Legal
Privacy policy
The short version
- Your product files never leave your device. CSV and Excel files are read, checked, repaired and exported by code running in your web browser. They are not uploaded to CatalogPilot or anyone else.
- We don't use advertising trackers or sell data.
- We count anonymous usage events to understand whether the product is useful.
Files you check
File contents, file names, product data, prices and supplier information are processed only in your browser's memory and discarded when you close or reload the page. They are not sent to our servers, to an AI provider, or to any third party. The column-mapping model runs on your device.
Anonymous usage statistics
When you use the site, your browser may send an event such as “page viewed”, “file checked” or “corrected file downloaded”, together with the page path and the tool name. We store only daily totals per event. We do not store IP addresses, cookies, device fingerprints or any file information with these events. Once per page load we also record the category of where the visit came from (for example “Google search”, “social media” or “direct”) — never the referring address itself. If your browser sends a Do Not Track or Global Privacy Control signal, no events are sent.
Analytics store nothing on your device: no cookies, no local storage, no identifiers.
Contact form
If you send a message through the contact form, the name, email address and message you enter are sent directly from your browser to FormSubmit, a third-party form-to-email service, which delivers them to the owner's email inbox (Google Gmail). FormSubmit and Google process the message under their own privacy policies. We use your details only to reply to you, and keep messages only as long as needed to handle your request. FormSubmit receives your IP address as part of the request; we don't.
Moving a file between tools
When you click “Fix this file in the repair tool” on a free tool page, your file is passed to the repair tool through your browser's own local storage (IndexedDB) on your device. It is deleted as soon as the repair tool opens it, or ignored after 10 minutes. It is never uploaded.
Monitoring
An automated job checks every 30 minutes that the website is online. These checks don't involve visitors or their data.
Owner / legal review required: If you enable Cloudflare Web Analytics, add a sentence naming Cloudflare as a processor of cookieless page-view data.Hosting
The site is hosted on Cloudflare. Like any web host, Cloudflare processes technical request data (such as IP addresses) to deliver pages and protect against abuse. See Cloudflare's privacy policy.
Payments
If paid repairs are enabled, payment is handled by Stripe on Stripe's checkout page. We receive confirmation of payment, the amount and currency, and a fingerprint (a one-way hash) of the file being unlocked — not your card details and not the file. Stripe's privacy policy applies to the data you give Stripe.
Owner / legal review required: State how long payment records are retained (e.g. as required for tax/accounting) and your refund contact.Contact
Questions about privacy, or a request to see or delete a message you sent us: use the contact form.
Owner / legal review required: Name the data controller (your legal name or company) and, if required, an EU/UK representative.