Privacy Policy
Last updated: February 2026
1. Introduction
Fific Systems (“we,” “our,” or “us”) operates the Store Reliability Engine service. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.
2. Information We Collect
We collect the following types of information:
- Account Information: Your email address and name when you connect your Shopify store via OAuth.
- Store Data: Public store information such as store name, domain, and product catalog data necessary for scanning.
- Scan Results: Screenshots, timing data, and diagnostic information collected during automated scans.
- Usage Data: Information about how you use our Service, including scan frequency and feature usage.
3. How We Use Your Information
We use the information we collect to:
- Provide and maintain our Service
- Run automated scans of your Shopify store
- Generate reports and alerts about your store health
- Improve and optimize our Service
- Communicate with you about your account and Service updates
- Process payments and manage subscriptions
4. Data Storage and Security
We take the security of your data seriously:
- Shopify access tokens are encrypted at rest using AES-256-GCM encryption.
- All data is transmitted over HTTPS/TLS encrypted connections.
- We use Supabase for data storage, which provides enterprise-grade security.
- Scan evidence (screenshots, videos) is stored securely and automatically deleted after 7-90 days depending on type.
5. Data Sharing
We do not sell your personal information. We may share your information with:
- Service Providers: Third parties that help us operate our Service (e.g., Stripe for payments, Supabase for data storage).
- Legal Requirements: When required by law or to protect our rights and safety.
6. Shopify Data
When you connect your Shopify store, we access only the data necessary to provide our scanning service. We request minimal permissions and never access sensitive customer payment information. We comply with Shopify's Partner Program Agreement and API usage requirements.
7. Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and data
- Export your data in a portable format
- Opt out of marketing communications
8. Data Retention
We retain your account information as long as your account is active. Scan evidence (screenshots, videos) is retained for 7-90 days. After account deletion, we remove your data within 30 days, except as required by law.
9. Cookies and Tracking
We use essential cookies to maintain your session and provide the Service. We may use analytics tools to understand how our Service is used. You can control cookie settings in your browser.
10. Children's Privacy
Our Service is not intended for users under 18 years of age. We do not knowingly collect information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Policy on this page and updating the “Last updated” date.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@fificsystems.com