Privacy Policy

Overview

Felix Attribution ("Felix," "we," "us," or "our") is operated by H & Co Agency Inc. Felix provides marketing attribution services to e-commerce merchants, connecting online advertising clicks to purchases. This Privacy Policy explains how we collect, use, and protect personal information when you use our application and services.

Information We Collect

From Merchants (Our Customers)

When you install and use Felix, we access the following through your Shopify or WooCommerce store:

• Store domain and account information
• Order and purchase data (order totals, product information, timestamps)
• Customer records associated with orders (names, email addresses, phone numbers) for attribution matching
• Billing and subscription data processed through Shopify

From Store Visitors (Your Customers)

When a visitor browses a store using Felix, our tracker collects:

• Session and visitor identifiers (randomly generated, stored in cookies)
• Marketing attribution data: UTM parameters, click identifiers (gclid, fbclid, msclkid, ttclid)
• Ad platform cookies: Meta (fbp, fbc) and Google Analytics (_ga, _gid) cookie values
• Page URL at session start
• Browser type and referring URL
• Conversion events: add-to-cart actions, form submissions, and purchase confirmations

We collect page view data only once per session (at session start) to minimize data collection. We do not track individual page navigation beyond the landing page.

What We Do Not Collect

• Payment information or credit card details from store visitors
• Passwords or authentication credentials from store visitors
• Browsing activity outside of the merchant's store
• Personal information from minors under 16

How We Use Information

We use collected information to:

• Attribute purchases to marketing channels and advertising campaigns
• Send conversion events to ad platforms (Meta Conversions API, Google Ads) on behalf of merchants
• Generate analytics reports showing marketing performance and return on ad spend
• Match online visitors to in-store (POS) purchases for cross-channel attribution
• Provide customer support and maintain service reliability

We do not use your information for our own advertising, remarketing, or behavioral targeting purposes. We do not sell or rent personal data to third parties.

Data Sharing

We share data only as necessary to provide our services:

• Ad Platforms (Meta, Google Ads) — We send hashed conversion data to ad platforms on the merchant's behalf, using SHA-256 encryption for all personally identifiable information. This is a core function of our attribution service.
• PlanetScale — Database hosting provider
• Vercel — Application hosting provider

We do not share, sell, or rent data to advertisers, data brokers, or marketing platforms beyond the conversion reporting described above.

Data Security

We implement industry-standard security measures:

• All data is encrypted in transit using TLS/HTTPS
• Data at rest is encrypted by our database and hosting providers
• Personal data sent to ad platforms is hashed with SHA-256 before transmission
• Staff access to customer data is limited to authorized personnel only
• We maintain separate test and production environments

Data Retention

We retain attribution and analytics data for the duration of the merchant's subscription. Upon uninstallation or account termination, store-specific data is deleted within 30 days, unless we are legally required to retain it longer.

Tracking event data from store visitors is retained for up to 12 months for attribution analysis, after which it is automatically purged.

Consent and Customer Rights

Felix respects and applies the consent decisions made by store visitors through the merchant's consent management platform (e.g., Shopify's Customer Privacy API). If a visitor opts out of tracking, Felix does not collect or process their data.

Store visitors who wish to exercise their data rights (access, deletion, portability) should contact the merchant directly. Merchants can contact us to facilitate these requests.

Cookies

Felix uses first-party cookies on the merchant's domain to maintain visitor and session identifiers. These cookies are essential for attribution functionality and do not track visitors across other websites. We also read existing ad platform cookies (Meta _fbp, Google _ga) that are already present on the visitor's browser to improve attribution accuracy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of material changes through the application or by email. Continued use of Felix after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: