Privacy Policy

Your catalog is processed to answer your request. We do not intentionally keep a server copy of the source or repaired CSV.

Data we process

• Uploaded CSV: filename, contents, and repair diagnostics. The API processes these during the request and does not intentionally save the original or generated CSV. The upload parser may use temporary storage during processing.
• Optional AI suggestion: only if you press “Suggest with AI,” the API sends your column names and aggregate column patterns, such as nonempty counts and numeric patterns, to OpenAI. It does not send catalog rows or full cell values. Column names themselves may contain sensitive information, so review them before using this option. The model may make mistakes; you approve the mapping.
• Checkout data: SHA-256 digests of the exact source and generated file, a contract version, approved column names, and the price format are attached to the Polar checkout so the API can verify or recover the later download. Polar handles payment details and order records; we query the checkout and order status. We do not receive card numbers.
• Browser data: this site can keep the selected CSV and approved mapping temporarily in your own browser’s IndexedDB during checkout. They are removed after a successful download, or rejected after 24 hours and deleted when you return to the completion page. You can clear site data sooner.
• Support: messages sent to support@catalogmender.com are handled through Resend, may be copied to the operator’s Gmail inbox, and may appear in the operator’s private support portal. Avoid sending a full customer catalog by email unless necessary.
• Technical data: Vercel and Render may process IP addresses, request times, user-agent data, and error logs to serve and secure the site. The application does not log CSV contents intentionally.

Why we use it

We process a file to provide the requested check or paid output (performance of a contract or steps you ask us to take before one). We use checkout metadata to deliver only the purchased file and prevent unauthorized access. If you request an AI suggestion, we use the limited column profile to suggest a mapping; we do not use customer CSV rows to train a model. We use support messages to answer requests and resolve issues. Limited technical logs are used to operate and secure the service.

Service providers and transfers

Vercel hosts the public site; Render hosts the API; Polar handles checkout and orders; Resend handles support email, with copies possibly in Gmail. OpenAI receives the limited column profile only if you ask for an AI suggestion. These providers process data under their own terms and may operate outside your country. We use them only for the purposes described here. Payment card details remain with Polar and its payment partners.

Retention and your choices

The API holds CSV contents only for request processing. We do not maintain a catalog database. Browser storage remains on your device until deleted after a successful download, cleared by you, or cleaned up when you return after expiry. Checkout and payment records follow Polar’s retention obligations; support messages and technical logs are kept as needed for service, security, disputes, and legal duties. Contact us to request access, correction, deletion, or other rights available in your jurisdiction; we will explain any record we must retain.

Cookies and analytics

The product does not currently load advertising or analytics cookies. It saves a small local-storage acknowledgement of the storage notice and may use IndexedDB for the checkout file and mapping. See the Cookies & Storage page for details. Polar’s hosted checkout has its own privacy and cookie practices.

Contact

For privacy questions or rights requests, email support@catalogmender.com. We will update this policy if data handling changes materially.