Privacy Policy

What we collect

Your account. You sign in through Clerk, our login provider, with Google or with an email address. When you sign in with Google, Google shares your name, email address and profile picture with us. We store your name, your email address and your account ID in our database. Your profile picture stays with Clerk; we show it in the app's account menu.

What you put into Richicat. The product catalogs you import (for example a Shopify CSV: product names, descriptions, prices, SKUs and image links), the templates and designs you make, images you upload, the ads Richicat renders, your brand kit (logo, colors, fonts, and the website address you read it from), and your settings.

Shopify. If you connect a Shopify store, our Shopify app reads that store's products (names, descriptions, prices, SKUs, stock status, tags and image links) with read-only access. We store the store's name, address, currency and the access token Shopify issues, encrypted. We never read customer or order data and never write to your store. When you uninstall the app, we delete the token right away and keep your imported products until you delete the source; when Shopify asks us to erase a store's data, we delete everything we hold about that store's connection.

Teams. If you create or join a team, we store which team you belong to and your role in it.

Billing. If you subscribe or buy credits, payment happens on Stripe's checkout page. Stripe handles your card details; we never see or store them. We keep your Stripe customer and subscription IDs, your plan, the amount and status of each payment, and your credit balance and usage.

Cookies and browser storage. Clerk sets the cookies that keep you signed in. Richicat also saves a few preferences in your browser's local storage, such as your theme, sidebar layout and a few editor and onboarding settings. We do not use advertising cookies.

Usage analytics. We always use Google Analytics in cookieless mode: it counts page views and visits from anonymous signals (page, browser, device, approximate location) without setting cookies or recognising you between visits. When you first visit, we ask whether you also accept analytics cookies. If you do, Google Analytics may set its cookies and Microsoft Clarity records session replays of what was on screen, clicks and scrolling, so we can see where people get stuck. You can change your answer at any time under Settings → Data in the app. Your choice is saved in a cookie in this browser.

Why we collect it

• Your name, email and profile picture: to create your account, sign you in, show who is signed in, and contact you about your account or billing.
• Your catalog, designs and images: to make, store and show the ads you ask for. That is the product.
• Billing data: to charge for plans and credits, keep track of what you have used, and keep records we are legally required to keep.
• Team data: to let teammates work in the same workspace with the right permissions.
• Usage analytics: to see which pages and features work, and fix the ones that don't.

We do not use your information for advertising, and we do not build profiles of you.

Who processes it

We use a small number of service providers. Each one only gets what it needs to do its job:

• Clerk: sign-in and account management, including Google sign-in. Holds your name, email address, profile picture and login sessions.
• Cloudflare: hosts the app and stores our database and files (Cloudflare Workers, D1 and R2). Everything listed above under "What you put into Richicat" lives here.
• Shopify: only if you connect a store. Richicat reads that store's products through Shopify's API, and Shopify tells us when they change or when the app is removed.
• Stripe: payments. Receives your name and email address to set up billing, plus the card details you enter on its checkout page.
• fal.ai: AI image processing. Only when you use an AI feature (such as a background removal or an AI scene) does it receive the image and the instructions for that step.
• Unsplash: only when you search stock photos in the editor. Your browser sends the search words to Unsplash directly.
• Google Analytics: anonymous, cookieless usage statistics, with cookies only if you accept them. Not used for advertising.
• Microsoft Clarity: session replays, only if you accept analytics cookies. Not used for advertising.
• Google Fonts: the fonts on our pages load from Google's servers, so Google receives your browser's IP address and basic request details.

Two features send information because you ask for it. When you read your brand from a website, our server fetches that public page. When you publish a feed, Richicat creates a feed link with that feed's products and ad images so you can add it to Meta Commerce Manager. Anyone who has that link can open it, and Meta reads it once you add it there.

We don't sell your data

We do not sell, rent or trade your personal information, and we do not share it with advertisers. We only share it with the service providers above, to run Richicat, or when the law requires it.

Information from Google

Richicat's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

From Google we only receive your name, email address and profile picture, and we only use them to sign you in and run your account. We do not use them for advertising, we do not sell them, we do not use them to train AI models, and no person at Richicat reads them except to give you support, to keep the service secure, or when the law requires it.

How long we keep it

We keep your information for as long as your account is open. When you delete your account, or ask us to delete your data, we delete it as described below. We keep payment records for as long as tax and accounting laws require, even after your account is gone.

Deleting your account and data

• Delete your account in Settings → Security. This removes your login and profile (with Clerk and in our database), your settings, your personal brand kit and your team memberships.
• Clear your feeds and ads in Settings → Data. You can also download a copy of your workspace data there first.
• Delete everything. Deleting your account in the app keeps your workspace's feeds and billing history. To have all of your data deleted, including catalogs, templates, images and ads, email us at support@richicat.com from the address on your account. We will confirm and delete it within 30 days, except for records the law requires us to keep.

You can also email us to ask what we hold about you or to correct it.

Children

Richicat is a tool for businesses and is not meant for children. We do not knowingly collect information from anyone under 13.

Changes

If we change this policy, we will update it here and change the date at the top. If a change is significant, we will tell you by email or in the app.

Contact

Questions about privacy, or a deletion request: support@richicat.com. See also our Terms of Service.