Privacy notice

Privacy notice updated September 8, 2026.

Pytrel Systems LLC operates CatalogWitness. This notice explains how information is handled when you use the hosted workbench, buy Professional, download the software or contact support.

Catalog files stay on your device

Selected files, SKU values, cell contents, filenames, comparison settings and report contents are processed in browser memory. They are not uploaded to our server or an AI service. Closing or reloading clears that in-memory work. Downloaded software, inputs and reports are stored wherever you save them; reports can contain commercially sensitive data. The downloaded edition includes its own code, styles and example data. It runs without an internet connection and blocks network connections from the tool.

Payments and hosted access

Stripe receives billing information entered at checkout. It retains checkout/payment references, the accepted terms version and refund/dispute records under its policies. Our server rechecks payment records to validate signed keys for hosted paid functions and software downloads. CatalogWitness has no separate customer activation database, and we do not store full card numbers. An already downloaded offline version runs without a hosted payment check.

Essential cookies and security

Essential cookies hold an access key and connect your browser to its checkout. They are HttpOnly and use Secure transport on HTTPS. Checkout recovery and access cookies can last up to 400 days, subject to browser behavior and clearing; this is a recovery mechanism, not your software license duration. A cookie alone is not payment evidence: hosted paid access revalidates Stripe. Application rate limits use a network-address hash and short-lived counters. Vercel can apply additional network-level controls and necessarily processes requests and technical service logs.

Measurement

The production website uses Vercel Web Analytics for aggregate visits to public pages, including the hosted workbench. We remove query strings and URL fragments from measured page addresses. Payment confirmation, access recovery, license, administrative and API routes are excluded. We do not send custom events, catalog contents, filenames, settings, access keys or form entries to analytics. A visit can also be excluded when its referring address could contain private information.

Vercel processes request information to report aggregate page counts, browser and device types, approximate location, and safe referring sites. Its analytics uses a request-derived visitor hash rather than analytics cookies; Vercel says that visitor session identity is discarded after 24 hours. See Vercel’s analytics privacy documentation. The website has no advertising trackers. Stripe purchase and refund records separately support billing measurement. The downloaded edition contains no analytics or tracking SDK, and we receive no offline usage history.

Support

Your support messages and contact details are used to answer your request and remain with the operator’s email provider. Do not send catalog files, access keys, card details or passwords. Supply your Stripe receipt reference where needed.

Retention and rights

Our retention policy is to keep support correspondence for 24 months after a request is closed, then review it for deletion. Billing, tax and payment-related records are retained as legally required, with a target of seven years after the transaction. Legal holds, unresolved disputes and other legal obligations can extend these periods. Provider records and backups may follow separate retention schedules; deletion is not immediate or automatic. Contact support to request access, correction or deletion of personal information we hold. We may verify identity and retain records required by law or needed for a dispute. Where applicable, you may complain to your privacy regulator. We cannot retrieve or delete local catalogs, software copies or reports; you control downloaded files.

Providers

Vercel hosts the website and processes network requests, service logs and the aggregate website measurement described above. Stripe processes payments, billing information and payment, refund and dispute records; see Stripe’s privacy notice. Support messages are handled through the operator’s email provider. These providers may process information in countries other than your own under their service arrangements and applicable law. Catalog content is not sent to these providers by the workbench. Request metadata and checkout information follow the flows above.

For privacy requests, use the support page.