This Privacy Policy explains how personal data is handled when you use CatalogProof, a technical-readiness scanning service for ecommerce product pages.
Who operates CatalogProof
CatalogProof is operated by SM SEAMLESS DIGITAL LTD, based in Republic of Cyprus. Contact us via our contact form.
What CatalogProof does
CatalogProof scans publicly accessible ecommerce product pages and generates reports with technical-readiness signals related to GPSR product-safety listing signals and EAA/accessibility issues. CatalogProof is not legal advice and does not provide a compliance certification.
Personal data we collect
Depending on how you use the service, we may process:
- Account and login data - email address and authentication data from Supabase when you sign in (for example via magic link or Google).
- Submitted store information - store or domain URLs you submit for scanning.
- Scan and report data - URLs, page titles, detected signals, issue summaries, scores, and related metadata generated from publicly accessible pages.
- Billing data - subscription status, plan, payment references, and related billing records from Stripe. We do not receive or store full card numbers.
- Technical logs - IP address, user agent, timestamps, errors, rate-limit events, and security or abuse-prevention logs.
- Support messages - information you send when contacting us.
Payment data
Payments are processed by Stripe. Card details are handled by Stripe under its own terms and privacy practices. CatalogProof does not store full payment card details.
Service providers
We use trusted providers to run the service, including:
- Supabase - authentication and database hosting.
- Stripe - payment and subscription processing.
- Hosting / VPS providers - application and worker infrastructure.
- Email provider - transactional and support email delivery.
- Cloudflare or similar - if used for security, CDN, or DNS.
- Logging and monitoring tools - reliability, diagnostics, and security.
These providers process data on our behalf to deliver and protect the service.
Cookies
We use essential cookies and similar technologies for authentication, security, scan claiming, payments, and remembering your cookie notice preference. We do not currently use advertising or marketing cookies. If this changes, we will update this notice and request consent where required.
Service providers such as Supabase and Stripe may also use cookies or similar technologies as needed for authentication, payment processing, fraud prevention, and security.
Legal bases for processing
Where applicable under data protection law, we rely on:
- Contract / service delivery - to provide scans, accounts, reports, and billing.
- Legitimate interests - security, abuse prevention, service improvement, diagnostics, and protecting the service.
- Legal obligations - tax, accounting, or other obligations where applicable.
- Consent - where required for optional communications or non-essential cookies.
How scan data works
You submit a public store or domain URL. CatalogProof crawls publicly accessible product pages and generates a report. Reports may include URLs, page titles, detected signals, and issue summaries based on visible page content and automated checks.
We do not access admin areas, customer accounts, checkout flows, or password-protected content.
Private report links
Report URLs are private and unlisted, but anyone with the link may be able to view the report unless additional account restrictions apply. Do not share report links publicly if you want to limit access.
Retention
We keep account, billing, scan, and report data for as long as needed to provide the service, maintain records, prevent abuse, and meet legal obligations. You may request deletion where applicable - for example through your account settings or by contacting us.
Security
We use reasonable technical and organizational measures to protect personal data. No online service can guarantee absolute security.
International transfers
Your data may be processed in countries other than your own through our service providers. Where required, we rely on appropriate safeguards for cross-border transfers.
Your rights
Depending on your location, you may have rights to:
- access your personal data;
- request correction of inaccurate data;
- request deletion where applicable;
- object to or restrict certain processing;
- data portability where applicable;
- withdraw consent where processing is based on consent; and
- lodge a complaint with a data protection authority.
To exercise these rights, contact [email protected].
Changes
We may update this policy as the product develops. Material changes will be posted on this page with an updated date.
Contact
Privacy questions: [email protected] or our contact form (choose the privacy topic).