Privacy Policy
Last updated: May 2026 · Version 1.0
1. Who we are
Catawise is a Shopify app that audits product catalog data quality for Google Shopping visibility. The data controller is Krnic (Belgium), the company operating Catawise. You can contact us at privacy@catawise.com.
2. What data we collect
When you install Catawise, we access the following data from your Shopify store via the Shopify Admin API. Catalog scans read product data; write access is used only when you approve a specific fix.
- Product data: titles, descriptions, variants, images, metafields, vendor, product type, tags, barcode (GTIN), price, inventory status
- Store name, store URL, and your admin email address
- App usage analytics (pages viewed, actions taken) via PostHog EU
We do NOT collect: customer data, order data, financial data, payment information, or any personally identifiable information about your store's customers.
3. How we use your data
- To analyse your product catalog and generate your Catalog Visibility Score
- To identify data quality issues that may affect Google Shopping visibility
- To apply merchant-approved fixes to specific product fields and keep a change history of those changes
- To generate AI-powered fix suggestions when enabled and within plan limits (see sub-processors below)
- To send weekly monitoring reports via email on Growth and Pro plans
- To improve the Catawise detection engine (aggregated, anonymised statistics only — never individual store data)
4. Legal basis for processing (GDPR)
- Contract performance — processing your product data is necessary to deliver the service you installed
- Legitimate interests — product analytics and error logging to maintain service quality
- Consent — marketing emails (you can unsubscribe at any time)
5. Sub-processors
We use the following sub-processors to deliver the service. All process data under appropriate data processing agreements (DPAs):
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database (product data, scan results) | EU (Frankfurt, Germany) |
| OpenAI | AI fix suggestions when enabled | USA (DPA covers EEA transfer) |
| Resend | Transactional email | USA (DPA covers EEA transfer) |
| PostHog | Analytics | EU (Frankfurt, Germany) |
| Sentry | Production error monitoring | USA (DPA covers EEA transfer) |
6. Data retention
- Product scan data is retained for 90 days after the most recent scan
- On app uninstall, the Shopify access token is deleted immediately and active scans are cancelled
- On Shopify's shop/redact webhook or verified deletion request, all store data held by Catawise is deleted
- You can request immediate deletion by emailing privacy@catawise.com
- Aggregated, anonymised analytics are retained indefinitely for product improvement
7. Your GDPR rights
If you are in the EEA, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (“right to be forgotten”)
- Restrict or object to processing
- Data portability
- Lodge a complaint with your national supervisory authority
To exercise any right, email privacy@catawise.com. We respond within 30 days.
8. Cookies
This marketing website uses a single analytics cookie (PostHog) to understand how visitors use the site. The Shopify app itself does not use cookies — it operates within the Shopify admin iframe. You may disable cookies in your browser settings at any time.
9. Changes to this policy
We may update this policy. We will notify installed merchants of material changes via email with 14 days' notice before the change takes effect.
Contact
Krnic · Belgium · privacy@catawise.com