Who we are
Zikkio is operated by [Company legal name], [Registered address], [Company registration number]. For anything in this policy, write to info@zikkio.com.
Two roles
For your Zikkio account and this website, we decide why and how personal data is used: we are the controller. For the store data we handle on your behalf through the API, you are the controller and we are your processor. That part is covered by our Data Processing Agreement, included with every paid plan.
What we collect
Account data: the name and email of the person who opens the account, and of the people they invite.
Contact form: your name, company, work email and message.
Usage data: request metadata and errors from the API and the dashboard, without store keys or request bodies.
Billing data: the company details we need to invoice you.
What we do not collect
Zikkio never receives card or payment details from the stores it connects. Orders, with the end-customer details they carry, are store data: we process them for our customers under the Data Processing Agreement.
Why we use it
To run your account and the service you signed up for (contract).
To answer messages sent through the contact form (your request).
To keep the service secure and fix errors (legitimate interest).
To send invoices and keep accounting records (legal obligation).
How long we keep it
We keep personal data only as long as we need it:
| Data | What it is | How long |
|---|---|---|
| Account data | What it is: Name and email of account users | How long: While the account is open |
| Application logs | What it is: Errors and request metadata, without store keys or request bodies | How long: 5 days |
| Job records | What it is: Status of catalog downloads and price updates | How long: 30 days |
| Contact messages | What it is: What you send through the contact form | How long: [To confirm] |
| Invoices | What it is: Billing details and invoices | How long: As long as the law requires |
Who we share it with
These providers help us run Zikkio and process data only on our instructions. We tell customers 30 days before adding a new one. We do not sell or rent personal data.
| Provider | What they do | Location |
|---|---|---|
| Amazon Web Services | What they do: Servers, database and cache | Location: United States |
| Sentry | What they do: Error tracking, configured not to receive personal data | Location: United States |
| Slack | What they do: Internal error alerts, without store keys or request bodies | Location: United States |
| [Payment provider] | What they do: Billing and invoices | Location: [To confirm] |
| [Email provider] | What they do: Account and billing emails | Location: [To confirm] |
| [Bot protection provider] | What they do: Protects sign-up from bots | Location: [To confirm] |
Transfers outside the EU
Our servers are in the United States. Where personal data leaves the European Economic Area, we rely on [Transfer mechanism, for example the EU Standard Contractual Clauses].
Your rights
You can ask us to see, correct, export or delete your personal data, or object to how we use it. Write to info@zikkio.com and we answer within one month, as the GDPR requires. You can also complain to your data protection authority.
Cookies
We use the cookies the site needs to work and Google Analytics cookies to measure visits. The Cookie policy lists them.
Security
How we protect data, what we store and who our sub-processors are is described on the Security page.
Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use your data, we tell account owners by email first.