Privacy Policy
Yolkii · Last updated 1 August 2026
Yolkii is a print production platform for artists. This page explains what personal information we hold, how we use it, and when we delete it.
What we collect
When you (an artist) install the Yolkii app on your Shopify store, we start receiving copies of your orders. That includes:
- Your customer's name, email, phone, and shipping address
- The items they ordered and how much they paid
- Notes they left at checkout
- Your product catalogue (titles, sizes, SKUs)
- An access token from Shopify so we can send fulfilment updates back
Why we hold it
Only to help you fulfil the order - printing the artwork, packing it, shipping it, and telling Shopify when it's on its way. We don't use customer information for anything else. We don't sell it. We don't share it with advertising networks.
Who we share it with
Three service providers help us run Yolkii:
- Starshippit — we send them the shipping address so they can print the courier label.
- Supabase — hosts our database in Australia.
- Fly.io — hosts our Shopify app.
Each of them handles data on our behalf and follows their own privacy practices.
How long we keep it
Personal information (customer name, email, phone, street address) is kept for 18 months after the order is placed, then automatically stripped from our records. What remains is a de-identified copy of the order — the order number, date, price, artwork, edition number, and rough shipping region (suburb, state, postcode, country). This de-identified record stays for 7 years so we can provide analytical capabilities, as well as abide by Australian tax record-keeping rules. It is then deleted entirely.
A separate audit log of when personal information was accessed or deleted is kept indefinitely. This audit log does not contain any personal information, nor order data.
How we protect it
Data is encrypted at rest in our database and in transit between services. Access to personal information is enforced at the database layer through role-based policies, and every access is recorded in an immutable audit log. Shopify access tokens receive an additional application-level encryption on top of storage encryption.
Getting your data deleted
If you're a customer of an artist who uses Yolkii and you want your data deleted, please ask the artist directly. Shopify has a built-in request system — the artist can send us the request through Shopify and we'll delete your personal information within 30 days.
If you're an artist who uses yolkii and then uninstalls the yolkii shopify app, Shopify tells us 48 hours later, and we automatically delete all your customers' personal information across our records at that point.
Questions
Reach out any time — admin@yolkii.com.