Privacy Policy — Catalogist

Last updated: 2 November 2026

This Privacy Policy explains how Iscovici Labs – by Ori Iscovici (“Catalogist,” “we,” “us”) collects, uses, stores, and shares information when you install and use the Catalogist – Bulk Product Editor application (the “App”) on your Shopify store. By installing or using the App, you agree to this Policy. Where we process personal data on your behalf as a processor, the Data Processing Agreement also applies.

1. The short version

• Catalogist is a catalog-editing tool. It accesses and edits your products, variants, inventory, and locations — nothing else.
• Catalogist does not access, request, store, or process your customers’ personal data, and never reads your order records. The one exception is a count: with AI Visibility, a storefront pixel counts visits that arrive from AI assistants and the totals of the orders that follow, kept only as daily sums (§3, §4).
• We store only what’s needed to operate the App: your store domain and plan, the access token Shopify issues us, and a history of the edits you make (so you can undo them).
• We use a small number of infrastructure providers (§6) and do not sell or rent your data or use it for advertising.

2. Who this Policy covers

This Policy covers you, the merchant (the store owner and staff who use the App), and visitors who use the free AI visibility check on our website (§5). It is separate from your own privacy obligations to your customers — see §9. We provide the same privacy rights to all users regardless of where you are located.

3. What we access, and what we deliberately don’t

Catalogist requests only these Shopify access scopes:

We do not request — and therefore cannot access — customer records, order records, payment data, fulfillment data, or any protected customer data. This is a deliberate design boundary.

4. What we store, and why

This history and snapshot data is your catalog data (titles, prices, inventory numbers, tags, etc.) — not end-customer personal data. We do not collect device fingerprints, advertising identifiers, or browsing data outside the App.

5. How we use information

We use the data above only to: (1) provide the App’s features (bulk editing, preview, History, undo, catalog health scanning, and AI-assisted drafting); (2) apply your plan and process billing through Shopify (we never see or store card details — Shopify handles payment); (3) operate, secure, debug, and improve the App; (4) communicate with you about support you request; and (5) comply with legal obligations. We do not use your data for advertising or for any purpose unrelated to operating the App.

AI-assisted drafting. When you choose “Fix with AI,” Catalogist sends the relevant product data for the products you select (title, vendor, product type, category, variant options such as size or color, tags, and current description or SEO) to our AI provider, Anthropic, to draft product copy, rewrite product titles, and suggest each product’s Shopify standard category (from Shopify’s public category list — the AI can only pick a real category). To match your store’s writing style, it also sends your store name and a small sample of your product titles and descriptions once, when it first learns that style. We send only product and catalog data — never your customers’ personal data or your order data (the App holds none of it). Anthropic processes this data solely to return the draft and, under its commercial terms, does not use it to train its models by default — a default we do not change. Anthropic’s security and privacy documentation is available at trust.anthropic.com. You review every draft before anything is applied, and every applied change is reversible. AI drafting is optional and metered by credits.

Describing an edit in words. When you type a change in plain English (“20% off winter hats”), Catalogist sends that sentence and your store’s vendor, product type, tag and collection names to Anthropic to set the edit up in the editor. Nothing changes until you preview and apply it yourself. The same terms apply: catalog data only, never customer or order data, not used for training by default. This is optional and uses one AI credit per sentence.

Describing your product images. When you choose “Describe images with AI” for missing image alt text, Catalogist sends Anthropic links to the product images that have no alt text (up to six per product, resized), together with each product’s title, brand, product type and variant options, so it can describe what each image shows. These are the photos you have already published to your store; if they show people (for example a model wearing a product), the description is about the product, and the image is only sent to write it. We keep the image links and the drafted text with the draft run so you can review them; nothing is written to your store until you apply it, and every applied change can be undone. The same terms apply: not used for training by default. This is optional and uses one AI credit per product.

AI visibility (on its plan, or the free report). To test how AI assistants answer shoppers in your category, Catalogist sends Anthropic your store name, website and a sample of your product titles, types, vendors and prices to suggest your category and competitors, then asks Claude the buying questions you approve and keeps its answers. When you check what AI says about you, we send Anthropic the parts of those answers that name your store, together with your catalog facts (product names, types, vendors, tags, prices and the start of each description) and, if you write one, your note on what makes you different, so it can compare what AI said with what your store says. We keep the result and any claims you mark as right. The same terms apply: catalog data only, never customer or order data, not used for training by default.

Other AI assistants in visibility tests. So that tests reflect more than one assistant, the buying questions in your tests and free report may also be asked to ChatGPT (OpenAI), Gemini (Google) and Perplexity, through each company’s API with web search, and we keep their answers. Only the questions are sent to them (they can name your store, your category and competitors); never your catalog data, customer data or order data. Each provider’s API terms say this data is not used to train its models. The app shows which assistants a test asked.

Fix plans and shared reports. When you build a fix plan, Catalogist also reads your store’s public pages (its robots.txt, sitemap, public product feed and a few product pages), the same pages any visitor sees, to check what AI assistants can read; no AI is involved. If you make a share link, anyone who has the link can see that report, without logging in, until it expires (30 days) or you stop sharing. It contains your store name, scores, competitors’ names, quotes from AI answers and product names, but never links into your admin. We store only a fingerprint of the link, so we can’t recover it for anyone.

Monitoring and alerts. If you turn on monitoring, Catalogist re-runs your approved AI visibility test on the schedule you choose, sending the same AI providers the same data as a test you start yourself, and keeps a short history of the results (up to 52 tests). If you turn on email alerts, we keep your store’s email address from Shopify and use it only to tell you when your results change clearly, sent through our email provider, Resend. Turn email alerts off in the app to stop them; uninstalling the app turns monitoring off.

Messages to Ori and emails from Ori. If you send a message from the app’s Feedback page, we keep it, exactly as you wrote it, with your store’s domain, and forward it to our support inbox so Ori can read and answer it (to give you the support you asked for, Art. 6(1)(b) and (f)). Please don’t include your customers’ personal details in a message. If you tick “Ori may email me”, we keep your store’s contact email from Shopify (shown next to the box before you tick it) and the date you agreed. We use it only to send a few short emails from Ori (a welcome, a check-in if you’ve made an edit, and one note asking for a review or feedback) and to reply to you, through our email provider, Resend, based on your consent (Art. 6(1)(a)). We never email you this way without that tick. Every email has a one-click unsubscribe link, and you can also stop them from the Feedback page. Stopping them, or uninstalling the app, ends them and removes the stored email address; we keep only the dates you agreed and stopped, as a record of your choice. Messages and that record are deleted with the rest of your store’s data after you uninstall (section 7). Copies of messages in our support inbox are deleted within 24 months.

The free AI visibility report. Without the AI Visibility plan, you can run one free report every 90 days. You start it yourself. It sends Anthropic the same data as a test (your store name, website and a sample of your product titles, types, vendors and prices) to suggest your category and competitors and write the buying questions, or uses the setup from your free check on our website if you ran one. Then it asks those questions of Claude (and of any other AI assistant we have switched on; only the questions are sent to them) and builds a fix plan from the answers, your latest Catalog Health scan and your store’s public pages. We keep the report. To stop a reinstall from getting another free report, we also keep a one-way fingerprint of your store’s domain and the date of your last free report, after the rest of your data is deleted (Art. 6(1)(f)). The same terms apply: catalog data only, never customer or order data, not used for training by default.

Free AI visibility check (catalogist.app)

Anyone can run a free AI visibility check of a Shopify store on our website, without installing the App. This section covers you as a visitor using it.

• What you give us: the store address you enter and the categories you type (optional). Your email is optional: only if you ask us to email you the summary do we get your email address, your agreement to this Policy, and an optional choice to receive marketing emails.
• What we read: only the store’s public pages: its public product catalog, its store details (name, currency and its Shopify address, ….myshopify.com), a few product pages, its robots.txt and sitemap. These are the same pages any visitor or search engine can see. We respect the store’s robots.txt and never log in. We send the store’s name, website and a sample of its product titles, types and vendors to Anthropic to propose the store’s category and competitors and to write shoppers’ buying questions, then ask Claude those questions. The categories you type are sent too, so please don’t type personal details there; your email and IP address are never sent to Anthropic.
• What we keep: the check and its results; a one-way fingerprint of your network address (not the address itself), only to enforce the limit of free checks per visitor per day, and cleared after 48 hours; which campaign link brought you (for example utm_source); and which buttons you clicked (counted on our server, without tracking scripts or cookies).
• If the store installs Catalogist: we match the installed store to the check by its Shopify address or its main domain (the App Store link can’t carry anything), so the store sees the check’s results inside the App. If you left an email, we also stop the tips.
• How we use your email (only if you left one): to send you the summary you asked for (through our email provider, Resend), and, only if you opted in, to send you marketing emails: a short series of tips on getting recommended by AI (four emails over about two weeks), which also tell you about Catalogist. The opt-in box is never ticked for you, and before the first tip we ask you to confirm by email, so no one can sign you up with your address. We record when you agreed to this Policy (and its version), when you opted in and when you confirmed. We never sell your email or share it for others’ marketing. Our emails contain no tracking pixels, so we don’t know when you open them; the “add Catalogist” link in them is counted like the page’s buttons.
• Unsubscribing: every email has a one-click unsubscribe link (and our marketing emails support your mail app’s built-in unsubscribe button). It takes effect immediately and covers your address for good, for any check, now or later. To honour that, we keep a one-way fingerprint of the unsubscribed address (not the address itself) after everything else is deleted (Art. 6(1)(c) and (f)). You can also reply to any email or write to support@catalogist.app.
• Legal bases: taking steps at your request to run the check and send the summary you asked for (Art. 6(1)(b)); your consent for marketing emails (Art. 6(1)(a)), which you can withdraw at any time; and our legitimate interest in preventing abuse of a free service and in showing an installed store its own check (Art. 6(1)(f)).
• Retention: checks, their results and any email left with them are deleted automatically after 12 months (the unsubscribe fingerprint above is kept). Email support@catalogist.app to delete yours sooner.

Legal bases (where the GDPR / UK GDPR applies)

Where you are a natural person (e.g. a sole trader), your store domain, access token, and related data may be personal data. We process it on these bases:

• Performance of a contract (Art. 6(1)(b)) — store identifier, access token, edit history, undo snapshots, and operational metadata necessary to provide the App you installed.
• Legitimate interests (Art. 6(1)(f)) — aggregate usage analytics, debugging, and security monitoring, where our interest in a secure, reliable, improving App is not overridden by your rights. You may object (§9).
• Legal obligation (Art. 6(1)(c)) — limited data retained to meet tax, accounting, or regulatory requirements.

6. Service providers (subprocessors)

We share data only with the infrastructure providers needed to run the App. We rely on each provider’s data processing terms, which require them to process data only on our instructions, keep it secure, and assist with data-subject requests. We remain responsible for their performance. Our current subprocessors (also listed, with regions, in the DPA):

We will give at least 30 days’ notice before adding a subprocessor that materially changes how data is handled, so you can object or uninstall.

Analytics note: product analytics is configured by us at the application level and, when enabled in production, is always on; it is keyed to your store domain (never to individual staff), is used only to understand feature usage and improve the App, and is never used for advertising or shared for others’ purposes. We rely on legitimate interests for it.

7. Data retention and deletion

• While installed: we keep the values needed to undo a change (its “before” copy) for 12 months, which is how long a change can be undone; after that we delete them automatically. The History entry itself (what changed, when, and a capped before/after sample) is kept for the life of your installation.
• Catalog snapshots are rolling: we keep the latest 4 weekly copies, the first weekly copy of each month for 12 months, and the latest 3 on-request copies; older ones are deleted automatically.
• When you uninstall: Shopify notifies us. We delete your access token immediately and delete your store record, edit history, and snapshots within 30 days (in practice, on Shopify’s shop/redact signal ~48 hours after uninstall), except where we must retain limited records to meet a legal obligation.
• Shop redact: we erase a store’s data in response to Shopify’s shop/redact webhook (sent ~48 hours after uninstall) on the same schedule. One narrow exception: we retain a non-reversible one-way hash of your store domain (no store name, token, or catalog data) solely to prevent repeat abuse of the one-time free AI credits on reinstall. This is minimal, non-personal anti-fraud data we keep under our legitimate interest.
• Customer data requests/redaction: Shopify also sends customers/data_request and customers/redact. Because Catalogist stores no customer personal data, we have none to return or erase; we acknowledge these requests as required.
• On request: you may ask us to delete specific history or all data we hold for your store at any time (§11). (An in-app delete-history control is on our roadmap; until then, contact us.)

8. Security

We protect data with measures appropriate to its sensitivity: encryption in transit (TLS 1.2+); encryption at rest provided by our database and storage providers; application-level AES-256-GCM encryption of the stored Shopify access token, on top of provider at-rest encryption; scoped, least-privilege credentials; and access tokens treated as secrets that are never logged and are transmitted only to authenticate requests to the Shopify Admin API.

Breach notification. If a personal-data breach affects data we process for you, we will notify you without undue delay and within 72 hours of becoming aware, to the extent feasible, with the information you need to meet your own obligations. Notice goes to the email associated with your Shopify account.

No method of storage or transmission is 100% secure, but we work to protect your information and to address incidents in accordance with applicable law.

9. Your rights, roles, and transfers (GDPR / UK GDPR / CCPA / similar)

• Roles: For your store and catalog data, you are the controller and Catalogist is a processor acting on your instructions, under the DPA. We process such data only to provide the App.
• Your customers: Catalogist does not process your customers’ personal data, so we are not a processor of it. Your obligations to your customers under the GDPR, UK GDPR, CCPA/CPRA, or other laws are unaffected by Catalogist.
• Your rights: depending on your location you may have rights to access, correct, export, restrict, or delete the data we hold about your store, and to object to processing based on legitimate interests. Contact us (§11) to exercise them. We do not sell or “share” personal information as defined by the CCPA/CPRA, and we do not discriminate against you for exercising your rights.
• International transfers: our providers may process data in the United States and the European Union. Where personal data leaves the EEA or UK to a country without an adequacy decision, transfers rely on the EU Standard Contractual Clauses (2021/914) and, for the UK, the UK IDTA / Addendum, or on equivalent safeguards in our subprocessors’ DPAs.
• Supervisory authority: Catalogist is operated by Iscovici Labs – by Ori Iscovici, based in Tel Aviv, Israel. If you believe we have not handled your data lawfully, you may lodge a complaint with a supervisory authority in your country of residence, place of work, or where the issue arose (in Israel, the Privacy Protection Authority; in the EU, your local DPA; in the UK, the ICO).

10. Children

The App is a business tool for Shopify merchants and is not directed to children. We do not knowingly collect personal data from children.

11. Contact

Questions, requests, or complaints about this Policy or your data:

• Email: support@catalogist.app
• Entity: Iscovici Labs – by Ori Iscovici
• Address:
  Shalom Tower (Migdal Shalom)
  9 Achad Ha’Am St.
  P.O. Box 231
  Tel Aviv-Yafo, 6525101
  Israel
• Data Protection Contact: Ori Iscovici, Iscovici Labs

12. Changes, severability, and entire agreement

We may update this Policy as the App or the law evolves. For material changes we will give at least 30 days’ notice through the App or by email before they take effect; if you object, you may uninstall before the effective date. The “Last updated” date above will change with each revision. If any provision of this Policy is found invalid, the rest remains in effect. This Policy, together with the Terms of Service and the DPA, is the entire understanding between you and Catalogist regarding data handling.