Privacy Policy

1. Introduction

CataPro AI Studio (we, us, or our) is a Shopify application that helps merchants generate, enhance, and manage Shopify products using AI. We are committed to protecting the privacy of Shopify merchants and their customers.

This Privacy Policy explains how we collect, use, store, and share information when you install or use our app in your Shopify store, visit our website, or otherwise interact with us. By installing or using CataPro AI Studio, you agree to the practices described in this policy.

2. How We Integrate With Shopify

When you install CataPro AI Studio, Shopify provides us with access to certain store data through the Shopify API. We only request the scopes necessary to operate the app's features (such as reading and updating products and product images).

We act as a data processor on behalf of Shopify merchants, who remain the data controller for the personal data stored in their Shopify store.

3. Information We Collect

3.1 Merchant & Store Information

From Shopify and from you, we may collect:

• Store name, domain, and Shopify store ID
• Store owner name and contact email
• Plan type and subscription status
• Billing and usage information related to our app

3.2 Product & Content Data

To provide our AI workflows, we access and process:

• Product titles, descriptions, tags, and metadata
• Product images and associated media
• Collections or other catalog information relevant to product creation or enhancement
• Prompts and settings you configure (for example, language, tone, or style preferences for AI content)

3.3 Customer & Order Data

CataPro AI Studio is primarily focused on products and catalog operations. In normal operation, we do not need to access your customers' payment details or full order histories. However, depending on the scopes granted and your configuration, we may incidentally receive:

• Customer names or email addresses included in product data
• Aggregated metrics (e.g., product performance) if exposed by Shopify through the APIs you authorize

We do not store or process payment card numbers or banking details. All billing for our app is handled securely by Shopify.

3.4 Technical & Usage Information

When you use our app or website, we may automatically collect:

• IP address, browser type, and device information
• Log data such as pages viewed, actions taken, timestamps
• Diagnostic data (errors, performance metrics) to keep the app reliable and secure

4. How We Use Your Information

We use the information described above for the following purposes:

• To provide, operate, and maintain CataPro AI Studio
• To generate and enhance product data, images, and related content using AI
• To sync changes back to your Shopify store when you approve them
• To manage billing, subscriptions, usage limits, and credits
• To provide support, respond to your requests, and communicate important updates about the app
• To monitor usage and improve performance, security, and user experience
• To comply with legal obligations and enforce our Terms of Service

5. Legal Bases for Processing

Where required by law (for example, in the European Economic Area and the United Kingdom), we rely on the following legal bases to process personal data:

• Contract: Processing is necessary to provide the app and perform our agreement with you.
• Legitimate interests: To improve and secure our services, prevent abuse, and support our business operations, where these interests are not overridden by your rights and interests.
• Consent: Where you have given us explicit consent (for example, for specific optional AI features or communications). You can withdraw consent at any time.

6. AI Processing & Third-Party Service Providers

To power our AI workflows, we may send product content, uploaded images, and prompts to carefully selected third-party service providers (for example, hosting providers or AI model providers). These providers act as data processors and are bound by contractual obligations to:

• Use the data only to provide services to us
• Protect the data with appropriate security measures
• Comply with applicable privacy laws

We do not allow third-party providers to use your store data to train their public models in a way that would identify you or your customers.

7. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share information only in the following situations:

• With service providers that help us operate the app (hosting, databases, logging, AI providers, analytics, customer support).
• With Shopify, as required to comply with their platform policies and our obligations under the Shopify Partner Program.
• For legal reasons, if we are required to do so by law, subpoena, legal process, or governmental request, or to protect our rights or the rights of others.
• Business transfers, if we are involved in a merger, acquisition, or sale of assets. We will notify you if your data is transferred to a new owner.

8. Data Retention and Uninstalling the App

We retain your data only for as long as necessary to provide the app, comply with our legal obligations, resolve disputes, and enforce our agreements.

When you uninstall CataPro AI Studio from your Shopify store, Shopify sends us an uninstall webhook. After receiving this webhook, we:

• Revoke our access to your store's Shopify data
• Schedule your store-specific data (logs, cached product data, prompts) for deletion within a reasonable period (typically within 30 days), unless we need to retain it for legal or accounting reasons.

You can contact us at any time if you would like confirmation that your store data has been removed from our systems.

9. Data Security

We use industry-standard technical and organizational measures to protect your information, including:

• Encrypted connections (HTTPS/TLS) for data in transit
• Access controls and authentication for internal tools
• Regular monitoring and logging for suspicious activity
• Limited access to production data for authorized personnel

However, no method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security.

10. International Data Transfers

Depending on where you are located and where our infrastructure and service providers are based, your information may be transferred to and processed in countries other than your own. When we transfer personal data internationally, we take appropriate steps to ensure an equivalent level of protection, for example by using standard contractual clauses where required.

11. Your Privacy Rights

Depending on your location, you may have the following rights in relation to your personal data:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data, subject to legal retention requirements
• Object to or restrict certain types of processing
• Request a copy of your data in a portable format
• Withdraw consent where processing is based on consent

Because most of the data we process belongs to your Shopify store, we may ask you to first contact Shopify or manage your data directly in your store. You can also contact us at any time using the details below, and we will help where we are able.

12. Children's Privacy

CataPro AI Studio is intended for businesses and is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us and we will take steps to delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our app, practices, or legal requirements. When we make material changes, we will update the Last updated date at the top of this page and, where appropriate, provide additional notice (for example, in-app or by email).