CatalogWise legal terms
DPA-Ready Information
For some customer data, CatalogWise may act as a processor on behalf of the merchant or agency. This page summarizes the public DPA posture for vendor review.
Processor posture
CatalogWise may process store URLs, scan results, report data, chat context and account records to provide the service. The contracting party is CatalogWise. A formal DPA can be made available under request when required by an eligible customer agreement.
DPA structure
- Subject matter: AI commerce readiness scans, reports, monitoring and support.
- Duration: account term plus retention required for security, accounting and dispute handling.
- Categories: business users, store contacts, agency users and authorized merchant users.
- Data types: account data, store URLs, scan data, report data, support messages and consent records.
- Security: server-side secrets, row-level database access controls where configured, limited processing, audit-friendly evidence labels and revocable connected access.
Subprocessors
Stripe: Payment processing, invoicing and checkout sessions
Supabase: Authentication, database, storage and application infrastructure
OpenAI: Optional structured AI analysis of extracted catalog signals
Email provider: Transactional report delivery and account email
Requesting a DPA
Eligible customers can request a DPA through privacy@catalogwise.com. The DPA is handled as part of the applicable customer agreement or order form, together with the final legal entity details, governing law and venue.