Privacy policy

CatalogBadge turns an online store's product feed into branded catalog ad images and gives the store feed URLs to use in its Meta and Snapchat catalogs. This policy explains what we collect when you use catalogbadge.com and app.catalogbadge.com, why, and what you can ask us to do with it.

CatalogBadge is operated by [LEGAL ENTITY] (to be completed), [ADDRESS] (to be completed). Questions and requests: hello@catalogbadge.com.

What we collect

Your account

• Your email address, and a hash of your password if you set one. We never store the password itself.
• If you sign in with Google: your email address, your name and your Google account ID. We ask Google only for these (the openid, email and profile scopes) and nothing else from your Google account.
• For each signed-in session: the browser's user-agent string and the country your connection comes from, so you can recognise your sessions. We do not store your IP address with your account.

Your stores

• The feed URLs you give us, and the product data in those feeds (titles, prices, availability, links, photos and the other fields your feed contains).
• Your brand settings: logo, colours, font, badges, tabby or tamara limits, template choices and rules.
• Copies of your product photos, the images we draw from them, and the feed files we build.
• Records of each update (counts, warnings and errors) and of when Meta or Snapchat fetched your feeds.

Billing

Paid plans are sold by Dodo Payments, which acts as the merchant of record: Dodo takes your payment, charges and remits tax and issues your invoice. We never see or store your card number. Dodo tells us your customer and subscription IDs, your plan, the subscription status and the email address on the subscription.

Contact and lead forms

When you send us a request through a form (your store's website, platform, name, how to reach you and your note), it is emailed to us and not stored in our database.

This website

catalogbadge.com sets no cookies. We count visits with Cloudflare Web Analytics, which does not use cookies, does not fingerprint visitors and gives us only totals such as page views and countries.

How we use it

• To run the service: read your feed, draw your images, build and serve your feeds.
• To sign you in and keep your account secure, including limits on repeated attempts. For those limits we keep keyed hashes of email addresses and IP addresses for about an hour, never the plain values.
• To email you sign-in codes, alerts about your feeds (which you can switch off per store) and messages about your account or billing.
• To answer your questions and fix problems you report.

We do not sell your data, show you third-party ads or use your product data to train AI models.

Google user data

CatalogBadge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use the data Google sends at sign-in only to identify you and create or open your CatalogBadge account. We do not share it with anyone and do not use it for advertising.

What is public

Meta and Snapchat have to download your ad images without signing in, so each image is reachable by anyone who has its address. The addresses contain your store's random ID and a fingerprint, so they cannot be guessed or listed. Your feed URLs contain a secret token: treat them like a password. You can replace the token from your dashboard at any time, and the old one stops working after 7 days.

Who processes your data for us

• Cloudflare hosts the service, stores your data and images, and sends our emails.
• Dodo Payments handles subscriptions and payments as merchant of record.
• Google, only if you choose to sign in with Google.

Cloudflare runs a global network, so your data may be processed outside your country. We do not give your data to anyone else unless the law requires us to.

How long we keep it

• Images replaced by a newer version: deleted 30 days after they are replaced.
• Snapshots of your feed taken at each update: 14 days. Raw copies of your feed, when kept for troubleshooting: 3 days.
• Sign-in sessions: 30 days. Emailed sign-in codes: 15 minutes.
• A paused store: its images and feeds are deleted after 90 days and the store is archived.
• Your account: until you ask us to delete it. We delete everything under the account within 7 days of the request.

Your choices and rights

You can see and change your store settings in the dashboard, pause a store, and remove our feed URLs from your catalog at any time. Email hello@catalogbadge.com to get a copy of your data, correct it or delete your account. We answer within 7 days. Depending on where you live, you may also be able to complain to your data protection authority.

Children

CatalogBadge is a business service and is not meant for anyone under 18.

Changes

If we change this policy we update the date at the top of this page, and we email account holders about changes that affect them before they take effect.