Catawise

Privacy Policy

Last updated: May 2026 · Version 1.0

1. Who we are

Catawise is a Shopify app that audits product catalog data quality for Google Shopping visibility. The data controller is Krnic (Belgium), the company operating Catawise. You can contact us at privacy@catawise.com.

2. What data we collect

When you install Catawise, we read the following data from your Shopify store via the Shopify Admin API (read-only access only):

  • Product data: titles, descriptions, variants, images, metafields, vendor, product type, tags, barcode (GTIN), price, inventory status
  • Store name, store URL, and your admin email address
  • App usage analytics (pages viewed, actions taken) via PostHog EU
  • Error logs via Sentry EU (anonymised where possible)

We do NOT collect: customer data, order data, financial data, payment information, or any personally identifiable information about your store's customers.

3. How we use your data

  • To analyse your product catalog and generate your Catalog Visibility Score
  • To identify data quality issues that may affect Google Shopping visibility
  • To generate AI-powered fix suggestions (product data is sent to our AI provider under a zero-retention DPA — see sub-processors below)
  • To send you scan results and weekly monitoring reports via email (paid plans only)
  • To improve the Catawise detection engine (aggregated, anonymised statistics only — never individual store data)

4. Legal basis for processing (GDPR)

  • Contract performance — processing your product data is necessary to deliver the service you installed
  • Legitimate interests — product analytics and error logging to maintain service quality
  • Consent — marketing emails (you can unsubscribe at any time)

5. Sub-processors

We use the following sub-processors to deliver the service. All process data under appropriate data processing agreements (DPAs):

ProcessorPurposeLocation
SupabaseDatabase (product data, scan results)EU (Frankfurt, Germany)
OpenAI / AnthropicAI fix suggestions (zero-retention DPA)USA (DPA covers EEA transfer)
ResendTransactional emailUSA (DPA covers EEA transfer)
PostHogAnalyticsEU (Frankfurt, Germany)
SentryError monitoringEU

6. Data retention

  • Product scan data is retained for 90 days after the most recent scan
  • On app uninstall, all store data is deleted within 30 days
  • You can request immediate deletion by emailing privacy@catawise.com
  • Aggregated, anonymised analytics are retained indefinitely for product improvement

7. Your GDPR rights

If you are in the EEA, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Lodge a complaint with your national supervisory authority

To exercise any right, email privacy@catawise.com. We respond within 30 days.

8. Cookies

This marketing website uses a single analytics cookie (PostHog) to understand how visitors use the site. The Shopify app itself does not use cookies — it operates within the Shopify admin iframe. You may disable cookies in your browser settings at any time.

9. Changes to this policy

We may update this policy. We will notify installed merchants of material changes via email with 14 days' notice before the change takes effect.

Contact

Krnic · Belgium · privacy@catawise.com