Where your data lives, and who can see it.
Hosted in the EU, personal details stripped before anything is stored, access set per brand and per role, and every privacy request handled.
Held in the EU, in Ireland
Your store, ad and email data sits in Fabrik's own database in the EU (Ireland), with daily backups.
- One database region for every brand
- The website and the app are served over HTTPS only
Personal details stripped before storage
Orders arrive with addresses and phone numbers. Fabrik strips them on the way in and keeps the country and region, which is all the analysis needs.
- No street, city, postcode, phone number or IP address in stored orders
- Every way data comes in goes through the same stripping step
- Shopify approved Fabrik's access to protected customer data
Access by brand and by role
Every brand's data is fenced off in the database itself, not only on screen. People see the brands they are linked to, and what their role allows.
- Client users see their own brand or portfolio only
- Roles set who can change settings, connections and reports
- Credentials for Shopify, Meta, Google and Klaviyo are never sent to the browser
Privacy requests, handled
Shopify's customer data requests and erasures are answered automatically, and data kept past its purpose is removed on a schedule.
- Customer erasure and data requests from Shopify, handled in the app
- When a store uninstalls the app, Shopify sends a deletion request 48 hours later, and Fabrik erases that store's shoppers' personal data and order-level data
- Browser pixel events are kept for 90 days, server-side events for 365 days
- Questions go to privacy@fabrik.ae
Questions about your data
Where is our data held?
In the EU, in Ireland, in Fabrik's own database, with daily backups.
Do you store our customers' addresses?
No. Street addresses, phone numbers and IP addresses are stripped from orders before anything is stored. Country and region are kept.
Can a client user see another brand?
No. Access is enforced in the database for each brand, so a client user reads only their own brand or portfolio.