Privacy Policy

Privacy Policy

This Privacy Policy describes how Katallo collects, uses, stores, and protects personal data of users who access or use our services. We comply with the LGPD (Brazil), the GDPR where it applies, and other mandatory data protection laws.

1. Data controller

Katallo is operated by Pedro Magalhães (individual provider) from João Pessoa, Paraíba, Brasil. Contact: [email protected]. Paid subscriptions are processed by Paddle, our authorized reseller (Merchant of Record).

2. Personal data collected

Depending on how you interact with the platform, we may collect:

Registration data

  • Name
  • Email address
  • Password (encrypted)
  • Contact details you provide

Store data

  • Store name
  • Logo or uploaded images
  • Products, categories, and catalog information

Payment data

Payments are processed securely by third-party payment providers. We do not store full credit card numbers or sensitive payment credentials.

Technical data

  • IP address
  • Browser type and device identifiers
  • Cookies and similar technologies
  • Platform usage and navigation data

3. Purposes of processing

  • Providing, operating, and maintaining the digital catalog service
  • Managing user accounts and authentication
  • Processing subscriptions, billing, and payments
  • Complying with legal, tax, and regulatory obligations
  • Improving platform performance through analytics
  • Communicating about updates, support, and administrative messages
  • Marketing and advertising, where permitted by law or based on consent

4. Legal basis for processing

  • Performance of a contract with the user
  • Compliance with legal obligations
  • User consent
  • Legitimate interests, such as improving and securing the platform

5. Data retention

Personal data is retained only as long as necessary for the purposes described or as required by law. Users may request deletion of their account, except where retention is legally required.

6. Sharing with third parties

We may share data with trusted service providers (hosting, payments, support, analytics). They process data only as necessary and are contractually obligated to comply with applicable law.

7. International data transfers

Platform hosting uses servers in the European Union (Germany). Some providers may process data outside Brazil. Where required, we implement appropriate safeguards under the LGPD, GDPR, and applicable law.

8. Your rights

Depending on applicable law, you may have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of personal data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent where processing is based on consent
  • Opt out of certain processing, including targeted advertising or sale/sharing under state law where applicable

California residents may also have rights to know, delete, correct, and limit use of sensitive personal information under the CCPA/CPRA. Requests: [email protected]. You may lodge a complaint with the competent supervisory authority in your jurisdiction.

9. Data security

We implement appropriate technical and organizational measures to protect personal data. However, no system or transmission over the Internet is completely secure.

10. Cookies and tracking

We use cookies and similar technologies. See our Cookie Policy.

11. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, or legal requirements. Updated versions will be published on this page.

12. Contact

Email: [email protected]

Effective date: June 15, 2026