Catalogue Yard Privacy Policy
Effective September 15, 2026
Craft jay operates Catalogue Yard. Contact: catalogueyard@gmail.com. Postal address: Seongmisan-ro 88, Mapo-gu, Seoul, 03986, Republic of Korea.
Data we process
We process Shopify store identity, authorized staff session identifiers, product catalog content, merchant-confirmed product details, review history, merchant-requested evidence candidates, and minimal operational events. If a merchant optionally connects Google Merchant Center, we also process the Google OAuth authorization needed for that connection, encrypted access and refresh tokens, the selected Merchant Center account and supplemental data source, product identifiers used for merchant-confirmed or deterministic variant matching, merchant-approved Google product details, and Google publish status and diagnostic results. The initial launch does not collect Online Store customer events and does not request customer or order Admin API scopes. We do not collect customer names, email addresses, phone numbers, shipping addresses, or Shopify order records.
How we use data
Data is used to review product information and show product-data status, preserve merchant approvals while the app is installed, find merchant-requested evidence from approved sources, and publish only merchant-approved product data to selected destinations. For Shopify, publishing can create or update Catalogue Yard product metafields, Online Store product-detail data, an exact-match Shopify product category when a verified mapping exists, and supported protected native fields only when the destination-specific safety rules allow it. If a merchant optionally connects Google Merchant Center, Catalogue Yard uses the merchant's authorization only to access the selected Merchant Center account, match confirmed Shopify variants to Google products, write merchant-approved product details through the selected supplemental product data source, and reconcile Google processing or diagnostic status. Catalogue Yard does not use Google authorization to alter the merchant's primary product feed, price, availability, title, description, images, shipping settings, or advertising destinations. Data is also used to secure the service, provide support, and operate billing through Shopify. Evidence candidates and merchant decisions remain store-scoped. Only facts and product identifiers independently verified from public official or manufacturer sources may be stored in Catalogue Yard's shared product knowledge service. We do not copy Shopify product data, merchant answers, approvals, publish state, store identity, or merchant-supplied identifiers into that shared service. We also use pseudonymous lifecycle events and aggregate counts to measure install, product review, evidence demand, publish, retention, and paid-conversion performance. Those analytics do not contain product copy, merchant answers, customer or order data, Shopify tokens, raw webhooks, or staff identities. We do not sell personal data or use merchant data for cross-store advertising.
Evidence search runs only when a merchant selects Find evidence. Discovery uses bounded canonical public product identity such as independently established brand, model number, MPN, or GTIN, together with the requested fact label, locale, and bounded manufacturer-domain hints. Catalogue Yard does not automatically promote a raw Shopify SKU to public MPN truth or a raw Shopify barcode to public GTIN truth for evidence discovery. Search output is discovery-only: Catalogue Yard fetches the original public source and independently checks source trust, exact product identity, fact support, freshness, and conflicts before any value can become verified evidence. It does not send the product description, merchant answers, customer or order data, Shopify credentials, or staff identity to the search provider.
Retention and deletion
Operational events are retained for up to 90 days while the app remains installed. Delivered analytics outbox records are removed after 30 days and failed delivery records after 90 days; channel-neutral aggregate KPI records may be retained for longitudinal business reporting without store domains or catalog content. Current product snapshots, Free-plan selections, merchant-confirmed catalog facts, review history, approvals, connected-service credentials, and store-scoped operational records are retained only while the app remains installed. When a merchant uninstalls Catalogue Yard, we immediately delete those store-scoped records and active Shopify sessions. A time-limited one-way deletion tombstone is retained for up to 45 days solely to prevent a backup restore from recreating deleted store data. Encrypted backups expire after 30 days. Shopify privacy webhooks process data access and deletion requests; shop redaction repeats the deletion safeguard.
Security and subprocessors
Session credentials and connected-service credentials are authenticated-encrypted and staff actors are pseudonymized. Production infrastructure is hosted in North America by Vercel and Supabase; sanitized error monitoring is provided by Sentry when enabled. Shopify provides authentication, Admin API access, and app billing. Google provides optional OAuth authorization and Merchant API access when a merchant chooses to connect Google Merchant Center. Merchant-invoked public-web evidence discovery uses TinyFish in the initial production route. Verification may contact public manufacturer, FCC, and ENERGY STAR services. An isolated Gemini grounded-search challenger may be evaluated only against controlled staging benchmark fixtures; it is not a production fallback or evidence authority unless a later documented provider decision changes the production configuration and this notice.
Your choices
Merchants can request access, correction, export, or deletion by emailing the privacy contact above. Google Merchant Center is optional and can be disconnected from Catalogue Yard. On disconnect, Catalogue Yard revokes the Google OAuth token when possible and stops using the connection. Changing plans does not delete store-scoped data while the app remains installed: the merchant chooses which products and seats remain active within a lower plan, and unavailable features stop. Published Shopify data can remain in the merchant’s store after downgrade or uninstall because it belongs to the merchant’s Shopify catalogue. This can include Catalogue Yard product metafields, Online Store product-detail data, and an approved Shopify product category. Merchants can edit or remove those Shopify values using Shopify or Catalogue Yard while the app is installed. Catalogue Yard-owned supplemental Google product details can be retracted while the Google connection is available; the merchant's primary Google product feed remains under the merchant or its existing feed provider.