Privacy policy

Who we are

The service at catalogueads.com is operated by AIVEXIA TECH S.R.L., a company registered in Bucharest, Romania (trade register no. J2025076563000, fiscal code 52645913). It is the “controller” for your account data. Questions about privacy go to [email protected].

For product data inside your workspace (your feeds, your catalog items) you are the controller and we act on your instructions as a processor.

What we collect

• Account: your email address, the name you enter, and, if you sign in with Google, the name and email Google shares. We never see or store a password.
• Workspace data: the feed URLs you connect, the rows we fetch from them, your column mappings and rules, the templates you design and the logos you upload.
• Billing: your plan, invoices and billing address are handled by Stripe. We store only Stripe’s customer and subscription identifiers, never card numbers.
• Technical: server logs with IP address and user agent for security and debugging, kept for a short period. We do not run advertising trackers.
• Contact form: what you send us through the form on the landing page, so we can reply.

Why, and on what legal basis

• To provide the service you signed up for: fetching feeds, rendering cards, serving feed URLs (performance of a contract).
• To bill you for a paid plan and keep the records the law requires (contract, legal obligation).
• To keep the service secure: rate limiting, abuse prevention, sign-in emails (legitimate interest).
• To answer you when you write to us (legitimate interest, or consent where you gave it).

We do not sell personal data and we do not use your product data to train models or for any purpose other than running your workspace.

Public URLs

Output feed URLs and card image URLs contain a long random token and are unauthenticated by design, because Meta must be able to fetch them. Anyone who has a URL can read that feed. Rotate or delete an output feed if a URL leaks.

Sub-processors

Retention

• Workspace data stays as long as your workspace exists. Deleting a source, template or feed removes it; deleting your account removes the workspace.
• Feed snapshots are versioned; older versions are pruned automatically.
• Rendered card images are kept while the template and feed that produced them exist.
• Invoices and payment records are kept as long as tax law requires.
• Sign-in email logs are kept for 24 hours; server logs for up to 30 days.

Cookies

• Strictly necessary. The cookies that keep you signed in, and one that remembers your cookie choice. These are set without consent because the site cannot work without them.
• Analytics, only if you accept. If you accept on the cookie banner, we load Google Analytics to see which parts of the product get used. Declining means the Google Analytics script is never loaded at all — not loaded and blocked, simply never requested. You can change your mind any time with “Cookie settings” in the footer.
• No advertising cookies. We never set advertising or cross-site tracking cookies, and we do not share analytics data with advertisers. Google Ads features are disabled and IP addresses are anonymised.
• We also use Vercel Analytics, which is cookieless and collects no personal data or cross-site identifiers, so it runs without consent.

Your rights

Under the GDPR you can ask for access to, correction of, export of, or deletion of your personal data, object to processing, or lodge a complaint with your local data protection authority. Email [email protected] and we will respond within 30 days.

Changes

If this policy changes in a way that matters, we will notify workspace owners by email before the change takes effect.