Privacy Policy
How Katalogiq collects, uses and protects your data.
Last updated: 11 July 2026
Who we are
Katalogiq (katalogiq.com) is a product of NorthDock B.V., registered with the Dutch Chamber of Commerce under number 42005535, with registered office at Eurenderstraat 13, 6467 CS Kerkrade, the Netherlands. We are the data controller for the personal data described in this policy. Katalogiq is operated from the Netherlands and hosted within the European Union.
Questions about this policy or about your data? Email us at hello@katalogiq.com.
The data we collect
We only collect the data we need to run the service:
- Account data — name, email address, password (stored as a hash), workspace name and user role.
- Billing data — your plan, usage counters (uploads and generated images), invoice and payment references. Card details are processed by our payment provider Mollie and never touch our servers.
- Content — the product photos you upload, the images we generate from them and the attributes extracted from them. This content may incidentally contain personal data if your photos do.
- Technical data — IP address, browser type and timestamps in server logs, used for security and troubleshooting.
- Communications — messages you send us via the contact form or by email.
Why we process it (legal bases)
Every processing purpose rests on a legal basis under the GDPR:
- Providing the service — storing your account, processing your uploads, generating images (performance of a contract).
- Billing and invoicing — usage metering, payment processing, issuing invoices (performance of a contract and a legal obligation).
- Security and abuse prevention — logging and rate limiting (legitimate interest).
- Service communication — transactional email such as invoices and password resets (performance of a contract).
- Answering your enquiries — contact form and support (legitimate interest, or steps prior to entering into a contract).
Sub-processors
We use a small set of service providers to run Katalogiq. They process data only on our instructions:
- Google (Gemini image models) — processes uploaded images to generate variants and extract attributes; servers in the EU and the US.
- Mollie B.V. (Netherlands) — payment processing.
- Odoo — subscription management and invoicing.
- Our hosting provider — an EU-based virtual private server; all application data is stored in the EU.
- Amazon Web Services (SES) — delivery of transactional email.
Where a provider processes data outside the EEA (Google, AWS), transfers are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. Your uploads are never used to train AI models.
How long we keep it
We keep personal data no longer than necessary:
- Uploaded and generated images — deleted when you delete them, and deleted along with your account.
- Account data — kept while your account is active and deleted within 30 days after account deletion.
- Invoices and billing records — kept for 7 years, as required by Dutch tax law.
- Server logs — rotated automatically after a short period.
Where your data lives
Katalogiq runs on servers in the European Union. Images are sent to Google's Gemini API only for the duration of a generation or analysis request. We never sell your data and never use your content to train models.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data erased ("right to be forgotten").
- Receive your data in a portable format.
- Restrict certain processing.
- Object to processing based on legitimate interest.
To exercise any of these rights, email hello@katalogiq.com — we respond within one month. You can also delete your images and your account directly from the app at any time.
Complaints
If you believe we handle your data improperly, we would like to hear from you first. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Changes to this policy
We may update this policy from time to time. Material changes will be announced by email or in the app. The date at the top shows when it was last revised.