Privacy Policy

Last updated: May 1, 2026

CatalogX ("we", "our", "us") operates the CatalogX platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

We collect information you provide directly to us:

• Account information: Email address and password when you create an account, or email address when you sign in via Google OAuth.
• Uploaded images: Photos of people and garments that you upload for virtual try-on generation.
• Generated images: AI-generated mockup images created through the Service.
• Usage data: Generation settings (pose type, background, lighting), timestamps, and credit usage.
• Payment information: If you subscribe to a paid plan, payment details are processed by our third-party payment processor. We do not store your full credit card number.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your virtual try-on requests and generate images
• Manage your account and track credit usage
• Send you technical notices and support messages
• Detect, prevent, and address technical issues and abuse
• Comply with legal obligations

3. Image Processing and Storage

Uploaded images (person photos and garment images) are processed in real-time to generate virtual try-on results. We handle images as follows:

• Uploaded images are temporarily stored during processing and deleted after generation is complete.
• Generated mockup images are stored in your account history so you can access them later.
• We use OpenAI's image generation API to create mockups. Images sent to OpenAI are subject to OpenAI's Privacy Policy.
• We do not use your uploaded images to train AI models.
• You can delete your generation history at any time by contacting us.

4. Data Sharing

We do not sell your personal information. We may share your information with:

• Service providers: Third-party services that help us operate the platform (cloud hosting, payment processing, AI image generation).
• Legal requirements: When required by law, regulation, or legal process.
• Business transfers: In connection with a merger, acquisition, or sale of assets.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing (bcrypt)
• JWT-based authentication with token expiration
• Rate limiting to prevent abuse

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your account and associated data.
• Data portability: Request a copy of your data in a machine-readable format.
• Objection: Object to processing of your personal data for certain purposes.

To exercise any of these rights, contact us at privacy@catalogx.app.

7. Cookies

We use essential cookies to maintain your authentication session. We do not use tracking cookies or third-party advertising cookies. Google Sign-In may set its own cookies as part of the authentication process.

8. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected information from a child under 16, we will delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

• Email: privacy@catalogx.app