1. Introduction

CatalogBridge (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our automotive parts data conversion service.

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the service.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

Email address
Name (optional)
Company information (optional)
Billing information (processed securely through Stripe)

2.2 Usage Data

We automatically collect certain information when you use our service:

IP address
Browser type and version
Pages visited and time spent
Conversion history and statistics
Error logs and performance data

2.3 Uploaded Files

When you upload CSV files for conversion, we process and retain these files along with the generated output files. This data retention enables us to continuously improve our conversion algorithms and provide better results for all users.

3. How We Use Your Information

We use the collected information for:

Providing and maintaining our conversion service
Processing payments and managing subscriptions
Sending service-related communications
Improving our service and developing new features
Detecting and preventing fraud or abuse
Complying with legal obligations
Training and improving conversion algorithms using retained conversion data
Analyzing conversion patterns to enhance accuracy

4. Data Retention for Service Improvement

To continuously improve our conversion algorithms and provide better results for all users, we retain:

Input files: Original CSV/Excel files uploaded for conversion
Output files: Generated ACES/PIES XML files
Conversion metadata: Information about conversion success rates and processing times

This data is used exclusively for:

Training and improving our conversion algorithms
Identifying common conversion patterns and errors
Enhancing part matching accuracy
Developing better language-specific conversions

All retained data is stored securely and accessed only by authorized personnel for service improvement purposes. Personal identifiers are separated from conversion data during analysis.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

SSL encryption for data in transit
Encrypted storage for sensitive information
Security monitoring and updates
Access controls and authentication measures
Secure third-party services (Supabase, Stripe)

While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

With your consent
To comply with legal obligations
To protect our rights and safety
With service providers who assist in operating our service (under strict confidentiality agreements)

7. Third-Party Services

We use the following third-party services:

Stripe: Payment processing (PCI-compliant)
Supabase: Database and authentication
Vercel: Hosting and deployment

These services have their own privacy policies, and we encourage you to review them.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

Access: Request a copy of your personal data
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your personal data
Portability: Receive your data in a portable format
Objection: Object to certain processing activities
Restriction: Request limitation of processing

To exercise these rights, please contact us at privacy@catalogbridge.com.

9. Cookies

We use essential cookies to maintain your session and preferences. For detailed information about our cookie usage, please see our Cookie Policy.

10. Children's Privacy

Our service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date.

13. Contact Information

For questions about this Privacy Policy, please contact us:

Email: privacy@catalogbridge.com
Data Protection Officer: dpo@catalogbridge.com

13. Legal Basis for Processing

We process your personal data based on:

Contract: To provide our services as agreed
Consent: Where you have given explicit consent
Legitimate interests: To improve our services and prevent fraud
Legal obligations: To comply with applicable laws