Privacy policy

1. Who we are

Camello is a service of Eldrin AI LLC, a company based in Nashville, Tennessee, USA. In this policy "Camello", "we" and "us" mean Eldrin AI LLC.

For anything about your data, write to support@camello.ai.

2. What this policy covers

This policy covers camello.ai, the app at app.camello.ai, the Camello plugin for WordPress, the Camello app for Shopify, and the emails Camello sends.

For your account and your sites, Eldrin AI LLC decides how the data is used and is responsible for it.

For the visitors of your own website, measured through the plugin, you decide whether to install the plugin and which tracking mode it uses. Camello processes that visitor data for you, to show you your own numbers. Your own privacy notice should tell your visitors about it.

3. What we collect

Your account. Your name, your email address and your password, which we store only as a hash (a one-way scramble; nobody can read the password back). Your language and country, your plan and its billing status. When you sign up, you tick a box to agree to the terms and this policy and to confirm you are 18 or older; we keep the date you ticked it and the date of the terms you agreed to. For each signed-in session: the IP address and the browser description (user agent) of the device, so a session can be checked and ended.

Your sites. For each site: its address, platform, time zone and language; the brand kit and interview answers you confirmed (these can include business facts such as the owner's name, your offers, your customers, logo and photos); the searches and questions you track; the measurements (Google rankings, AI answers, page speed, and Search Console numbers if you connect it); the changes Camello proposed, the ones you applied, and their results; drafts; and when the plugin is connected, your WordPress address, WordPress and PHP versions, the SEO and cache plugins it detects, and the value of each field Camello wrote, read back to confirm it is live.

The free site check. The site address you enter, what Camello read from that site's public pages, the searches and questions you confirmed, and the report. If you enter your email to see the fixes, we keep the email and create a sign-up record for you (no password) so you can finish creating the account later. If you ask to be told when Camello supports your platform, we keep your email, domain and platform. The check uses your IP address to stop abuse (a daily limit per address, and Cloudflare's bot check); we do not store it.

Visits to camello.ai. When you read camello.ai, the page sends us the page address, its title, the site that referred you (the domain only), campaign tags in the link, your screen size, and which buttons and sections you used. No cookie and no visitor ID are used, and your IP address is not stored. Your browser's description (user agent) is checked to filter out bots and is not stored.

Visitors of your site, through the plugin, by the mode you choose:

• Off: nothing is collected.
• Essential (the default for sites in the EU, EEA, UK and Switzerland, or when the market is unknown): page views only. For each: the page address and title, the referring site, campaign tags, screen size and the browser family. No cookie, no visitor ID, no IP address, no clicks.
• Full (the default elsewhere): page views, plus a first-party visitor ID kept in a cookie for one year, the pages a visitor moved through, clicks and how far they scrolled, how many fields of a form were filled (never what was typed), and script errors. The plugin sends the visitor's IP address; Camello keeps only a scrambled version (a hash mixed with your site's ID) and never the address itself.
• Your site's consent banner can switch a visitor to essential or off through the plugin. The plugin sends nothing for logged-in editors, admin pages or previews.

4. Emails

Camello sends you emails about your account and your sites: the address check, a site going live, a change that did not appear on your site, a budget reached, a connection that failed, proposals ready, changes applied, verified and scored, drafts ready, and a monthly summary.

Our log of sent emails holds a scrambled version of your address (a hash), the kind of email and the delivery reference, not the address or the content.

Activity and summary emails can be turned off from the link in any of them or on the account page. Emails about your account and about a change that did not go live stay on while the account exists. Camello never sends email to your customers or anyone else on your behalf.

5. Cookies and browser storage

Camello sets only what it needs to work. There are no advertising or cross-site tracking cookies on camello.ai or app.camello.ai.

• better-auth.session_token: keeps you signed in to the app. It lasts up to seven days and is renewed while you use the app.
• NEXT_LOCALE: remembers the language you picked. It ends when you close the browser.
• camello_gsc_flow: set for ten minutes while you connect Google Search Console, to check the reply comes from the request you started.
• camello_shopify_flow: set for ten minutes while you connect a Shopify store, to check the reply comes from the request you started.
• camello_shopify_pending: set for a day when you install Camello from Shopify, with the store's address and a random code, so only this browser can connect that store to one of your sites.
• On the free check, Cloudflare Turnstile checks that you are a person. Cloudflare may set what it needs for that check.
• In the app, your browser's session storage remembers which animations already played. It is cleared when you close the tab.
• On your website, the plugin in full mode sets the avid cookie (the visitor ID, one year); in essential mode it removes it. If your consent banner sets a choice, the plugin remembers it in the visitor's browser storage as camello_consent.

6. Google user data (Search Console)

This section covers the data Camello receives from Google when you connect Google Search Console to a site. Connecting is optional: you start it on the site's Connections page, and everything else in Camello runs without it.

Camello asks Google for two permissions. "openid" is Google's standard sign-in permission that comes with the connection. "webmasters.readonly" is read-only access to Search Console. Connections made before October 19, 2026 also asked for "email"; Camello never read it, and disconnecting ends it. Camello never asks for permission to change anything in Search Console.

What Camello reads: first, the list of Search Console properties your Google account can see, so you can pick the one for your site. The list is shown to you and not stored; only the property you pick is saved. Then, for that one property only: search performance (the searches, pages, clicks, impressions, average position and click rate) and whether Google has your pages in its index.

Camello does not read or store the email address of your Google account.

What Camello stores, for each site: the connection (the permissions you granted, the property you picked, when access was last renewed, the last error) and the access tokens Google issued. The tokens are encrypted before they are stored (AES-256-GCM, with a key per connection that is itself encrypted under a master key kept outside the database). They are decrypted only inside the scheduled job that calls Search Console, and never written to logs.

The Search Console numbers Camello reads are stored under that site only: daily rows per search and page, page totals, the pages close to the top of Google, totals per article, and daily index status. They are kept for as long as the site exists in Camello. There is no shorter automatic expiry today.

What Camello does with it: only the features you see for that site. Your dashboard shows the numbers. Camello uses them to pick which changes to propose, to write the proposed titles, descriptions and drafts, and to measure whether a change you approved worked (before and after). To write a proposed change, Camello sends the searches and page numbers that change needs to the AI model provider that writes the text, for that request only.

Whether a change won, lost or had no effect can count toward the totals described in "Cross-customer counts". Those totals are counts by industry and type of change. They never contain your site, your pages, your searches or your Search Console numbers.

Camello never sells Google user data. Camello never uses it for advertising. Camello never uses it to train generalized AI or machine learning models. Camello never shares it, except with the service providers needed to run these features (see "Who else sees it") or when the law requires it.

Camello's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

To disconnect: open the site's Connections page and click Disconnect. Camello tells Google to end the grant and deletes the stored tokens at once. You can also remove Camello's access at any time in your Google Account, under Third-party apps with account access. Camello then stops reading and shows the connection as needing attention.

Disconnecting keeps the Search Console numbers already read, so your history and before-and-after results stay. To delete them, delete the site (Settings, Delete this site): its Search Console numbers and its connection are deleted right away. Deleting a site also tells Google to end the grant, as Disconnect does. Deleting your account deletes all its sites after the seven-day grace period. The export never contains the tokens.

• Google API Services User Data Policy
• Your Google Account: third-party apps with account access
• Help: delete a site or your account
• Help: export your data

7. Shopify store data (Camello for Shopify)

This section covers the data Camello receives from Shopify when you connect a Shopify store to a site. Connecting is optional: you install Camello from Shopify or start it on the site's Connections page, and everything else in Camello runs without it.

Camello asks Shopify for four permissions: to edit products and collections (write_products), pages and blog posts (write_content), URL redirects (write_online_store_navigation) and files such as images (write_files). Each one includes reading the same things. Camello asks for no permission to read your customers or your orders, and none to change your theme.

What Camello reads: your store's name, its myshopify address and its storefront address; your products (title, description, search title and description, images and their descriptions, type, vendor, lowest price, first SKU, whether it can be bought, units in stock, and its collections); your collections, pages, blog posts and URL redirects. Camello uses them to find what to improve and to write changes that name your real products.

What Camello writes, and only when you click Apply: the one field the change names (a title, a description, a search title or description, an image's description, a redirect), read back straight after to confirm it. Drafts are created as hidden, unpublished blog posts; publishing one is your click in Shopify. Every applied change can be undone from Camello. Camello never edits your theme and never adds scripts to your storefront.

What Camello stores, for each site: the connection (the store's address and name, the permissions granted, when access was last renewed) and the access tokens Shopify issued, encrypted before they are stored (AES-256-GCM, with a key per connection that is itself encrypted under a master key kept outside the database); the product and collection details listed above, as the site's store pages; and for each change you applied, the value it replaced, so Undo can put it back.

Your shoppers: Camello never reads or stores the personal data of your customers. When Shopify forwards a customer's request to see or erase their data, Camello records that the request arrived; it holds nothing about that customer to return or delete.

To disconnect: click Disconnect on the site's Connections page, or uninstall Camello in your Shopify admin. Either way Shopify ends Camello's access and Camello deletes the stored tokens at once. 48 hours after the uninstall, Shopify asks Camello to erase the store's data, and Camello deletes the connection, the store pages it read through Shopify and the values it kept for Undo. The site's own records in Camello (its measurements and the changes it proposed) stay with your Camello account until you delete the site or the account.

Camello never sells your store's data, never uses it for advertising and never shares it, except with the service providers needed to run these features (see "Who else sees it") or when the law requires it.

• Help: connect your Shopify store
• Help: delete a site or your account

8. What we do with it

We use your data to run Camello for you: measure your site, propose changes and write drafts, apply a change when you click Apply, check it went live and measure whether it worked, send you the emails described above, keep the service safe from abuse, and fix problems. The law in some places asks for a reason (a legal basis) for each use. Ours, in plain words:

• To provide the service you signed up for (performing our contract with you): your account, your sites, measurements, changes, drafts and service emails.
• Our legitimate interest in running a safe and useful service: abuse limits on the free check, the bot check, the counts of how camello.ai is used, and the cross-customer counts described below.
• Your consent: connecting Google Search Console, and the plugin's full mode where your visitors' consent is required. You can withdraw it at any time by disconnecting or changing the mode.
• A legal obligation, when the law requires us to keep or hand over data.

9. Cross-customer counts

To learn which kinds of changes tend to work, Camello counts results across customers: for each industry and type of change, how many changes won, lost or had no effect. A count is used only when at least five businesses and twenty results stand behind it. The counts never contain your site, your pages, your searches, your visitors or your Search Console numbers.

On the account page, under Cross-customer counts, you can tick "Don't use my anonymized results to improve recommendations for other customers". It is off unless you tick it, so your results are counted by default. Ticking it leaves every site of your account out from the next monthly count, on the 1st of each month.

10. Onboarding research shared with a later account

When you add a site, Camello researches its domain once: the description of your business from your onboarding answers (what you sell, the job, who it is for and where), the searches, questions and competitors on your list, where the site ranks on Google for them, how often they are searched, and what ChatGPT, Perplexity and Gemini answer and which sites they name.

Camello keeps one copy of that research per domain. If another Camello account adds the same domain within 90 days of the research, it sees that research instead of a new one. A domain belongs to one account at a time, so this happens when a site is deleted (for example with its account) and the domain is added again. The research never contains your name, your email, your password, your Search Console numbers or your visitors' data.

11. AI model providers

Camello uses AI models from other companies, through their paid business interfaces (APIs), not their consumer chat apps. What each one receives:

• Anthropic (Claude): your site's public pages and a picture of your home page (to read your brand), your interview answers and business facts, your tracked searches and questions, and the measurements behind a change. Used to write proposals, drafts and summaries.
• OpenAI: your tracked questions (to record what ChatGPT answers), the text of your pages and drafts (to match topics), and the descriptions of images for social posts.
• Google Gemini and Perplexity: your tracked questions, to record what each engine answers.
• Your password, your sign-in email and your visitors' data are never sent to an AI provider.
• These providers' published terms for their business interfaces say they do not use the data sent through them to train their models. Camello does not use your data to train AI models either.

12. Who else sees it

We never sell your data or your visitors' data, and we never use it for advertising. We share data only with the service providers that run Camello for us (below), or when the law requires it, or with a buyer if Eldrin AI LLC or Camello is ever sold, under this same policy.

Our service providers, and what each one does:

• Heroku (Salesforce): runs the website, the app and the background jobs, in the United States.
• MongoDB Atlas: the database, on Amazon Web Services in the eastern United States.
• Inngest: schedules the background jobs. It receives IDs, dates and numbers, not your content.
• Resend: delivers Camello's emails. It receives your email address and the email.
• Cloudflare: runs camello.ai's domain names, and Turnstile, the bot check on the free check (it receives the check's token and your IP address).
• SearchAPI: looks up Google results for your tracked searches. It receives the searches and your domain.
• Google: Search Console (if you connect it), PageSpeed and the Chrome UX Report (your page addresses), the Knowledge Graph (your business name), and Gemini (above).
• Shopify: if you connect a store, Camello reads and edits it through Shopify's Admin API (above). Shopify receives the changes you apply.
• IndexNow: after you apply a change, Camello can send that page's address so search engines check it again.
• Anthropic, OpenAI and Perplexity: AI models (above).
• Stripe: will process payments when online payments open. Payments are not open yet. When they are, your email goes to Stripe to create your customer record, and card details go to Stripe directly and never reach Camello.

13. People at Camello

Only the Eldrin AI LLC staff on Camello's admin list can open the admin pages. There they can see a site's data and its owner's email, to support you, keep the service running and stop abuse.

14. Where your data is stored

Camello stores and processes data in the United States. If you use Camello from another country, including the EU or the UK, your data is transferred to the United States, where privacy law may differ from yours.

15. How long we keep it

• Your account, name, email, sign-in sessions and the record of the terms you agreed to: until your account is deleted.
• Your site's data (measurements, changes, results, drafts, Search Console numbers, connections, the email log): until you delete the site or your account.
• Your site's visitor data: page views and the pages visitors moved through are kept as long as the site exists. Clicks, scroll and form readings are deleted automatically after 180 days.
• A domain's onboarding research: kept after the site is deleted, with no automatic expiry today, and replaced when the domain is researched again. Another account is shown it only within 90 days of the research.
• Visits to camello.ai: kept, with no IP address or visitor ID.
• A free check's report: deleted automatically after seven days.
• The sign-up record created when you enter your email on the free check: it becomes your account when you sign up. If you do not sign up, it is deleted automatically 90 days after you last entered your email, with the site it started and its requests to be told.
• Requests to be told about a platform or when the free check is back (your email, domain and platform): deleted with your account, or with the free-check sign-up record after 90 days, or earlier if you ask us.
• When an account is deleted, a record stays with the account's internal ID, the dates and how many items were deleted, so we can show the deletion happened. It holds no email, no name and no site data.
• Our hosting provider keeps its own short-lived request logs, which include IP addresses.

16. Security

Every connection to camello.ai and app.camello.ai uses TLS (the padlock in your browser).

Access tokens for Google and the plugin's keys are encrypted before they are stored (AES-256-GCM, with a key per connection, itself encrypted under a master key kept outside the database). Passwords are stored only as a hash. The plugin signs every message it sends to Camello.

No system is perfectly secure. If we learn of a breach that affects your data, we will tell you by email.

17. Your rights and choices

You can do most of this yourself in the app, and anything else by writing to support@camello.ai from your account's email.

• See and take a copy of your data: on the account page, Download export gives you a JSON file with your name, email, sign-in sessions (dates, IP address and browser), email choices, your account and every site's data. Download as CSV (ZIP) gives the same file plus CSV files. A site's settings page has the export for one site. The export never contains your password or sign-in keys.
• Correct it: change your name and your email on the account page (a new email works once you press the links we send to the old and the new address), and your interview answers, brand kit and tracked searches in the app.
• Delete it: delete a site at once on its settings page. Delete your account on the account page; your account and every site are deleted after seven days, and you can cancel until then. Or write to us, including to delete a sign-up record from the free check.
• Object, or withdraw consent: disconnect Search Console, change the plugin's mode, turn off activity and summary emails, or tick the box on the account page that leaves your results out of the cross-customer counts.

18. If you are in the EU, the UK or Switzerland

You have the right to access your data, to correct it, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time. You can also complain to your local data protection authority. We answer requests within one month.

19. If you live in California or another US state with a privacy law

You have the right to know what personal information we collect and how we use it (this policy), to get a copy, to correct it and to delete it. We do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of. We do not collect sensitive personal information. We will not treat you differently for using these rights. You can use an authorized agent; we may ask you to confirm the request from your account's email.

20. Children

Camello is a tool for businesses and is not meant for anyone under 18. Everyone who signs up confirms they are 18 or older. We do not knowingly collect data from children under 18. If you believe a child has given us data, write to support@camello.ai and we will delete it.

21. Changes to this policy

When we change this policy, we update the date at the top. If a change matters to how your data is used, we email account owners before it takes effect.

22. Contact

Eldrin AI LLC, Nashville, Tennessee, USA. Email support@camello.ai.