Trust and security
What Uruora reads, and what it never does.
Uruora needs your data to be useful. Here is exactly which data, how it is accessed and who processes it.
What it reads
Public pages first. Connections only when you add them.
Without any connection
- Your public pages, up to 12 per scan
- robots.txt and your sitemap
- Your public product feed (Shopify and WooCommerce)
- Google's mobile speed test result for your home page
- Your competitors' public homepages
When you connect
- Shopify, read-only: 28-day sales, sessions and top products
- Google Analytics 4, read-only: visitors and sources
- Search Console, read-only: the searches that find you
- Meta Ads and Google Ads, read-only: spend and results
- Publishing connections (Wix, Klaviyo, Pinterest, Google Business, Meta, TikTok, YouTube, LinkedIn, X, Reddit): they receive only drafts that are approved
- Product costs you type in yourself
What it never does
Lines that do not move.
Never writes to your store
Shopify, Google and your ad accounts connect read-only. Uruora does not change your store, products or ads.
Never posts outside your rules
Drafts wait in your approval queue unless you set that agent to Works alone. Every decision is kept in a log that is only ever added to.
Never trains on your data
Your store data is used to answer you and write your documents. It is not used to train AI models.
Processors
Who processes your data.
| Service | What it does for Uruora | When |
|---|---|---|
| Supabase | Database and sign-in (email link, no passwords) | Always |
| Vercel | Hosts the app and this website | Always |
| Vercel AI Gateway | Routes AI requests to Anthropic models (chat, documents, summaries) and Perplexity models (web research, AI answer checks) | When you use AI features |
| Google PageSpeed Insights | Runs Google's mobile speed test on your home page | During a scan |
| DataForSEO | Finds sites that rank for the same Google searches (search rivals) and reads backlinks | During competitor research and backlink insights |
| Stripe | Card payments for Lite and Pro | When you upgrade |
Connected accounts use the platform’s own sign-in (Shopify, Google, Meta and the others). Uruora never asks for your passwords.
Questions
Can I disconnect Shopify or Google?
Yes, from Settings > Connections at any time. You can also remove the Uruora app from inside Shopify or your Google account.
Who can see my workspace?
Only people you invite. Owners decide who stays.
Where can I read the legal terms?
See the privacy policy and terms. Both are drafts under review.