Privacy Policy

1. Who is responsible for the data

For your store's product data, you, the site owner, decide what CatalogGuard monitors, and we process that data on your behalf only to provide the service.

For the site owner's contact details and for data you send us directly, for example when you email us for support, NexoCommerce is responsible.

2. Information we collect

When you install CatalogGuard and grant the permissions it asks for, Wix gives the app access to the following, which we store:

• Site details: the Wix app instance and site identifiers, the site name, the store currency, which Wix Stores catalog version the site uses, and your CatalogGuard plan and billing cycle (Wix tells us the plan; we never receive payment details).
• The site owner's email address, using Wix's "Read Site Owner Email" permission, so that alerts reach you. Any other alert recipients you enter in CatalogGuard's settings are stored too.
• Product data: for each product, its ID, name, description text, visibility, product type, and for each variant its name, SKU, price, compare-at price, visibility and stock (quantity or in-stock status). We keep the latest values to detect what changed.
• Change history: the product and variant affected, the field that changed, the previous and new value, the time of the change, and how it happened (catalog edit, order, inventory change, or found by the daily check).
• Who made a change, only in general terms and only when Wix reports it: for example "Wix user", "Wix Stores", "Site member", "Site visitor" or the first characters of another app's ID. We do not store the identity of the Wix user, member or visitor.
• Incidents and notifications: groups of unusual changes, their severity and status, and a log of in-app notifications and alert emails with their delivery status.
• A log of the events Wix sends us (event ID, event type, product ID, time and how it was processed), used to avoid processing the same event twice and to investigate problems.
• Technical logs: our web server records the IP address, time and address of requests to CatalogGuard, including requests from Wix's servers and from your browser when you open the CatalogGuard dashboard.
• Error, performance and usage reports: when something goes wrong, the app sends our monitoring service (Sentry) the error message, where in the code it happened, the app version, timing information and an internal store number. It also sends anonymous usage counts, such as installs, plan changes, changes recorded and alerts sent, labelled only with values like the plan or event type. These reports never include product data, prices, store names, email addresses, the contents of requests, or access tokens.

3. How we use information

• To record product changes, show them in your CatalogGuard dashboard and detect unusual changes.
• To send you alert emails and in-app notifications about incidents.
• To apply your plan's limits and features.
• To keep the service secure and working, and to answer your support requests.
• To understand how CatalogGuard is used, from anonymous counts such as installs, plan changes and alerts sent, so we can improve it.

We do not sell data, use it for advertising, or send marketing emails to the site owner's address. We do not use your store data to train AI models.

4. Access tokens, cookies and the dashboard

CatalogGuard does not store Wix access tokens. It requests a short-lived token from Wix when it needs to read your products and keeps it only in memory, for at most 4 hours.

The CatalogGuard dashboard runs inside your Wix dashboard. It does not set cookies and does not use analytics, advertising or cross-site tracking. It reports errors and page-load timing to our error-monitoring service (Sentry), without product data and without the signed identifier in the page address. When it opens, Wix passes a signed identifier of your site, which we check and exchange for a session that lasts up to 12 hours and is kept only in the open page. The dashboard loads its fonts from Wix's content delivery network (static.parastorage.com).

5. Who we share information with

• Wix: CatalogGuard is a Wix app. Wix provides the data described above, delivers events to us and handles billing. Wix's own handling of your data is described in the Wix Privacy Policy.
• Amazon Web Services (AWS): our servers and database run on AWS infrastructure.
• Our email delivery provider: used to send alert emails to the recipients you set.
• Sentry (Functional Software, Inc.): error, performance and usage monitoring. It receives only the reports described above.
• Authorities or others, when required by law or to protect our rights, users or the public.

We do not share your store data with anyone else.

6. How long we keep information

• Change history and notifications: for your plan's history period, 7 days on Free and 90 days on Pro, then deleted automatically every day. Incidents are deleted once all their changes have been.
• The event log: 30 days.
• Product data and settings: while CatalogGuard is installed.
• When you remove CatalogGuard from your site, monitoring stops immediately and all data for that site is deleted 30 days later. If you reinstall within those 30 days, your history is kept.
• Database backups are kept for 7 days, so deleted data can remain in a backup for up to 7 more days before it is overwritten.
• Technical logs are rotated and deleted automatically, normally within a few weeks, and never contain access tokens or app secrets.
• Error, performance and usage reports in Sentry are kept for up to 90 days.

7. How we protect information

Data is encrypted in transit (HTTPS/TLS). Every event from Wix is checked against Wix's signature before it is used, and the dashboard only shows a site's data after verifying Wix's signed site identifier, so one store can never see another store's data. The database is not reachable from the internet, and access to our servers is limited to authorised staff. No method of transmission or storage is completely secure, but we work to protect your data and will notify affected site owners and authorities of a data breach as required by law.

8. Your choices and rights

• You can change alert recipients, turn alert emails off or pause monitoring at any time in CatalogGuard's settings.
• You can have all your data deleted by removing CatalogGuard from your site, as described above, or sooner by emailing founder@nexocommerce.com from the site owner's email address.
• Depending on where you live (including under the EU/UK GDPR, the California Consumer Privacy Act and India's Digital Personal Data Protection Act, 2023), you may have the right to access, correct, delete or port your personal data, to withdraw consent, and to object to or restrict processing.

We will respond within the time required by applicable law, normally within 30 days. If you are not satisfied with our response, you may complain to your local data protection authority (in India, the Data Protection Board of India).

9. International transfers

NexoCommerce is based in India, and Wix, AWS, Sentry and our email provider may process data in other countries. Where data is transferred internationally, we rely on our providers' contractual and security safeguards to protect it.

10. Children

CatalogGuard is a business tool for store owners and is not directed at children. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

If we change this policy, we will update the date at the top of this page and tell you about material changes in the app or by email.

12. Contact and grievance officer

NexoCommerce, Vibhav Khand, Gomti Nagar, Lucknow, Uttar Pradesh 226010, India.

For privacy questions, data requests or grievances, email our grievance officer at founder@nexocommerce.com. We acknowledge requests within 72 hours.