Privacy Policy

1. Information We Collect

We collect information you provide directly: email address, password (stored as a bcrypt hash), name, and country. We also collect usage data including searches, monitor activity, news interactions, and technical data such as IP address, browser type, and session information.

2. How We Use Information

Your information is used to provide and improve Catalayer services, manage your account and subscriptions, deliver monitor alerts and matched results, prevent abuse and enforce platform rules, and comply with legal obligations.

3. Cookies and Authentication

Catalayer uses session cookies (cl_session) for authentication. These are httponly, secure, and samesite=lax cookies that maintain your login state. We use Google Analytics for anonymous usage analytics. We do not use tracking cookies for advertising.

4. Billing and Third-Party Services

Payment processing is handled by Stripe. We store your Stripe customer ID and subscription status but do not store credit card numbers. Email delivery is handled by Resend. The Chrome extension reads product data only from pages where you initiate a search.

5. Data Retention

Account data is retained while your account is active. News article bodies are stripped after 7 days (headlines retained for search). Monitor results and deliveries are retained for 30-90 days depending on your plan. You can request full account deletion at any time.

6. Security

All data is encrypted in transit using HTTPS/TLS. Passwords are hashed with bcrypt. Session tokens are generated using cryptographically secure random bytes. Access to production systems is restricted to authorized personnel.

7. Source Finder and Extensions

The Source Finder Chrome extension reads product data from the active page only when you initiate a search. It sends product title, image URL, and price to Catalayer servers for supplier matching. It does not access cookies from third-party sites or track browsing activity.

8. Your Rights

You may request access to your personal data, correction of inaccurate data, deletion of your account and associated data, or export of your data. Contact [email protected] for any data-related requests.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the platform or by email. Continued use of Catalayer after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests, contact [email protected].