Fenryl Labs Inc.Fenryl Labs

    Privacy Policy

    Last updated: January 10, 2026

    Fenryl Labs Inc. ("Fenryl", "we", "our", or "us") provides analytics, attribution, and performance insight tools for Shopify merchants. This Privacy Policy explains how we collect, use, store, and protect information when you use Fenryl’s applications, including The Pixel and other Fenryl-branded services (the "Services").

    This policy is designed to meet the requirements of major platforms we integrate with (Google, Meta, TikTok, Shopify) and applicable privacy regulations, including GDPR, UK GDPR, and CPRA.

    1. Company Information

    • Legal entity: Fenryl Labs Inc.
    • Country of incorporation: Canada
    • Business address: 18 Vanessa Terr, Ottawa, ON, K2J2J8, Canada
    • Privacy contact: support@fenryllabs.com

    2. Scope & User Types

    Fenryl’s Services are intended for Shopify merchants who install and authenticate Fenryl applications. Fenryl also processes limited data relating to store visitors when merchants enable tracking functionality (via our Shopify Web Pixel App), as described below.

    3. Roles Under Data Protection Law

    • Data Processor: Fenryl acts as a processor when handling data on behalf of merchants (including advertising platform data and Shopify data) under the merchant’s instructions.
    • Independent Data Controller: Fenryl acts as a controller for aggregated/anonymized analytics, internal operational logs, and security data.
    • Data Controller: Merchants remain the primary Data Controllers for their advertising accounts and ecommerce data.

    4. Data Sources & Integrations

    4.1 Google API Disclosure (Google Ads API)

    Fenryl accesses Google Ads data only after explicit OAuth authorization by the merchant. To comply with Google API Services User Data Policy, we explicitly disclose the following:

    • Data Accessed: Fenryl accesses your Google Ads account to retrieve campaign identifiers (Campaign ID, Name), ad group identifiers, ad performance metrics (Impressions, Clicks, Cost, Conversions), and account-level spend data.
    • Data Usage: This data is used solely to generate analytics dashboards and attribution reports within the Fenryl application. We process this data to provide you with insights into your advertising performance. We do not use this data for serving advertisements, nor do we use it to train, retrain, or improve generalized Artificial Intelligence (AI) or Machine Learning (ML) models.
    • Data Sharing: Fenryl does not share your Google user data with any third parties, data brokers, or other applications, except for the subprocessors listed in Section 9 (Vercel, Supabase) strictly for the purpose of hosting and storage. We do not sell your Google user data.
    • Data Storage & Protection: We strictly limit our storage of Google data. We only store Campaign Identifiers and Account IDs to facilitate account mapping. We do not store other Google user data. This data is stored in our secure database (Supabase) which is encrypted at rest (AES-256) and in transit (TLS). Access is restricted to authorized system processes.
    • Data Retention & Deletion: We retain these specific identifiers (Campaign and Account IDs) for the duration of your subscription or up to 5 years. We do not retain other Google user data. You may request deletion of your data at any time by contacting support@fenryllabs.com or by uninstalling the application, which triggers our automated deletion process.

    Limited Use Disclosure: Fenryl’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

    4.2 Meta (Facebook / Instagram Marketing API)

    Fenryl accesses Meta advertising data (campaign performance and pixel metadata) to provide analytics. We do not send server-side conversion events to Meta or manage ads on behalf of merchants.

    4.3 TikTok Ads API

    Fenryl accesses TikTok Ads event-level and aggregated data for attribution. We do not use TikTok Device Data Collection Tools (DDCTs) for independent targeting.

    4.4 Shopify API

    Fenryl accesses Shopify Objects (Orders and Metafields) only after app installation. This data is used solely to provide the analytics services requested by the merchant.

    5. Data Deletion & User Rights

    We provide clear pathways for users and merchants to exercise their data rights:

    • Data Deletion Requests: To request the permanent deletion of your data, please contact support@fenryllabs.com. We respond to all verified requests within 30 days.
    • Revocation of Access: You may revoke Fenryl's access to Google, Meta, or TikTok at any time via the Fenryl dashboard or your platform security settings.
    • Automated Deletion: Merchants may configure the Services to automatically delete data upon uninstallation of the app.
    • Right to Access/Correct: Users may request a copy of their data or corrections to inaccurate information via the contact email above.

    6. Personal Data Processed

    We process Merchant data (account info), Order data (identifiers, timestamps), and Customer data (names and physical addresses). We do not process email addresses or phone numbers. This data is used strictly for internal analytics and is never used for remarketing or third-party profiling.

    7. Tracking Technologies

    Fenryl uses first-party cookies and local storage (e.g., xtp_anon_id) to recognize returning browsers. These are non-identifying identifiers with a lifespan of up to 365 days. We rely on merchant-managed consent mechanisms provided by Shopify.

    8. Data Retention & Security

    • Retention: Data is kept for up to 5 years unless earlier deletion is requested. After this period, data is anonymized.
    • Security: We use industry-standard encryption (AES-256 at rest, TLS in transit), Supabase for secure database management, and Vercel for secure hosting.

    9. Third-Party Sharing (Subprocessors)

    Fenryl does not sell, rent, or trade your data. We use the following subprocessors to provide our services:

    • Vercel (Hosting)
    • Supabase (Database & Auth)

    10. Contact

    For any privacy-related questions, please contact:

    Fenryl Labs Inc.

    Email: support@fenryllabs.com

    Address: 18 Vanessa Terr, Ottawa, ON, K2J2J8, Canada