Privacy Policy

Last updated: [EFFECTIVE DATE]

This policy explains in plain language what information katalog4b (“we”) collects in its mobile app and web pages, how we use it and how we protect it. For the legal details, see the Privacy Notice (KVKK).

1. In short

Your photos and catalogue content belong to you and are used only to prepare your catalogues.
To extract product attributes, your photos are sent to a third-party AI service (Anthropic — Claude); this content is not used for model training and your product is never altered.
We do not show ads, do not use tracking cookies and do not sell your data.
You can delete your account at any time; access ends immediately and your data is permanently deleted within 30 days.

2. Information we collect

Account details: name or company name, email address, a one-way hash of your password, language and industry preference.
Company profile: logo, phone, WhatsApp, contact email, website, address, brand colour and (optionally) tax office and number. These appear on catalogue covers and contact pages.
Content: product photos, product names, codes, prices and attributes, your catalogues and their settings.
Usage and device data: IP address, device model, operating system, app version, activity and error logs.
Notification data: your device’s push notification token.

3. How we use information

To create and verify your account and let you sign in securely;
To store your product library, generate attribute suggestions, prepare catalogues, previews and PDFs, and create share links and QR codes;
To track your plan and analysis credits and review upgrade requests;
To notify you when your catalogue is ready or an analysis finishes;
To keep the Service secure, detect and fix errors and improve it using aggregated statistics;
To meet our legal obligations.

4. AI analysis (third-party AI service)

To extract product attributes (colour, type, sole, heel and so on), we send a downsized copy of the photos of products you add to a catalogue, together with your industry’s attribute list, over an encrypted connection to Claude AI models provided by Anthropic, PBC (USA).

Your name, email address and company details are not sent to the AI.
Photos are only read to extract attributes; your product is never altered — no background removal or retouching.
Under its commercial terms, the provider commits not to use content processed through its API to train its models.
For quality and cost tracking, we keep a record of the text sent to the model (excluding photos), the response, token usage and cost.
AI suggestions may be wrong; every value can be edited and low-confidence values are flagged “check”.

6. Cookies and tracking

The mobile app does not use advertising identifiers and does not track you across other apps or websites. Our legal and share pages do not use cookies. The tokens needed to keep you signed in are stored in your device’s secure storage.

7. Security

Passwords are stored as one-way hashes (argon2); nobody, including our team, can see your password.
Data is transmitted over encrypted connections (HTTPS).
Images and PDFs are only accessible through time-limited signed links, and account ownership is checked on every request.
Sign-in and verification are rate-limited with temporary lockouts; system access is limited to authorised staff and logged.

8. Retention and deletion

We keep your information while your account is open. Deleted products and catalogues are permanently purged after 30 days. When you delete your account in the app (Profile → Delete account) or on the account deletion page, access ends immediately and your data is permanently deleted within 30 days. Records we must keep by law are retained for the required period. Detailed periods are listed in the Privacy Notice.

9. Children’s privacy

The Service is intended for adults running a business and is not directed at children under 18. We do not knowingly collect information from children under 18.

10. Your rights

Under the KVKK you have the right to access your information, request its correction or deletion and object to its processing. How to apply is explained in the Privacy Notice.

11. International transfers

Because our AI, email and notification providers are located in the USA, some of your information is transferred abroad. These transfers are made under the safeguards and conditions set out in Article 9 of the KVKK.

12. Changes

We may update this policy. The current version is published on this page and we will notify you in the app of significant changes.

13. Contact

For privacy questions: [KVKK REQUEST EMAIL] · [COMPANY LEGAL NAME], [COMPANY ADDRESS].