Privacy

How Fikamail handles information about visitors, merchants and store customers.

Who is responsible

Y CORP AS Registration number: 932 195 321. Contact details are on our contact page.

Fikamail manages information about its own visitors, access requests and merchant accounts. When a merchant connects Shopify, we process their customer information to provide the email service on their instructions. Customers with questions about a store’s marketing should contact that store.

Information we use

  • Access requests: your email address, held in Clerk so we can manage invitations and contact you about access.
  • Accounts: sign-in details, company membership, account settings and support correspondence.
  • Connected stores: products, customer contact details, marketing consent, orders and purchase history imported from Shopify.
  • Campaigns: drafts, approvals, recipients, delivery status, unsubscribes, bounces, complaints and engagement or order-attribution records.
  • Service operation: security records, administrative activity, billing references and technical information needed to run the service.

Why we use it

We use account and access-request information to respond to your request and provide the service. We use operational records to protect accounts and maintain the service, and billing records to meet applicable record-keeping obligations. Optional website analytics use your consent. The final notice must confirm the legal basis for each activity and the operator’s legitimate interests where relied on.

Email creation and service providers

Fikamail uses AI providers to prepare and revise campaigns using store information and campaign context. The provider and model configuration must be confirmed before this notice is finalized. Our service-provider overview describes the integrations present in the product. It does not claim that all data stays in one region.

Cookies and analytics

Our published website analytics notice governs optional visitor tracking. The remaining service policies on this page are drafts.

Authentication uses essential technology to keep accounts signed in and protect access. When optional website analytics are configured, we ask before collecting them. Declining does not affect access requests or use of the service.

If you accept, PostHog receives page categories, coarse traffic-source categories, access-button clicks and waitlist submission outcomes, linked by a random browser identifier. This tracking does not send your email address, form values, complete URLs or campaign content. We do not enable automatic session recording or automatic click capture.

We remember your analytics choice for 180 days. An accepted visitor identifier lasts 90 days and is shared between fikamail.com and app.fikamail.com. Declining later removes it. You can change your choice through “Analytics preferences” in the footer when analytics are configured. Browser tracking covers consenting visitors only.

Separate service events record store connections and campaign activity using store identifiers. These are not linked to website visitors in the current implementation. They exclude customer email addresses and campaign copy.

Retention and deletion

Retention periods for access requests, account data, store data, analytics, operational records and backups are awaiting owner confirmation. No fixed deletion deadline is promised by this draft.

The product handles Shopify customer and shop redaction requests. Disconnecting a store is not the same as deleting every record. Billing records and records held by other providers may need separate handling.

Your choices and rights

You can ask about access, correction, deletion, restriction, portability or objection where applicable, and withdraw optional analytics consent at any time. Contact us through the contact page. If your question concerns a merchant’s customer data, contact that merchant first. You can also complain to your local data protection authority, including Datatilsynet in Norway.

International processing

Provider entities, processing locations and any international-transfer safeguards must be verified against the actual service agreements before this notice is finalized. See the provider overview.