Privacy & Cookie Policy

Last Updated: August 5, 2026

1. Data Controller

Yikfy ("we", "our", or "us") acts as the Data Controller for the information collected through our website (yikfy.com or related landing pages). You can contact us at support@yikfy.com for any privacy-related inquiries.

2. What Data We Collect & Why

When you visit our website, we collect basic technical information exclusively to ensure our site functions properly and securely.

• Server logs: Our hosting provider processes your IP address, browser type and device type to deliver the page and to keep the site secure. We do not use these logs to build any profile of you.
• No cookies: This website sets no cookies at all: not essential ones, not analytics, not advertising.
• No tracking or analytics: We run no analytics product on this website. There is no Google Analytics, no cookieless analytics tool, no tracking pixel and no fingerprinting. We do not measure your behaviour on the page, and we cannot recognise you across visits or across other websites.
• Local browser storage: The site stores a few technical values in your own browser. They never leave your device and are never transmitted to us. In full:
  • yikfy_lang: the interface language you chose, so the site opens in it next time. Persistent until you clear your browser data.
  • yikfy_stale_reload: a flag that lets the page recover itself after we deploy a new version, instead of leaving you on a broken screen. Cleared when you close the tab.
  • react-router-scroll-positions, react-router-manifest-version, remix-router-transitions: used by the website framework to restore your scroll position when you navigate back and to load pages correctly. Cleared when you close the tab.
  All of these are either strictly necessary to deliver the site or record a preference you set yourself. None of them identifies you, and none requires consent.
• Links to our Shopify listing: Links from this site to our Shopify App Store listing carry a label in the address, for example utm_medium=hero, saying which link you clicked. The label describes the link, not you: it contains no identifier, stores nothing on your device, and is only visible to Shopify if you choose to click through. Shopify reports back to us how many people arrived from each part of the site, as a count with no individual detail. Because we run no analytics, that count is the only measure we have of whether this website does its job.
• What we do not do: We do not profile you, we do not use advertising or remarketing technologies, we do not sell your data, and we do not use it for marketing.

Because we set no cookies and run no tracking, this website shows no cookie banner. There is nothing for you to consent to and nothing to withdraw.

Separately from this website, we use Google Search Console and the Shopify Partner Dashboard. Both report aggregated statistics to us from Google's and Shopify's own systems, and neither places anything on your device. Nothing is sent to them from this site as you browse it; the one exception is the link label described above, which reaches Shopify only if you click through to our listing.

3. Legal Basis for Processing (GDPR)

We process your personal data under the following lawful bases defined by the General Data Protection Regulation (GDPR):

• Legitimate Interest: To maintain the security of our services, prevent fraud, and ensure the correct technical performance of our website (Article 6(1)(f) GDPR). This is the only basis we rely on for this website.

We do not ask for consent because we carry out no processing that requires it. The values stored in your browser (Section 2) fall within the exemptions of Article 5(3) of the ePrivacy Directive, as implemented in Italy by Article 122 of the Privacy Code: they are either strictly necessary to deliver the service you requested, or they record a preference you expressed yourself.

4. Data Retention & Deletion

We store no analytics data about you, because we collect none. Essential security and server logs are retained for 30 days and then deleted. The values stored locally in your browser (Section 2) stay on your device. All but the language preference are cleared when you close the tab; the language preference you can remove at any time by clearing your browser's site data.

5. Your Rights

Under EU law (GDPR), you have comprehensive rights regarding your data:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data ("Right to be Forgotten").

To exercise these rights, please email support@yikfy.com. We will respond to your request within 7 days.

6. Store Data in the Yikfy Shopify App

Sections 1–5 describe this website. This section describes the Yikfy app itself, for merchants who have installed it on a Shopify store. There, the merchant is the Data Controller of the store data and we act as Data Processor on their instructions.

The app requests only product and file permissions (read_products, write_products, read_files, write_files). It therefore never receives your customers' personal data: no names, no addresses, no orders. What it processes is catalogue data — product titles, descriptions, product type, vendor, tags, images and collection names — plus your shop domain and the generation settings you choose.

To produce a draft, that catalogue text is sent to AI providers acting as our sub-processors. In full:

• OpenRouter, with inference served by DeepInfra — the primary model that writes descriptions, meta titles and descriptions, custom metafields, and suggests vendor and collections. We pin the request to DeepInfra and refuse any provider that would retain the data for training, so the request either runs under those terms or fails over to the fallbacks below.
• OpenAI — fallback for the same generation tasks when the primary model is unavailable, and the service that turns your collection names into the numeric vectors used to shortlist candidate collections on very large catalogues.
• Google (Gemini API) — fallback for vendor and collection matching.
• Google Programmable Search — used only if you use the image sourcing feature, and it receives only the search query, not your catalogue.

Every one of these providers is used under terms that forbid using your data to train their models, and we do not train any model on it either. We send catalogue text for the duration of a single request; what we keep on our side is the generated draft, stored in your app so you can review it before publishing. Nothing is generated and nothing leaves your store until you ask for it, and no output is written back to Shopify until you approve it.

When you uninstall the app, Shopify sends us a shop redaction request 48 hours later and we delete the store's settings, subscription record, usage metrics and session. You can also write to support@yikfy.com at any time to ask what we hold or to have it deleted.

Note: If you are a Shopify Merchant who has installed the Yikfy app, Section 6 above covers how your store data is handled. See also our Terms of Service.