Privacy Policy

What we collect

• Account data: name, email, hashed password (never the password itself).
• If you sign in with Google or Apple: your name, email and an account ID from them, passed through Firebase Authentication (a Google service). We never see your Google or Apple password.
• Order data: products purchased, amounts, timestamps, receipts and license keys.
• Security data: IP address, browser user agent, sign-in and download logs, used for fraud prevention and rate limiting.
• Seller data: store details, country, payout/verification status reported by the payment provider, and the payout details a seller saves for bank transfer, PayPal or crypto payouts (stored encrypted and shown only to FIGIMI's finance team when a payout is sent).
• Support data: messages you send to our team.
• Messages: the messages and photos you send and receive on FIGIMI, and any reports or blocks you make.
• Searches: what is typed in the search box, counted per search with how many results it found and how often a result was opened. These totals aren't linked to you, your account or your IP address. Your recent searches are kept only in your browser.
• Profile and follows: your public name, username, optional profile photo (resized, with location data removed), the people and shops you follow, and in-app notifications about your account.
• Browsing activity on FIGIMI, only while personalized recommendations are on: searches, products and categories you open, and which homepage recommendations you open or scroll past.

Personalized recommendations

We use your browsing activity on FIGIMI, plus your favorites and purchases when you're signed in, to order the products on the homepage. It is processed by FIGIMI only, never shared with advertisers or used for paid placements, and kept for 90 days (homepage impressions for 30 days).

You can see your recent activity, delete it, or turn recommendations off at any time on the Your recommendations page (/personalization). Turning them off deletes the stored activity. If your browser sends a Global Privacy Control signal, recommendations start off until you turn them on.

Your public profile

Everyone has a profile at /people/<username>. It shows your public name, username, profile photo, the year you joined, your follower counts, the shops and people you follow, your published reviews and, if you own one, your shop. Your favorites appear only if you turn that on in Account settings. Your email address and purchases are never shown.

When you follow someone or a shop, they get a notification with your name and a link to your profile. You can change your name, username and photo, or remove the photo, at any time in Account settings.

Messages

Messages are private between you and the person or shop you write to. Photos are resized and their location data is removed. To protect you from scams, email addresses and phone numbers are hidden from the other person, and messages are automatically screened for things like requests to pay outside FIGIMI or phishing.

FIGIMI's trust & safety staff can read a conversation when it's reported, when screening flags it, or when it's needed to investigate fraud, a payment dispute or a legal request. Opening a conversation that wasn't reported or flagged requires a written reason, and every staff view is logged.

Conversations are kept while your account exists so reports and disputes can be checked. Deleting a conversation, or leaving it in the recycling bin for 30 days, removes it from your view only; the other person keeps their copy.

Search and suggestions

Search suggestions, spelling fixes and popular searches are learned from everyone's searches added together. A search is only suggested to others after several people searched it and it found products, and staff can hide any suggestion.

When a seller types a product name FIGIMI doesn't know yet, that name (and nothing about the seller) may be looked up on Wikidata, Wikipedia's public database. Rarely used searches are deleted after 6 months.

What we don't collect

Card numbers are entered directly with the payment provider; FIGIMI only receives references such as payment IDs. We only hold bank, PayPal or wallet details for sellers who choose to be paid that way (see Seller data).

Support access to your account

To help with a support request or check a problem, authorized FIGIMI staff can view the site as you see it, for up to 30 minutes at a time. While they do, nothing can be changed, sent, bought or downloaded, and each session is logged with the staff member and the reason.

Messages from the official FIGIMI account, marked with the verified badge, are written by our support team, and your replies to it are read by that team.

How we use data

• To provide accounts, checkout, downloads, receipts and support.
• To pay sellers and meet tax and accounting obligations.
• To detect fraud, abuse, chargebacks and policy violations.
• To send product updates and newsletters only if you confirmed a subscription.
• To email you once when seller signups open, if you joined the seller waitlist.
• To show prices in your currency (USD, EUR or GBP), we estimate your country from your IP address on our own servers, using IP-to-country data from the Number Resource Organization (nro.net, CC BY 4.0). Your IP isn't sent anywhere for this, and a currency you pick yourself is remembered in a cookie.

Sharing

We share data with service providers that run FIGIMI (hosting, database, storage, email, payment processing) under data-processing agreements. Sellers see the order details needed to support you, not your payment details. We don't sell personal data.

Retention

Order and financial records are kept as long as accounting law requires. Security logs are kept for a limited period. Notifications are deleted 90 days after you read them (unread ones after a year). You can ask us to delete your account; some records must be retained.

Your rights

Depending on where you live you may access, correct, export or delete your data and object to certain processing. Contact support to make a request.

Cookies

We use a strictly necessary session cookie to keep you signed in, and a cookie to remember the display currency you pick. While personalized recommendations are on, a first-party cookie holds a random visitor ID that links your activity on this browser (it is replaced when you sign out or clear your history), and another remembers your on/off choice. No advertising or third-party cookies are set by this application.