What we collect
- Request and project details: business name, email address, optional WhatsApp number, language and currency preferences, catalog and design settings, and any notes you write.
- Optional account: you can start as a guest. When you export or choose to save a project, you sign in with a one-time email link or with Google. We store your email address and, for Google sign-in, the name and account identifier Google shares with us. We never receive your Google password.
- Files you upload: spreadsheets, product photo archives, logos and reference files such as old catalogs.
- Order records: quotes, payment status (not card details), delivery records, messages exchanged about your order and an audit trail of changes made to your data.
- Usage statistics: the pages and steps you visit (for example “pricing page viewed” or “quote issued”), the site or campaign that brought you here, your approximate location (country and city, as reported by our hosting provider) and your device type, browser and operating system. We do not store your IP address or your browser’s identification string. To count unique visitors we keep a code computed from them that changes every day, so visits cannot be linked from one day to the next. No tracking cookies are used. Usage records are deleted after about four months.
Why we use it
To check and convert your product data, produce your catalog, send you previews, quotes and delivery links, process payments, apply updates you request, and understand which steps of our service work. We do not sell your data or use it for advertising.
Please do not upload confidential material
Catalogs are made to be shared with buyers. Do not upload confidential, personal or legally restricted information, such as customer lists, internal cost prices you do not want published, or third-party material you have no right to use.
Who processes your data
- Stripe processes payments through its hosted checkout page. We never see or store your card details.
- Resend delivers our transactional emails (request receipts, previews, quotes, delivery and update notices).
- Private S3-compatible object storage holds uploaded files and generated catalogs. Files are private by default and are only reachable through short-lived signed links or through pages that check your access.
- Our hosting and database providers run the website, the processing worker and the database that stores project and order records.
- Google confirms your identity if you choose “Sign in with Google”.
- Google Gemini (only if AI assistance is enabled): when our rules cannot tell what a column means, or a product has no translation, we may ask Gemini for a suggestion. It receives only what that question needs: column headers, a few sample rows, or the product names to translate. It never receives your whole file, and its suggestions are shown to you as unconfirmed and are never applied without your confirmation.
Your files are read by deterministic rules first. Text inside your files is treated as data, never as instructions.
Private links
You do not need an account to start. Guest projects are tied to your browser through a private session cookie, and managed-service requests and catalog updates use private links that contain a long random code. Anyone who has such a link can view that page, so please do not forward the emails that contain them. Links expire, and we can revoke a link and issue a new one at any time. Lost your link?
Public catalog pages
Once your catalog is delivered, its web version is public: anyone with the link or QR code can view it. Draft previews are never public. Public catalog pages ask search engines not to index them unless you choose to allow indexing.
How long we keep things
- Guest drafts (projects started without signing in, with their uploaded files) are kept for 30 days and then deleted, unless you sign in and save them to your account.
- Uploaded source files (spreadsheets, archives, reference files) are deleted automatically 180 days after upload.
- Product images and your logo that appear in a live catalog are kept while that catalog is hosted, then deleted on the same schedule.
- Generated catalogs (PDF revisions and web catalog data) are kept for the hosting term so that updates and rollbacks remain possible.
- Purchased PDF exports stay downloadable from your account for the access period stated at purchase.
- Order, quote and payment records are kept as long as accounting and tax rules require.
You can ask us at any time to export your data or to delete your files and catalog earlier. Deleting a catalog takes its public link offline.
Cookies
We set no tracking or advertising cookies. We use only functional cookies: a guest session cookie that keeps your draft project available in your browser, a sign-in session cookie when you sign in, a session cookie for our own staff in the admin area, and a short-lived cookie that brings you back to the right page after checkout.
Your rights and contact
To access, correct, export or delete your data, or for any privacy question, email support@greatlyboard.com. Please include your request or export reference if you have one. Depending on where you are, you may also have the right to complain to your data protection authority.