Privacy Policy

Last updated: August 24, 2026

This Privacy Policy explains how Fixitify ("Fixitify", "we", "us" or "our") collects, uses, stores, discloses and protects information when you use our websites, storefront audit services, workspaces and optional integrations. It also explains choices and rights that may apply to you under applicable privacy laws.

1. Scope and roles

This Policy applies to Fixitify services and websites that link to it. For account, billing, product analytics, security and direct customer relationship data, Fixitify generally acts as the controller or business responsible for deciding why and how that information is processed. Where a merchant connects a third-party commerce service and Fixitify processes personal data solely on that merchant's instructions, applicable law may instead treat the merchant as controller/business and Fixitify as processor/service provider.

2. Information we collect

Depending on how you use Fixitify, we may process:

• Account and workspace data: name, email address, authentication and membership information, store associations, preferences and support communications.
• Storefront audit data: store domains and URLs, publicly available page content and technical signals, crawl results, audit findings, scores and historical comparisons.
• Integration data: authorization details, encrypted access credentials or refresh tokens where needed, granted scopes, connection status and data returned by an integration as described below.
• Billing and transaction data: subscription status, plan and transaction references supplied by our payment provider. Payment card details are processed by the payment provider and are not intended to be stored by Fixitify.
• Technical and security data: IP address, request and device/browser metadata, timestamps, logs, security events and diagnostic information necessary to operate, protect and troubleshoot the service.
• Feedback and communications: information you choose to provide when contacting us or submitting product feedback.

3. How we use information

We use information to provide and maintain Fixitify; authenticate users and administer workspaces; perform and improve storefront audits; produce reports, comparisons, prioritization and monitoring; operate optional integrations; provide support; process subscriptions; prevent fraud, abuse and security incidents; comply with law; and understand and improve service reliability and user-facing functionality.

4. Google Search Console and Google API data

Connecting Google Search Console is optional. When you authorize it, Fixitify requests the minimum access needed for the integration and currently uses the Google Search Console read-only scope (webmasters.readonly). Fixitify uses authorized Search Console data to identify the properties available to you and to retrieve search-performance information such as pages, queries, clicks, impressions, click-through rate and average position. We use that information to provide user-facing search-impact analysis, opportunity detection, prioritization, historical comparisons and related Fixitify features.

Fixitify does not use Google user data for advertising, does not sell Google user data, and does not transfer it to third parties except as necessary to provide or improve the user-facing feature you requested with appropriate consent, for security purposes, to comply with applicable law, or as otherwise permitted by the Google API Services User Data Policy. Human access to Google user data is restricted except where you affirmatively request support requiring such access, where necessary for security or abuse investigation, to comply with law, or where permitted for appropriately aggregated internal operations.

Fixitify's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

You can disconnect Search Console from Fixitify at any time. When disconnected, Fixitify deletes the stored connection and associated Search Console snapshots and attempts to revoke the Google authorization token. You may also revoke Fixitify's access from your Google Account permissions.

5. Shopify integration data

Fixitify can audit a public Shopify storefront without Shopify Admin access. Connecting the Shopify integration is optional and is used to add read-only merchant-authorized context to the audit. The current integration requests only read-only permissions required for supported features, including theme and online-store navigation context. We use this information to improve audit accuracy, distinguish storefront configuration from observable symptoms, support prioritization and provide integration-aware reporting.

Fixitify does not use Shopify authorization to modify your store under the current read-only integration. We apply data minimization and do not intentionally request protected customer fields where they are not required for the service. If our Shopify functionality later requires additional data or permissions, we will update our disclosures and authorization flow before using them.

When you disconnect the Shopify integration or Shopify notifies us that the app was uninstalled, Fixitify removes the stored Shopify connection credentials and associated integration snapshots through the connection lifecycle. Some non-sensitive audit records may remain where required to preserve your requested audit history, meet legal obligations or maintain security records.

6. Legal bases

Where laws such as the GDPR or UK GDPR require a legal basis, we process information as necessary to perform a contract with you, based on our legitimate interests in operating and securing the service, with your consent where required, and/or to comply with legal obligations. You may withdraw consent where processing is based on consent, without affecting prior lawful processing.

7. Sharing and service providers

We may disclose information to vendors that help us host, secure, operate, communicate, analyze or bill for the service, subject to appropriate contractual and confidentiality protections; to professional advisers; in connection with a corporate transaction subject to applicable safeguards; or when required by law. We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising as those terms are defined by certain U.S. state privacy laws unless we provide the notices and choices required by applicable law.

8. Retention and deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the service, maintaining user-requested audit history, resolving disputes, enforcing agreements, meeting legal/accounting obligations and protecting the service. Retention varies by data type and relationship. OAuth credentials are retained only while the relevant connection is active or otherwise necessary to operate the authorized integration. Integration records configured to cascade with a connection are deleted when that connection is deleted. Security and transactional records may be retained for a limited period after account or connection deletion where necessary for legitimate security or legal purposes.

9. Security

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure or destruction. These include access controls and protection of integration credentials in storage and transit. No internet service can guarantee absolute security.

10. International transfers

Fixitify and its service providers may process information in countries other than the country where you live. Where required, we use legally recognized transfer mechanisms and safeguards for international transfers of personal data.

11. Your privacy rights

Depending on your location, including under the EEA/UK GDPR, Türkiye's KVKK and applicable U.S. state privacy laws such as the CCPA/CPRA, you may have rights to request access, correction, deletion, portability, restriction or objection; to withdraw consent; and, where applicable, to opt out of certain sale, sharing, profiling or targeted-advertising uses. These rights are subject to legal conditions and exceptions. We will not discriminate against you for exercising applicable privacy rights.

To make a privacy request, contact [email protected]. We may need to verify your identity and authority before completing a request. If your request concerns data controlled by a Shopify merchant, we may direct you to that merchant or assist the merchant as required by applicable law.

12. Children

Fixitify is a business service and is not directed to children. We do not knowingly collect personal information from children in circumstances where parental consent would be required. If you believe a child has provided personal information improperly, contact us.

13. Changes to this Policy

We may update this Policy as our service, integrations or legal obligations change. We will post the revised version with an updated date and provide additional notice or obtain consent when required by law or applicable platform policy.

14. Contact

For privacy questions, requests or complaints, contact Fixitify at [email protected]. You may also have the right to lodge a complaint with the competent data protection authority in your jurisdiction.