Privacy Policy

Last updated: August 5, 2026

Catavue is a read-only catalog health application for Shopify merchants. This policy explains what information the application uses and how it is protected.

Information we process

• Shopify store and authorization information required to install and operate the application, including the shop domain and encrypted Shopify access credentials.
• Product catalog information available through Shopify, such as product titles, descriptions, images, variants, identifiers, prices, inventory, vendor, product type, handles, and publication status.
• Scan results, including catalog health scores, detected issues, recommendations, and scan timestamps.
• Limited technical logs needed for security, reliability, and error investigation.

Information we do not process

Catavue does not request access to customer records, orders, payment details, or storefront visitor activity. It does not sell personal information and does not change products automatically.

How we use information

We use the information only to authenticate the merchant, scan the product catalog, display current and historical results, run scheduled scans, maintain security, and provide support.

Service providers and international processing

Catavue uses Shopify to access authorized store data, Supabase to host application data, and Vercel to host the application. These providers may process information in countries other than the merchant's country under their respective data protection terms.

Retention and deletion

Catavue keeps no more than the latest 30 catalog scans for each store. Shopify session data is removed when the application is uninstalled. Store sessions and scan history are deleted when Shopify sends the mandatory shop deletion request after uninstall. Limited security logs can remain for the period required by our hosting providers for abuse prevention and service reliability.

Security

Access is authenticated through Shopify. Secrets are kept in protected server environment variables, application responses containing sensitive data are not cached, and webhook requests are verified using Shopify signatures. No method of electronic storage is completely risk-free, but we apply reasonable technical safeguards.

Your choices and requests

Merchants can stop future processing by uninstalling Catavue. Privacy, access, correction, or deletion questions can be sent to boris.manchev2015@gmail.com.

Changes

We may update this policy when the application or legal requirements change. The date at the top identifies the latest version.