Privacy Policy

Qartalog is operated by [Legal business name] ("we", "us", "our"). For the personal data described in this policy, we are the data controller — meaning we decide how and why your personal data is processed. If you have questions about this policy or your data, contact us via our contact page.

• Account data — name, email address, login credentials, and business details you provide when signing up or onboarding.
• Content data — product images, descriptions, pricing, branding, catalogs, and client details you upload to the Service.
• Communications — messages you send through in-app messaging, the AI assistant, and support or contact forms.
• Usage and device data — pages visited, features used, approximate location derived from IP address, browser and device identifiers, and similar telemetry.

Payment card details are collected and processed directly by Paddle (our Merchant of Record) — we never see or store your full card number.

• To create and manage your account and provide the Service (contract performance);
• To operate catalogs, quoting, messaging, and client access on your behalf (contract performance);
• To secure the Service, prevent fraud and abuse (legitimate interests);
• To improve the product and understand how features are used (legitimate interests);
• To respond to support requests and send service-related notices (contract performance);
• To meet legal and tax obligations (legal obligation).

• Paddle — our Merchant of Record, for the sale of subscriptions, payment processing, subscription management, tax compliance, and invoicing.
• Service providers — hosting, database, storage, and analytics providers that process data on our behalf under contract.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law or to protect rights and safety.

We do not sell your personal data.

We keep personal data for as long as your account is active and as needed to provide the Service, meet legal obligations, and resolve disputes. When data is no longer needed, we delete or anonymise it.

Depending on where you live, you may have the right to access, correct, or delete your personal data, restrict or object to processing, request a portable copy, and withdraw consent where processing is based on consent. You may also have the right to complain to your local data protection authority. To exercise any of these rights, contact us via our contact page — we aim to respond within one month.

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and row-level isolation between customer accounts. No method of transmission or storage is perfectly secure, but we work to protect your data and will notify you of breaches where the law requires it.

We use essential cookies and similar storage to keep you signed in and run the Service, and limited analytics to understand product usage. You can control cookies through your browser settings; disabling essential cookies may prevent sign-in from working.

We may update this policy from time to time. The current version is always on this page, and material changes will be highlighted in the Service where appropriate.