Catawise

Privacy Policy

Last updated: May 2026 · Version 1.0

1. Who we are

Catawise is a Shopify app that audits product catalog data quality for Google Shopping visibility. The data controller is Krnic (Belgium), the company operating Catawise. You can contact us at privacy@catawise.com.

2. What data we collect

When you install Catawise, we access the following data from your Shopify store via the Shopify Admin API. Catalog scans read product data; write access is used only when you approve a specific fix.

  • Product data: titles, descriptions, variants, images, metafields, vendor, product type, tags, barcode (GTIN), price, inventory status
  • Store name, store URL, and your admin email address
  • App usage analytics (pages viewed, actions taken) via PostHog EU

We do NOT collect: customer data, order data, financial data, payment information, or any personally identifiable information about your store's customers.

3. How we use your data

  • To analyse your product catalog and generate your Catalog Visibility Score
  • To identify data quality issues that may affect Google Shopping visibility
  • To apply merchant-approved fixes to specific product fields and keep a change history of those changes
  • To generate AI-powered fix suggestions when enabled and within plan limits (see sub-processors below)
  • To send weekly monitoring reports via email on Growth and Pro plans
  • To improve the Catawise detection engine (aggregated, anonymised statistics only — never individual store data)

4. Legal basis for processing (GDPR)

  • Contract performance — processing your product data is necessary to deliver the service you installed
  • Legitimate interests — product analytics and error logging to maintain service quality
  • Consent — marketing emails (you can unsubscribe at any time)

5. Sub-processors

We use the following sub-processors to deliver the service. All process data under appropriate data processing agreements (DPAs):

ProcessorPurposeLocation
SupabaseDatabase (product data, scan results)EU (Frankfurt, Germany)
OpenAIAI fix suggestions when enabledUSA (DPA covers EEA transfer)
ResendTransactional emailUSA (DPA covers EEA transfer)
PostHogAnalyticsEU (Frankfurt, Germany)
SentryProduction error monitoringUSA (DPA covers EEA transfer)

6. Data retention

  • Product scan data is retained for 90 days after the most recent scan
  • On app uninstall, the Shopify access token is deleted immediately and active scans are cancelled
  • On Shopify's shop/redact webhook or verified deletion request, all store data held by Catawise is deleted
  • You can request immediate deletion by emailing privacy@catawise.com
  • Aggregated, anonymised analytics are retained indefinitely for product improvement

7. Your GDPR rights

If you are in the EEA, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Lodge a complaint with your national supervisory authority

To exercise any right, email privacy@catawise.com. We respond within 30 days.

8. Cookies

This marketing website uses a single analytics cookie (PostHog) to understand how visitors use the site. The Shopify app itself does not use cookies — it operates within the Shopify admin iframe. You may disable cookies in your browser settings at any time.

9. Changes to this policy

We may update this policy. We will notify installed merchants of material changes via email with 14 days' notice before the change takes effect.

Contact

Krnic · Belgium · privacy@catawise.com