Legal

Privacy Policy

Last updated: August 27, 2026

1. Scope

This Privacy Policy describes how CatalogCut ("CatalogCut," "we," "us," or "our") collects, uses, discloses, and protects information when you use our website, applications, and related services (collectively, the "Service"). It applies to personal information and content submitted through the Service.

2. Information We Collect

Depending on how you use the Service, we may collect:

  • Account Information: Name, email address, authentication data, and account settings.
  • Billing Information: Subscription and transaction metadata. Payment card processing is handled by our payment processor.
  • Customer Content: Product images, optional watermark/logo assets, processing settings, prompts, and generated outputs.
  • AI Background Inputs: Prompts and generation parameters when you use optional AI background features.
  • Usage and Device Data: Logs, IP address, browser/device metadata, request timestamps, and feature interactions.
  • Security Signals: Data used for abuse prevention, including verification and anti-fraud signals.

3. How We Use Information

  • Provide, maintain, secure, and improve the Service.
  • Process uploads and deliver requested image outputs.
  • Operate billing, subscriptions, and account management.
  • Provide customer support and service communications.
  • Detect, investigate, and prevent fraud, abuse, and security incidents.
  • Enforce our Terms and comply with legal obligations.

4. Legal Bases (Where Applicable)

Where required by law, we process personal data based on one or more legal grounds, including performance of a contract, legitimate interests, consent, and compliance with legal obligations.

5. How We Share Information

We may share information only as needed to operate the Service, including with:

  • Service Providers: Vendors that support payment processing, hosting and storage, authentication, communications, security, analytics, and optional AI-enabled features. They may process information only for the services they provide to us and subject to applicable contractual or legal safeguards.
  • Your Directed Integrations: For example, webhook endpoints you configure.
  • Legal/Compliance Recipients: Where required by law or to protect rights, safety, and security.
  • Business Transfers: In connection with mergers, financing, acquisitions, reorganizations, or asset sales.

6. Customer Content and File Handling

  • We process Customer Content to provide requested editing, export, storage, and related Service functions.
  • Optional AI-enabled features may require us to send the relevant prompt, selected settings, and source content to a specialized service provider so the feature can work.
  • Free batch files expire after about 24 hours. Basic and Pro batch files expire after about 7 days. Scheduled cleanup can make final deletion slightly later.
  • Certain account-linked assets and records (for example, saved presets, account metadata, API keys, and billing records) may be retained until deleted or no longer required.
  • We do not intentionally make your private Customer Content available to other customers, except where you choose to share it or disclosure is required by law.

7. Retention

We retain personal information for as long as needed to provide the Service, maintain security and business records, resolve disputes, and comply with legal obligations. Retention periods vary by data type and may include limited backup retention.

8. Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information. No system is completely secure, and we cannot guarantee absolute security.

9. International Transfers

Your information may be processed in the United States and other jurisdictions where we or our providers operate. By using the Service, you understand that data protection laws in those jurisdictions may differ from those in your location.

10. Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

  • Access, correct, or delete personal information.
  • Object to or restrict certain processing.
  • Request portability of certain data.
  • Withdraw consent where processing is based on consent.

Depending on applicable law, you may also have the right to appeal a privacy request decision or to limit certain uses of sensitive personal information. We will honor applicable rights requests after verifying them as required by law.

To submit a request, contact [email protected]. We may need to verify your identity before fulfilling certain requests.

11. Cookies and Similar Technologies

We use cookies and similar technologies to operate authentication flows, maintain sessions, protect the Service, remember preferences, and understand product usage. You can adjust cookie settings in your browser, but some features may not function properly without essential cookies.

12. Children's Privacy

The Service is not intended for children under 13. If you believe a child has provided personal information, contact us and we will take reasonable steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date indicates when the latest version became effective. Where required by law, we will provide additional notice or obtain consent before a material change takes effect.

14. Contact

Privacy questions or requests can be sent to [email protected].