes	Until you delete the account
Free ChatGPT check (trygoppa.com/check): the website and market you enter, your email address, whether you ticked the marketing box (with the date and the wording you saw), the site check and the one ChatGPT answer we got, and which ad or site sent you (campaign tags and the referring site's host only)	To run the check you asked for, show it to you, email you the result once, and let you reopen it from the link. If you choose Start or Keep it free, we create your Goppa account with that email, without a password, and email you a sign-in link	12 months, or until you ask us to delete it. An account we created for you that you never sign in to, and never pay for, is deleted after 30 days; once you use it, until you delete the account
Leads from an agency's audit widget: the website and email a visitor enters in the free SEO check an agency places on its own site, and the summary they saw	To deliver the lead to that agency, which is the controller of this data; we process it on the agency's behalf. The visitor agrees to be contacted by the agency before the check runs	Until the agency deletes the lead or its account
Billing details	To process subscriptions, handled by Paddle. We never see or store card numbers	As required by Paddle and by tax law

3.1 Google Search Console and Bing Webmaster Tools

Both are optional, and each starts only when you connect it yourself.

Google Search Console. When you click Connect, you sign in with Google and grant read-only access (webmasters.readonly). Goppa reads, for the property of your own site only: clicks, impressions and average position by day, by search and by page, and whether a few of your pages are in Google's index. We use it only to show those numbers in your dashboard and monthly report. We never change anything in your Search Console, and we read no other Google data.
Bing Webmaster Tools. When you paste your API key, Goppa reads your site's indexing status, clicks, impressions, top searches and pages from Bing, for the same purpose.

The access token from Google and the Bing key are stored encrypted, and are used by our servers only to make those reads. Disconnecting in Goppa deletes them from our side and, for Google, revokes the access at Google too, unless another site in your account still uses Search Console (sites connected with the same Google account share that access); you can also remove Goppa at any time from your Google account permissions.

Goppa's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, use it for advertising, or use it to train AI models, and no person at Goppa reads it except to help you when you ask us to.

3.2 AI assistants you connect (ChatGPT, Claude and others)

You can connect your Goppa account to an AI assistant that supports MCP, such as ChatGPT or Claude, at https://trygoppa.com/mcp/account. It is optional, and it starts only when you sign in to Goppa from the assistant and approve access. See Goppa in your AI assistant for how it works.

What the assistant can read. Your own organization's Goppa data, through the tools listed on that page: your plan and sites, AI visibility measurements, site checks, Google SEO data and your next steps.
What the assistant can save to your account. Two tools write to your Goppa account, and only when the assistant calls them: run_site_check runs a new check of the public pages of a site in your account and saves the result there, and add_site adds a website to your account, within the sites your plan includes (Goppa reads its home page to see its platform). Nothing on your website changes. The connection cannot change your settings, approve fixes, start a paid measurement, remove anything, or reach any other part of Goppa. The access you approve is named goppa.read and covers these reads and these two saves.
Where your data goes. When you ask a question, the answer from Goppa is sent to the assistant you connected, inside your conversation. That provider (for example OpenAI or Anthropic) is not our processor: it handles that data under your own agreement with it. We send nothing to an assistant you have not connected.
What we store. The assistant's public registration details (its name and sign-in addresses), and the tokens we issue to it, as a hash only: access lasts one hour and renews for up to 60 days while in use. We also log each call (account, assistant, tool, time taken and result) for 180 days, to run the service, enforce limits and investigate problems. The log never contains your conversation, the tool arguments or your tokens. We receive only the tool calls the assistant makes, never the rest of your conversation.
Without an account. An assistant can also check any public site without signing in, at https://trygoppa.com/mcp. That check is not stored: Goppa reads the site's public pages and sends the result to the assistant, and we keep neither the domain nor the report. We use the network address only to apply rate limits. The same check (scan_site) from a connected account is not saved either; only run_site_check saves.
Turning it off. Disconnect any time in Goppa under Settings → Connected AI apps, or remove the connector in your assistant. Disconnecting revokes the tokens at once; deleting your account removes the connections and their log.

3.3 Emails we send

Your check result, sign-in links and reports are emails you asked for. Tips and offers go only to people who ticked the box, which starts unticked, and then confirmed by clicking the link in our email: ticking the box alone sends nothing. You can withdraw at any time with the unsubscribe link in every such email, or by writing to privacy@trygoppa.com; this does not affect the emails you ask for.

4. Processors we use

Supabase: database and authentication
Vercel: application hosting, and aggregate page-view analytics. It sets no cookie and does not identify you: we see that a page was viewed, from which country and referrer, never who viewed it
Paddle: subscription payments and tax compliance; Paddle is the merchant of record and the seller on your invoice
OpenAI: the visibility measurement asks ChatGPT buying questions about your product category, and OpenAI models write text for you (SEO fixes, category guides, replies to your messages). We send the question, your domain and the public page fields the text is about; we do not send customer data. This includes the free check at /check: one buying question for the market you picked, and your domain
Resend: sends our emails (check results, sign-in links, reports). We send your email address and the content of that email
DataForSEO: Google and Perplexity results for the visibility measurement, and, on plans with SEO, your Google positions, keyword research, competitors and links from other sites. We send your domain, your country and the questions or keywords; we do not send customer data

We do not sell data.

Advertising cookie

If you accept it, we load a Meta advertising cookie so we can see which of our ads brought you here. Meta receives that you visited, that you entered your website to start a check, and that you signed up or asked for your result by email. It never receives your email address, your domain, or anything from your report.

It is off until you say yes. Nothing from Meta loads before that, the free check works exactly the same either way, and you can change your mind by clearing this site's data in your browser. We ask because under the ePrivacy rules an advertising cookie needs your consent, not our convenience.

5. Legal basis and your rights (GDPR)

We process account and store data to perform the contract you have with us, and technical data to run and secure the service (legitimate interest). Agent-activity reporting is enabled only by your own act of configuring a token.

We run the free check and email its result because you asked for it (Art. 6(1)(b) GDPR). Tips and offers rely on your consent (Art. 6(1)(a)), which you can withdraw at any time. Your network address is used only to apply rate limits and is kept for a few days (legitimate interest).

You have the right to access, correct, export, restrict and delete your data, and to object to processing. Write to privacy@trygoppa.com and we will respond within 30 days. You may also complain to your local data protection authority.

6. Security and retention

Data is transmitted over HTTPS and stored on managed infrastructure with access limited to what the service needs. Your store token authorises writing agent activity for that one store and nothing else; if it leaks, clear the field and reconnect the store to get a new one.

You can delete your account yourself at any time, in Goppa under Settings → Delete account. It removes your sites, reports, measurements, agent activity, Google SEO data, connected AI apps and your sign-in, and it revokes Goppa's access to your Search Console at Google. Your billing history stays with Paddle, as tax law requires. If you have a paid plan, cancel it first; if other people share the account, write to privacy@trygoppa.com and we will close it.

7. Changes

If this policy changes materially we will update the date above and note it in the plugin changelog.

← Goppa · Terms of Service · Refund Policy