Legal

Privacy Policy

Last updated: February 19, 2026

1. Scope

This Privacy Policy describes how CatalogCut ("CatalogCut," "we," "us," or "our") collects, uses, discloses, and protects information when you use our website, applications, APIs, and related services (collectively, the "Service").

2. Information We Collect

Depending on how you use the Service, we may collect:

  • Account Information: Name, email address, authentication data, and account settings.
  • Billing Information: Subscription and transaction metadata. Payment card processing is handled by our payment processor.
  • Content You Upload: Product images, optional watermark/logo assets, processing settings, and generated outputs.
  • AI Background Inputs: Prompts and generation parameters when you use optional AI background features.
  • Usage and Device Data: Logs, IP address, browser/device metadata, request timestamps, and feature interactions.
  • Security Signals: Data used for abuse prevention, including reCAPTCHA-related verification signals.

3. How We Use Information

  • Provide, maintain, and improve the Service.
  • Process uploads and deliver requested image outputs.
  • Operate billing, subscriptions, and account management.
  • Provide customer support and service communications.
  • Detect, investigate, and prevent fraud, abuse, and security incidents.
  • Enforce our Terms and comply with legal obligations.

4. Legal Bases (Where Applicable)

Where required by law, we process personal data based on one or more legal grounds, including performance of a contract, legitimate interests, consent, and compliance with legal obligations.

5. How We Share Information

We do not sell your personal information. We may share data with:

  • Service Providers: Vendors that support hosting/storage, email delivery, billing, authentication/security, and optional AI background generation (for example: Stripe, Resend, Google reCAPTCHA/OAuth, OpenAI, and Fireworks).
  • Your Directed Integrations: For example, webhook endpoints you configure.
  • Legal/Compliance Recipients: Where required by law or to protect rights, safety, and security.
  • Business Transfers: In connection with mergers, financing, acquisitions, reorganizations, or asset sales.

6. Image Processing and File Handling

  • Core background-removal and image processing run on our own infrastructure.
  • Optional AI background generation uses third-party AI providers (currently OpenAI and Fireworks) and transmits prompts and generation parameters required to fulfill that feature.
  • Batch originals, outputs, archives, and associated temporary batch assets are assigned an expiration window of approximately 7 days and are removed by scheduled cleanup jobs.
  • Certain account-linked assets and records (for example, saved presets, account metadata, API keys, and billing records) may be retained until deleted or no longer required.
  • We do not use your uploaded product images to train our background-removal models unless explicitly agreed in writing.

7. Retention

We retain personal information for as long as needed to provide the Service, maintain security and business records, resolve disputes, and comply with legal obligations. Retention periods vary by data type and may include limited backup retention.

8. Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information. No system is completely secure, and we cannot guarantee absolute security.

9. International Transfers

Your information may be processed in the United States and other jurisdictions where we or our providers operate. By using the Service, you understand that data protection laws in those jurisdictions may differ from those in your location.

10. Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

  • Access, correct, or delete personal information.
  • Object to or restrict certain processing.
  • Request portability of certain data.
  • Withdraw consent where processing is based on consent.

California users may also have rights under applicable California privacy laws, including rights to know, delete, and correct personal information and to be free from unlawful discrimination for exercising privacy rights.

To submit a request, contact [email protected]. We may need to verify your identity before fulfilling certain requests.

11. Cookies and Similar Technologies

We use cookies and similar technologies to operate authentication flows, maintain sessions, improve reliability, and understand product usage. You can adjust cookie settings in your browser, but some features may not function properly without essential cookies.

12. Children's Privacy

The Service is not intended for children under 16. If you believe a child has provided personal information, contact us and we will take reasonable steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date indicates when the latest version became effective. Continued use of the Service after an update means you accept the revised policy.

14. Contact

Privacy questions or requests can be sent to [email protected].