1. Who We Are
Industrial Ledger (Catalogzy)operates the Catalogzy platform (“Service”), accessible at catalogzy.io. This policy explains what personal data we collect, why we collect it, and how we handle it. By using the Service you agree to the practices described here.
2. Data We Collect
- Account dataName, email address, and profile photo collected during sign-up (via Google OAuth or email/password).
- Brand profile dataBrand name, logo, contact email, phone, website, and address that you enter during onboarding or in Settings.
- Catalog contentProduct names, descriptions, SKUs, categories, images, and catalog blueprints you create or upload.
- Usage dataPages visited, catalog view counts, generation events, and error logs (via Sentry).
- Payment dataPayment processing is handled entirely by Razorpay. We store only the subscription ID and plan status — never raw card details.
- CookiesSession cookies for authentication and a consent cookie for this notice. No third-party advertising cookies.
3. How We Use Your Data
- Provide, operate, and improve the Catalogzy service.
- Generate AI-powered catalog content using your brand profile and product data.
- Process subscriptions and billing via Razorpay.
- Send transactional emails (e.g., payment receipts, subscription changes) — no marketing emails without opt-in.
- Monitor for errors and service reliability (Sentry error tracking).
- Comply with legal obligations.
4. Data Sharing
We do not sell your personal data. We share it only with:
- Supabase — database and file storage (EU/US data centres).
- Google Gemini API — AI catalog generation (your brand brief and product data are sent to generate content; Google's API data-use policy applies).
- Razorpay — payment processing.
- Inngest — background job processing for catalog generation.
- Sentry — error monitoring (stack traces; no catalog content).
- Law enforcement or regulators when required by law.
5. Data Retention
Your account and catalog data are retained for as long as your account is active. You can delete your catalogs at any time from the Dashboard. To request full account deletion, email us at support@catalogzy.in — we will delete your data within 30 days.
6. Your Rights
Depending on your jurisdiction you may have rights to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your data (“right to erasure”).
- Export your data in a portable format.
- Object to or restrict certain processing.
To exercise these rights, contact us at support@catalogzy.in.
7. Security
All data is transmitted over HTTPS. Supabase enforces row-level security on the database. Passwords are handled by Supabase Auth (bcrypt). API keys and secrets are stored in environment variables, never in client-side code.
8. Children
The Service is not directed at children under 13. We do not knowingly collect data from children under 13.
9. Changes to This Policy
We may update this policy. When we do, we will update the “Last updated” date above and, for material changes, notify you by email or in-app notice at least 7 days before the change takes effect.