Privacy policy

01Data controller

The data controller is Catalobee, Station F, 5 Parvis Alan Turing, 75013 Paris, France. For any question about your data: hello@catalobee.com.

02Data we collect

When you visit the site: technical connection data (IP address, browser type, pages viewed, date and time), recorded in our hosting provider’s logs.

When you contact us or book a demo: your name, email address, company name and the content of your message.

When you use the platform: account data (name, email, encrypted password, role), billing data, and the business data you import or connect (orders, products, inventory, your customers’ contact details).

For your own customers’ data, Catalobee acts as a processor under Article 28 of the GDPR: we process it only on your instructions and to provide the service to you.

03Purposes and legal bases

• Providing, maintaining and securing the platform — performance of a contract.
• Sending the order notifications you set up (email, SMS, WhatsApp) — performance of a contract.
• Answering your contact and demo requests — pre-contractual steps.
• Billing and meeting our accounting obligations — legal obligation.
• Improving the service and preventing fraud — legitimate interest.
• Sending product news — legitimate interest for customers, consent for prospects; you can unsubscribe at any time.

04Recipients and processors

Your data is only accessible to authorized Catalobee team members and to our technical providers, to the extent necessary:

• Amazon Web Services — hosting and backup of platform data;
• Railway — website hosting;
• Google Fonts — website fonts (your IP address is sent to Google when they load);
• email, SMS and WhatsApp delivery providers — sending notifications;
• payment provider — secure subscription processing.

We never sell or rent your data to third parties.

05International transfers

Some providers may process data outside the European Union, notably in the United States. These transfers are covered by the European Commission’s Standard Contractual Clauses or by the EU–US Data Privacy Framework.

06Retention periods

• Prospects and contact requests: 3 years after our last exchange;
• Account and business data: for the duration of your subscription, then deleted within 90 days of account closure (you can export it beforehand);
• Technical logs: 12 months;
• Accounting records and invoices: 10 years, as required by French commercial law.

07Security

Data is encrypted in transit (TLS) and at rest, backed up daily and hosted in highly secure data centers. Access is limited to the people who need it, with dedicated roles and permissions.

08Cookies

The website uses no advertising cookies and no analytics tools. It may only use storage that is strictly necessary for it to work, which does not require your consent. The platform uses session cookies that are essential for logging in.

09Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, and the right to data portability.

To exercise them, email us at hello@catalobee.com. We reply within one month.

If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr), or with the data protection authority in your country.

10Changes to this policy

We may update this policy to reflect changes to the service or to regulations. The last-updated date is shown at the top of this page; if a change is significant, we will let you know by email.