Privacy Policy

1. Introduction

CatalogMetrix Mini ("we," "our," or "us") operates the mini.catalogmetrix.com website and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered Magento product studio platform.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and password (stored as a secure hash). If you join or create a workspace, we store your workspace membership and role information.

2.2 Product Data

When you import or create products, we store the product content you provide, including titles, descriptions, attributes, and metadata. Product versions are maintained to support review and rollback functionality. This data is stored in our PostgreSQL database and is associated with your workspace.

2.3 Media and Files

Product images and exported files (CSV, ZIP) are stored in our S3-compatible object storage (MinIO). Files are organized by workspace and are accessible only to authorized workspace members via time-limited presigned URLs.

2.4 AI Processing Data

When you use our AI features (content generation, alt text generation, image processing), your product data is sent to third-party AI providers (such as OpenAI or Anthropic) for processing. We send only the minimum data necessary to perform the requested operation. AI-generated outputs are stored alongside your product data.

2.5 Usage and Log Data

We automatically collect information about your interactions with the platform, including job submissions, audit runs, export operations, and general usage patterns. We also collect standard server logs including IP addresses, browser type, and access timestamps.

3. How We Use Your Information

• To provide and operate our product studio services, including AI content generation, image processing, and catalog auditing
• To process and manage asynchronous jobs (content generation, exports, audits) through our task queue
• To authenticate your identity and manage workspace access through JWT-based sessions
• To generate exports of your product data in Magento-compatible formats
• To improve our services, troubleshoot issues, and develop new features
• To communicate with you about your account, service updates, and support requests

4. Data Sharing and Third Parties

We do not sell your personal information or product data. We share data with third parties only in the following circumstances:

• AI Service Providers: Product content is sent to AI providers (OpenAI, Anthropic) solely for processing your requested operations. These providers process data according to their own privacy policies and data processing agreements.
• Infrastructure Providers: We use cloud hosting and storage services to operate our platform. Your data is stored on secure, encrypted infrastructure.
• Legal Requirements: We may disclose information if required by law, regulation, or legal process.

5. Data Security

We implement industry-standard security measures to protect your data. Passwords are hashed using bcrypt. API keys are stored as secure hashes with only the prefix visible. Authentication tokens (JWT) are signed with HS256 and have limited lifetimes. File access is controlled through time-limited presigned URLs. All data in transit is encrypted via TLS.

6. Data Retention

We retain your account data for as long as your account is active. Product data, versions, and associated media are retained until you delete them or close your account. Job logs and audit records are retained for operational purposes. Upon account deletion, we will remove your personal data and product content within 30 days, subject to any legal retention obligations.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. You can export your product data at any time using the built-in export feature. To exercise other rights or request account deletion, contact us at privacy@catalogmetrix.com.

8. Cookies and Tracking

We use essential cookies to maintain your authenticated session and store your preferences. We do not use third-party tracking cookies or advertising pixels. Authentication tokens are stored in your browser's local storage.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending an email to your registered address. Your continued use of the platform after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@catalogmetrix.com or through our contact page.