How personal data is collected, used and protected across WebCatalogue.
The controller is the entity operating WebCatalogue. Privacy contact: privacy@ar-webcatalogue.com. Full company details will be published after validation. WebCatalogue is responsible for keeping this notice accessible and for the processing it determines. Customers remain responsible for the purposes, lawfulness and transparency of personal data they upload, publish or process through their catalogues and integrations.
Account, contact, usage, billing, support and security data may be processed to provide the service, manage subscriptions, protect the platform and meet legal duties. This includes camera permissions, uploaded images, references, QR and barcodes, OCR, recognition events, API logs and public catalogue activity where those features are used. We minimise direct collection; customers must not submit excessive, sensitive or third-party data without an appropriate basis.
Processing may rely on contract, legal obligation, legitimate interest or consent. Data is retained only as long as required for its purpose and applicable legal periods. WebCatalogue is responsible for selecting a valid basis for its own processing and limiting retention. Customers are responsible for any additional purpose configured by them or performed after export, and must not use platform data incompatibly with the notice given to individuals.
Hosting, communications, payment and support providers may process data under appropriate obligations. International transfers use legally recognised safeguards where required. We are responsible for providers selected directly by WebCatalogue and for appropriate contractual safeguards. We do not control providers, stores or systems contracted independently by customers, although unsafe connections may be restricted to protect the platform.
You may request access, correction, erasure, restriction, objection and portability, withdraw consent and complain to the competent supervisory authority. WebCatalogue facilitates rights when acting as controller and supports customers when acting as processor. Requests concerning customer-controlled catalogue data should be directed to that customer first; neither party may use this allocation to avoid mandatory legal duties.
