Privacy policy

Fiftify Inc. ("we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit fiftify.com (the "Site"), use our services (the "Services"), or otherwise interact with us.

1. Our two roles: controller and processor

For personal data that we process on behalf of our business customers through the Services, such as information about their customers, orders, products, or shipments, Fiftify acts as a data processor and the customer acts as the data controller. Such processing is governed by our Data Processing Agreement, which, where applicable, forms part of the agreement between Fiftify and the customer with respect to Customer Data. If you are a buyer with questions about your data, please contact the store you purchased from; we will assist that merchant in responding to your request.

For personal data relating to our own business relationships, including account information, billing information, support communications, and information about Site visitors, Fiftify acts as a data controller, and this Privacy Policy applies directly.

2. Information we collect

We collect the following categories of information:

• Account information, such as your name, email address, login credentials, account settings, and authentication information.
• Billing and payment information, such as billing address, subscription details, transaction records, and payment information provided by or received from our payment providers.
• Usage and device information, such as IP address, browser type, operating system, and activity logs, collected automatically through cookies and similar technologies for analytics, security, and service operation.
• Communication records, such as emails, chat logs, and support messages, for support delivery and quality assurance.
• Survey and feedback responses, when you choose to provide them.

We collect information directly from you (when you create an account, complete forms, or communicate with us), automatically (through cookies and similar technologies), and from third parties such as our payment providers and the sales channels you connect.

We may also create aggregated or de-identified information that does not reasonably identify you or another individual, and use it for lawful business purposes, including analytics, research, and service improvement.

3. How we use information

We use personal information to:

• Provide and operate the Services: set up and maintain your account, deliver features, and process payments.
• Communicate with you: as described in Section 4.
• Improve and secure the Services: analyze usage, prevent fraud and abuse, and protect our users and infrastructure.
• Comply with legal obligations: keep required records, resolve disputes, and enforce our agreements.

4. Communications

We send service-related communications that are necessary to operate your account, such as security alerts, billing notices, and important service updates. Where required by law, we send marketing communications only with your consent or where otherwise permitted by applicable law. You can unsubscribe from marketing communications at any time using the link in the message or by contacting us.

5. Legal bases for processing (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

6. Sharing your information

We may share personal information with service providers that help us run our business, such as payment providers, hosting and infrastructure providers, analytics providers, and customer support vendors, under appropriate agreements. Payment providers such as Paddle, Stripe, and PayPal process payment information as independent controllers under their own privacy policies. Subprocessors that process Customer Personal Data on behalf of our customers are listed on the Subprocessors page. We may also share information in connection with a merger, sale, or reorganization; when required by law, subpoena, or government request; and to enforce our policies, prevent fraud, or protect rights and safety. Aggregated, de-identified information may be shared for business or research purposes.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes other than those permitted by applicable law.

7. Cookies and tracking technologies

We use essential cookies required for the Site and Services to work and, with your consent where required, analytics cookies from Google Analytics, loaded via Google Tag Manager. Non-essential cookies are set only after you make a choice in the cookie banner, and you can change or withdraw your preferences at any time through our cookie settings. We currently do not respond to "Do Not Track" signals. The full list of cookies, providers, purposes, and lifetimes is in our Cookie Policy.

8. Data security

We maintain reasonable technical and organizational safeguards appropriate to the nature of the information we process, including encryption in transit and at rest, access controls with multi-factor authentication and role-based permissions, secure backups, and staff training on security and privacy. No system is completely secure; please notify us at [email protected] if you suspect any breach or misuse.

9. Data retention

We retain personal information for as long as necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business and financial records, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it is processed. Customer Data processed on behalf of our customers is retained and deleted in accordance with the applicable Data Processing Agreement and the customer's instructions.

10. Your privacy rights

10.1. Privacy rights. Depending on where you live and subject to applicable law, you may have the right to access, correct, or update your personal information; request deletion; object to or restrict processing; withdraw consent where processing is based on consent; and request a copy of your data in a portable format. To exercise these rights, contact us at [email protected]. We may need to verify your identity before fulfilling requests.

10.2. California residents (CCPA / CPRA). You have the right to know what personal information we collect, use, and disclose; request deletion; correct inaccurate data; opt out of the sale or sharing of personal information; limit the use of sensitive personal information; and not be discriminated against for exercising your rights. As stated above, we do not sell personal information or share it for cross-context behavioral advertising. To make a request, email [email protected] with the subject line "California Privacy Request".

10.3. EEA / UK residents (GDPR / UK GDPR). You also have the right to object to processing based on legitimate interests and to lodge a complaint with your local data protection authority (for example, the ICO in the UK or your national supervisory authority in the EEA).

11. International data transfers

Your information may be transferred to countries outside your jurisdiction, including the United States. Where required, we rely on appropriate safeguards for such transfers, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or other legally recognized transfer mechanisms.

12. Children's privacy

Our Services are intended for business users and are not directed to individuals under 18. We do not knowingly collect data from minors. If such data is discovered, it will be deleted promptly.

13. Changes to this policy

We may update this Privacy Policy periodically. The latest version will always be posted on this page with an updated "Last updated" date. Significant changes may be communicated via email or in-app notification.

14. Contact us

Fiftify Inc., 1111B S Governors Ave STE 23190, Dover, DE 19904, USA. Email: [email protected].