Privacy policy: Sales Bookkeeping Sync

Last updated: 11 November 2026

This policy explains what data the Wix app “Sales Bookkeeping Sync” (the app), published by Kayabyte, the trading name of Caner Kaya, Stasjonsveien 64, 0771 Oslo, Norway (we, us), processes when it is installed on a Wix site. It adds to the privacy policy for Kayabyte apps for Wix, which also applies.

What the app does

The app sends the site’s paid store orders, payments, refunds and cancellations to the Fiken company that the site owner connects, as sales with payments, and refunds as negative sales with refund payments.

Roles

The site owner is the controller for the data in their Wix site and Fiken company. Kayabyte acts as a processor that handles the data only to run the sync the owner set up. Wix.com Ltd. hosts the site and the app’s dashboard page. Fiken AS provides the Fiken company and its API. Cloudflare, Inc. hosts the app’s sync service and its storage and is a sub-processor.

Data the app reads

• From Wix: paid orders (order ID and number, dates, line items with names, quantities, prices, taxes and discounts, shipping, extra fees, totals and currency), the order’s payments and refunds (amounts, status, payment method type), the buyer’s name, email address, phone number and country, and the site’s time zone and plan for the app.
• From Fiken, for the connected company: the company name and organisation number (to tell companies apart in the chooser), accounts, bank accounts and VAT codes (for the settings lists), and the sales, drafts, contacts and payments the app created or needs to match.
• The app does not read card details, site members, contacts outside orders, or anything unrelated to orders.

Data sent to Fiken

A sale with its payment for each order (and a negative sale with a negative payment for each refund), and a customer with the buyer’s name, email address, phone number and country (or one shared customer, if the site owner chooses that setting). Data goes only to the Fiken company the site owner connected.

Data the app stores

• The Fiken connection: the company ID and name, and the access and refresh tokens, encrypted (AES-GCM, one key per site) and never shown in the dashboard.
• The site owner’s settings (accounts, VAT mapping, sale options, start date).
• Per order: the order ID and number, totals, currency, sync state, a short message, and the IDs of the Fiken sales and payments created. These records are what stop an order from being sent twice.
• A log of recent sync events (time, order number, what happened), monthly order counts for the plan, and the VAT rates seen on orders.
• Short-lived sign-in states (10 minutes).

Retention and deletion

Disconnecting Fiken revokes and deletes the tokens at once. When the app is removed from the site, syncing stops and the Fiken connection is revoked; the settings, event log and counts are deleted 30 days later, and all remaining records 90 days later (a reinstall within that time continues without sending orders twice). Sales already in Fiken are never changed or deleted by removing the app. Site owners can ask for earlier deletion at support@kayabyte.dev.

Logs

The sync service writes technical log lines (the app instance ID, the request path, the outcome and error codes). Logs are kept by Cloudflare for a short time.

Plans and payments

Paid plans are sold and billed by Wix. We never receive card details.

Cookies, tracking and third parties

The app sets no cookies on the site and uses no analytics, advertising or tracking services. No data is shared with third parties other than Wix, Fiken and Cloudflare, as described above.

Your rights

For questions about this policy, or to exercise your rights under the GDPR, contact support@kayabyte.dev.

Changes

We will update this page when the app’s data use changes and show the date at the top.