Privacy policy

Effective October 5, 2026. Catalog Signal is operated by Nahrin Oda. Contact nahrin@nahrinoda.com.

Information we process

We process your Shopify shop identifier, app authorization tokens and session details supplied by Shopify. When you request a scan, we read product variant identifiers, titles, SKUs, barcodes, size and color options, and custom MPN and brand metafields. We process the columns you map from your uploaded eBay or supplier CSV files. Do not upload customer data or unrelated personal information.

Purpose and storage

We use this information to authenticate your shop, check subscription access, compare linked product records, and show findings and suggestions. Raw upload files are not retained. The latest scan report, including product information and evidence, is stored for your shop and replaced by your next scan. Session credentials are stored so the app can authenticate securely. We do not sell this data, use it for advertising, or send catalog records to an AI model.

Service providers and security

Shopify processes authentication and billing information. Vercel hosts the application, and Supabase stores app sessions and scan reports in Canada. Vercel may process requests outside Canada. These providers process app data to operate the service. Data travels over HTTPS in production. Access to scan results requires an authenticated Shopify session for the same shop. Product records are rendered as text, and the app cannot write product changes.

Deletion and requests

You can delete your latest scan inside the app. Uninstalling triggers deletion of stored scans and app sessions when Shopify delivers its uninstall or shop-redaction webhook. You may also request access, correction, deletion, or information about our service providers by emailing support from an address associated with your store. We may verify your authority before acting. We do not request customer or order data.

Updates

We will update this page when our processing changes and revise its effective date.