What personal data does SuperCatch collect?

We collect information you provide directly (account details, payment info, listing data, communications), information collected automatically (device info, usage data, cookies), and information from third parties (marketplace partner data, payment processor data, shipping data). See Section 1 for full details.

How is my data shared with marketplace partners like TikTok Shop and eBay?

When you connect a marketplace account, listing data, inventory, pricing, and order information flow bidirectionally to enable multi-platform selling. All connections use secure OAuth authorization — we never store your marketplace passwords. You can disconnect any marketplace integration at any time from your account settings. See Section 11 for details.

How does SuperCatch use AI with my data?

Our AI analyzes uploaded card images for identification, catalog matching, and condition assessment. AI also powers duplicate detection and fraud prevention. All AI-generated suggestions are recommendations that you can accept, modify, or reject. No automated decisions produce legal effects without human review. See Section 3 for full details.

How can I delete my account and data?

You can close your account through your account settings or submit a deletion request at supercatch.com/privacy-choices, through the contact form with Privacy Request selected, or by emailing privacy@supercatch.com. Website-submitted deletion requests are tracked with a 45-calendar-day SLA, vendor action status where applicable, and resolution status, except where retention is required by law such as financial records for tax compliance.

Does SuperCatch sell my personal information?

SuperCatch does not sell personal information for money. Some advertising, analytics, or measurement disclosures may be treated as a sale, sharing, or targeted-advertising disclosure under certain U.S. state privacy laws. Where those laws apply, you can opt out at supercatch.com/privacy-choices or by using a supported Global Privacy Control signal.

How does SuperCatch protect my payment information?

All payment processing is handled by PayPal, a PCI DSS Level 1 certified processor. Your credit card numbers are never stored on SuperCatch servers. All data is encrypted in transit using TLS 1.2+ and sensitive data is encrypted at rest. See Section 8 for our full security measures.

What privacy rights do I have under U.S. state privacy laws and GDPR?

All users can request access, correction, deletion, portability, marketing opt-out, and account closure. Depending on your state, you may also have rights to opt out of sale, sharing, targeted advertising, certain profiling, or sensitive-data processing, and to appeal a denied request. EU/EEA/UK residents have GDPR rights including erasure, restriction, objection, portability, and complaint to a supervisory authority. See Section 7 for request paths and deadlines.

Privacy Policy

How SuperCatch collects, uses, protects, and shares your information, and how to exercise privacy rights through our tracked request workflow.

Last updated: October 4, 2026

Effective: October 4, 2026

Key Commitments

How we approach your privacy across every part of the platform.

Your Data, Your Control

Access, correct, delete, or export your data at any time through your account settings or by contacting us.

Transparent Sharing

We disclose the categories of recipients we use and provide opt-out choices for sale, sharing, and targeted advertising where state privacy laws apply.

Industry-Standard Security

Payments handled by a PCI DSS compliant processor, encrypted data transmission, and optional two-factor authentication protect your account.

AI with Disclosure

Our AI card recognition processes images for identification purposes. We disclose all automated processing clearly.

Jump to any section of this policy.

1. Information We Collect

We collect information in several ways to provide and improve our marketplace services. The categories below describe the types of personal information we collect and the sources from which we obtain it.

Information You Provide Directly

Account registration details, including your name, email address, phone number, and mailing address
Payment and billing information, including credit or debit card numbers, which are processed by our PCI DSS compliant payment processor (PayPal) and are not stored on our servers
Seller application details, such as store name, contact information, and the business information you provide during seller onboarding
Listing data, including card descriptions, photographs, condition assessments, and pricing information
Communications with our support team, other users, and dispute-related correspondence
Payout information, such as the PayPal account email address that receives your seller payouts
Profile information, including display name, avatar, and seller bio
Your phone number and text-message preference, if you choose to receive text notifications
Collection, wishlist, price-alert, and saved-search selections

Information Collected Automatically

Device and browser information, including device type, operating system, browser type and version, screen resolution, and unique device identifiers
Usage data, including pages viewed, features used, search queries, session duration, click patterns, and referral sources
Approximate location data derived from your IP address
Transaction history, including purchases, sales, and payment records
Log data, including IP addresses, access times, and error logs
Session recordings of how you interact with pages, such as clicks, scrolls, and mouse movements, collected by analytics tools when analytics cookies are allowed (see Section 5)
Cookies, local storage, and similar tracking technologies (see Section 5 for details)

Information from Third Parties

Sign-in provider data when you sign in with Google or Facebook, such as your name, email address, and profile image
Marketplace partner data when you connect accounts, including product data, order details, and buyer or seller identifiers from eBay, Amazon, Walmart, TikTok Shop, Etsy, Shopify, WooCommerce, Meta (Facebook and Instagram), and other integrated platforms
Payment processor data from PayPal, including transaction status, fraud risk assessments, and billing address verification
Shipping provider data from USPS and other carriers, and from shipping services such as Shippo, ShipStation, and Veeqo, including delivery status and address validation results
Publicly available data used for fraud prevention and platform integrity

2. How We Use Your Information

We use the information we collect for the following purposes:

Providing, maintaining, and improving the SuperCatch marketplace platform and all associated services
Processing transactions, payments, refunds, and payouts between buyers and sellers
AI-powered card recognition, catalog matching, condition assessment, and pricing suggestions to enhance listing accuracy
Listing management, inventory synchronization, and multi-platform distribution to connected marketplace partners
Fraud detection, prevention, and investigation, including monitoring for counterfeit items, suspicious activity, and policy violations
Customer support, dispute resolution, and enforcing our Terms and Conditions
Personalizing your experience, including recommendations, search results, and content
Sending transactional communications such as order confirmations, shipping updates, and account alerts
Marketing communications, including newsletters and promotional offers, which you can opt out of at any time
Analytics, research, and service improvement, including aggregate usage analysis and A/B testing
Complying with legal obligations, responding to legal processes, and protecting our rights and the safety of our users

3. AI and Machine Learning Disclosure

SuperCatch uses artificial intelligence and machine learning technologies to enhance our marketplace services. We are committed to transparency about how these technologies process your data.

How We Use AI

Card recognition via computer vision: when you upload images, our AI analyzes them to identify the card, set, year, and other attributes to assist with listing creation
Automated catalog matching: AI matches your uploaded cards against our catalog database to suggest accurate product details and market pricing
Duplicate detection: image hashing and metadata analysis identify potential duplicate listings to maintain catalog quality
Fraud detection: algorithms analyze listing patterns, pricing anomalies, and user behavior to flag potentially fraudulent activity for human review
Listing copy and pricing suggestions: AI drafts titles, descriptions, and price suggestions that sellers review before publishing
Support assistant: an AI assistant answers help questions using our published help content
Condition assessment assistance: AI provides preliminary condition suggestions based on image analysis, which sellers can review and adjust

Your Rights Regarding AI Processing

No automated decision-making produces legal effects or similarly significant outcomes without human review and oversight
All AI-generated suggestions (card identification, pricing, condition) are presented as recommendations that you can accept, modify, or reject
You may request human review of any AI-assisted determination by contacting our support team
You may ask us to limit AI-powered personalization of your recommendations by contacting our support team
AI features may be provided by third-party AI service providers that process data on our behalf to deliver the feature, and by models we operate ourselves
Images you upload are used to create and display your listings, to identify and catalog cards, and to measure and improve the accuracy of our recognition features; we do not sell your images

5. Cookies and Tracking Technologies

We use cookies and similar technologies to provide, secure, and improve our services.

Types of Cookies We Use

Strictly necessary cookies: required for platform functionality, authentication, security, and fraud prevention. These cannot be disabled.
Functional cookies: remember your preferences, language settings, and display options to enhance your experience
Analytics cookies: help us understand how users interact with our platform, which features are most used, and where improvements are needed. Our analytics tools include Google Analytics and Microsoft Clarity. Microsoft Clarity records session replays of page interactions, such as clicks, scrolls, mouse movements, and the pages you visit, which Microsoft processes on our behalf under its privacy statement.
Marketing cookies: used to deliver relevant advertisements and measure the effectiveness of our marketing campaigns, and may be set by advertising partners such as Google, Microsoft Advertising, and Meta. These are only set with your consent where required by law.

Google Analytics and Your Consent

We use Google Analytics 4, loaded through Google Tag Manager, to measure page views and shopping activity such as product views, cart changes, and purchases. Google Analytics sets first-party cookies named _ga and _ga_<property-id> that hold a random client identifier and session state, and expire after up to two years.
If you visit from the European Union, the European Economic Area, the United Kingdom, or Switzerland, no analytics or marketing tags load and no _ga cookies are set until you choose Accept All or allow those categories in the cookie banner.
Visitors from other regions get analytics and marketing tags by default, and can switch them off at any time with Reject All in the cookie preferences.
If your browser sends a Global Privacy Control signal, no analytics or marketing tags load and no cookie banner is shown, wherever you are.
Your choice is stored in a first-party cookie named analytics_consent for one year. It records only whether analytics and marketing are allowed, and it is strictly necessary because it is how we remember your choice. Google Consent Mode v2 passes the same choice to every Google tag.
Withdrawing analytics consent deletes the _ga cookies from your browser. When you are signed in, we also keep a record of each choice you make so that we can demonstrate consent.
Signed-in account, seller, and admin areas never load analytics or marketing tags.

Managing Your Preferences

Use the Cookie Preferences link in the site footer, or the button in this section, to review or change your analytics and marketing choices at any time
You can control cookies through your browser settings, including blocking or deleting cookies
Disabling certain cookies may affect platform functionality, particularly authentication and shopping cart features
You can use supercatch.com/privacy-choices to submit advertising opt-out, marketing unsubscribe, sensitive-information limitation, and other privacy rights requests
If your browser sends Global Privacy Control or another recognized universal opt-out signal, we treat it as a request to opt out of sale, sharing, and targeted advertising for that browser where required by applicable law
Legacy Do Not Track browser settings are not treated as a legal opt-out because no common technical standard has been adopted for them; use Global Privacy Control or the Privacy Choices page for a tracked opt-out request
Third-party analytics providers may set their own cookies, subject to their own privacy policies and your opt-out choices

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. Specific retention periods are as follows:

Active account data: when you deactivate your account, your name, email address, bio, and profile image are anonymized immediately; your listings are marked removed at the same time and permanently deleted 30 days later unless one is tied to an order that is still open, in which case it is kept until that order is resolved
Transaction and financial records: retained for a minimum of 7 years to comply with tax, accounting, and financial reporting obligations
Listing data: retained while actively listed; once removed, a listing is permanently deleted 30 days later unless it is tied to an order still being fulfilled, in which case it is kept until the order is resolved
Communication records: retained for as long as your account is active and as needed to resolve support inquiries and disputes, then deleted or de-identified
Analytics and usage data: usage and performance telemetry collected directly by our platform is retained for 30 days and then deleted; the third-party analytics tools described in Section 5 retain data under their own separate retention policies
Seller application records: retained for as long as your seller account remains open, and afterward as needed for legal, tax, and dispute-resolution purposes, then deleted or de-identified
Server logs: security and audit logs, including IP addresses and access times, are retained for 30 days for security monitoring and incident response
Upon receiving a valid deletion request, we will verify and respond within the applicable legal deadline. Where deletion is required, we delete or anonymize personal data as soon as reasonably practicable after approval, except where retention is required by law or necessary for legitimate business purposes such as fraud prevention.

7. Your Privacy Rights

Depending on your location, you may have specific rights regarding your personal information. We accept privacy requests from all U.S. residents and process rights requests according to applicable state law, verification requirements, and legal exceptions.

Rights Available to All Users

Access: request a copy of the personal information we hold about you
Correction: request that we correct inaccurate or incomplete personal information
Deletion: request that we delete your personal information, subject to legal retention requirements
Data portability: request a machine-readable copy of your data for transfer to another service
Opt-out of marketing: unsubscribe from marketing emails using the link in any marketing message or through your account settings
Advertising opt-out: request that we stop sale, sharing, or targeted-advertising disclosures where those state-law rights apply
Account closure: close your account at any time through account settings or by contacting support

California Residents (CCPA/CPRA)

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information held by us and by our service providers
Right to opt out of the sale or sharing of personal information, including sharing for cross-context behavioral advertising where applicable
Right to non-discrimination for exercising your privacy rights
Right to correct inaccurate personal information
Right to limit use and disclosure of sensitive personal information
We do not sell personal information for money. If an advertising, analytics, or measurement disclosure is treated as a sale or sharing under California law, you may opt out through supercatch.com/privacy-choices or a supported Global Privacy Control signal.
You may designate an authorized agent to submit requests on your behalf with proper verification
To exercise these rights, use the Privacy Choices page at supercatch.com/privacy-choices, the contact form at supercatch.com/contact with Privacy Request selected, or email privacy@supercatch.com
Website-submitted privacy requests are recorded in an internal queue with a request type, SLA deadline, vendor action status where applicable, and resolution status

EU/EEA/UK Residents (GDPR)

Legal bases for processing: contract performance (providing marketplace services), legitimate interests (fraud prevention, platform improvement), consent (marketing), and legal obligations (tax, compliance)
Right to erasure (right to be forgotten) under Article 17
Right to restriction of processing under Article 18
Right to object to processing based on legitimate interests under Article 21
Right to data portability under Article 20
Rights related to automated decision-making and profiling under Article 22
Right to lodge a complaint with your local data protection supervisory authority
To exercise these rights, submit a request at supercatch.com/privacy-choices or supercatch.com/contact with Privacy Request selected, or email privacy@supercatch.com

U.S. State Privacy Rights

Residents of states with comprehensive consumer privacy laws may have rights to confirm whether we process their personal information, access that information, correct inaccuracies, delete information, obtain a portable copy, and opt out of sale, sharing, targeted advertising, or certain profiling where applicable
Some states also provide rights related to sensitive personal information, consent withdrawal, authorized agents, or appeal of a denied privacy request
We accept privacy requests from residents of all 50 states through supercatch.com/privacy-choices, the contact form with Privacy Request selected, or privacy@supercatch.com, and we process each request under the law that applies to the requester and our business
If we deny a rights request and your state law provides an appeal right, you may appeal by replying to our decision email or submitting a new Privacy Request with Appeal in the subject or details
We will not discriminate against you for exercising privacy rights, though some services may require data that is necessary to provide the requested marketplace, payment, shipping, fraud-prevention, or account function

8. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Encryption in transit using TLS 1.2 or higher for all data transmitted between your device and our servers
Encryption at rest for sensitive data stored in our databases
PCI DSS compliant payment processing through PayPal — credit card numbers are never stored on our servers
Optional two-factor authentication (authenticator app or email code) for every account
Role-based access controls and the principle of least privilege for employee access to user data
Incident response procedures with defined notification timelines: 72 hours for GDPR-regulated incidents, and as required by applicable state breach notification laws
Continuous monitoring for unauthorized access and suspicious activity
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

SuperCatch is based in the United States, and your personal information is primarily processed and stored in the United States. If you access our platform from outside the United States, your information will be transferred to, stored, and processed in the United States.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on standard contractual clauses approved by the European Commission and other applicable legal mechanisms to ensure that your data receives an adequate level of protection when transferred internationally.

By using our platform, you consent to the transfer of your information to the United States and other countries where our service providers operate, subject to the safeguards described in this policy.

10. Children's Privacy

SuperCatch is intended for adults: you must be at least 18 years old to create an account, as stated in our Terms and Conditions. SuperCatch is not directed at children under the age of 13 (or 16 in the European Union), and we do not knowingly collect personal information from children under these age thresholds.

If we become aware that we have collected personal information from a child under the applicable age threshold, we will take steps to delete that information promptly. If you believe a child under 13 (or 16 in the EU) has provided us with personal information, please contact us immediately at supercatch.com/contact.

Parents or guardians who become aware that their child has provided personal information to SuperCatch without their consent may contact us to request deletion of that information.

11. Third-Party Marketplace Data Handling

When you connect your SuperCatch account to third-party marketplace platforms, data flows bidirectionally between SuperCatch and the connected platform. This section explains how that data is handled.

Data We Receive from Marketplace Partners

Product and listing data, including titles, descriptions, images, categories, and pricing from your connected marketplace accounts
Order data, including order identifiers, buyer shipping addresses, item details, and transaction amounts
Account identifiers and store information necessary to maintain the integration connection

Data We Share with Marketplace Partners

Listing data, including product titles, descriptions, images, condition information, and pricing that you choose to sync or publish to connected platforms
Inventory and stock levels to keep availability consistent across platforms
Order fulfillment data, including shipping carrier, tracking numbers, and delivery status

Authorization and Revocation

All marketplace connections use OAuth or similar secure authorization protocols. We never store your marketplace account passwords.
You can review connected marketplace accounts in your SuperCatch account settings at any time
You may disconnect any marketplace integration at any time, which stops future data synchronization. Data previously synced may be retained per our data retention policy.
Disconnecting a marketplace does not delete data already transferred to the partner platform. Contact the partner directly to manage data on their platform.

12. Third-Party Links and Services

Our platform may contain links to third-party websites, services, and applications that are not operated by SuperCatch. This privacy policy does not apply to those third-party services.

We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party service before providing your personal information.

Third-party integrations available through our platform, including payment processing (PayPal), sign-in providers (Google and Facebook), shipping services, and marketplace connections, are governed by their respective privacy policies in addition to this policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

For material changes, we will provide at least 30 days' advance notice via email to the address associated with your account and/or through a prominent notice on our platform before the changes take effect.

Your continued use of SuperCatch after the effective date of the updated Privacy Policy constitutes your acceptance of the changes, subject to our Terms and Conditions (supercatch.com/terms-conditions). If you do not agree with the updated policy, you may close your account.

We maintain a version history of this Privacy Policy, which is available upon request through our contact form at supercatch.com/contact.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the methods below.

Privacy Choices page: supercatch.com/privacy-choices — submit rights requests, advertising opt-outs, marketing unsubscribe requests, and Global Privacy Control notices
Contact form: supercatch.com/contact — select Privacy Request for privacy inquiries
Email: privacy@supercatch.com
Phone: (888) 366-0930
Opt-out, marketing unsubscribe, and sensitive-information limitation requests are tracked to a 15-business-day SLA. Access, deletion, correction, and other privacy requests are tracked to a 45-calendar-day SLA unless another law requires a shorter period.
If your request is denied and an appeal right applies, reply to the response email or submit a new Privacy Request with Appeal in the subject or details.
Website-submitted requests are tracked with deadline, vendor action, response-note, and resolution status so the team can prove operational handling.
For our full marketplace rules and user agreements, see our Terms and Conditions at supercatch.com/terms-conditions
If you are not satisfied with our response, you may lodge a complaint with your local data protection authority (for EU/EEA/UK residents) or contact the relevant state Attorney General's office (for US residents).

Privacy FAQ

Answers to common questions about your data and privacy on SuperCatch.

Questions About Your Privacy?

Contact our team for privacy inquiries, data requests, or questions about this policy. Website-submitted privacy requests are tracked with an SLA deadline and resolution status.

Submit A Privacy Request Use Contact Form

For urgent security concerns, visit our Trust and Safety page or contact us.

Privacy Policy

How SuperCatch collects, uses, protects, and shares your information, and how to exercise privacy rights through our tracked request workflow.

Last updated: October 4, 2026

Effective: October 4, 2026

Key Commitments

How we approach your privacy across every part of the platform.

Your Data, Your Control

Access, correct, delete, or export your data at any time through your account settings or by contacting us.

Transparent Sharing

We disclose the categories of recipients we use and provide opt-out choices for sale, sharing, and targeted advertising where state privacy laws apply.

Industry-Standard Security

Payments handled by a PCI DSS compliant processor, encrypted data transmission, and optional two-factor authentication protect your account.

AI with Disclosure

Our AI card recognition processes images for identification purposes. We disclose all automated processing clearly.

Jump to any section of this policy.

1. Information We Collect

Information You Provide Directly

Account registration details, including your name, email address, phone number, and mailing address
Payment and billing information, including credit or debit card numbers, which are processed by our PCI DSS compliant payment processor (PayPal) and are not stored on our servers
Seller application details, such as store name, contact information, and the business information you provide during seller onboarding
Listing data, including card descriptions, photographs, condition assessments, and pricing information
Communications with our support team, other users, and dispute-related correspondence
Payout information, such as the PayPal account email address that receives your seller payouts
Profile information, including display name, avatar, and seller bio
Your phone number and text-message preference, if you choose to receive text notifications
Collection, wishlist, price-alert, and saved-search selections

Information Collected Automatically

Device and browser information, including device type, operating system, browser type and version, screen resolution, and unique device identifiers
Usage data, including pages viewed, features used, search queries, session duration, click patterns, and referral sources
Approximate location data derived from your IP address
Transaction history, including purchases, sales, and payment records
Log data, including IP addresses, access times, and error logs
Session recordings of how you interact with pages, such as clicks, scrolls, and mouse movements, collected by analytics tools when analytics cookies are allowed (see Section 5)
Cookies, local storage, and similar tracking technologies (see Section 5 for details)

Information from Third Parties

Sign-in provider data when you sign in with Google or Facebook, such as your name, email address, and profile image
Marketplace partner data when you connect accounts, including product data, order details, and buyer or seller identifiers from eBay, Amazon, Walmart, TikTok Shop, Etsy, Shopify, WooCommerce, Meta (Facebook and Instagram), and other integrated platforms
Payment processor data from PayPal, including transaction status, fraud risk assessments, and billing address verification
Shipping provider data from USPS and other carriers, and from shipping services such as Shippo, ShipStation, and Veeqo, including delivery status and address validation results
Publicly available data used for fraud prevention and platform integrity

2. How We Use Your Information

We use the information we collect for the following purposes:

Providing, maintaining, and improving the SuperCatch marketplace platform and all associated services
Processing transactions, payments, refunds, and payouts between buyers and sellers
AI-powered card recognition, catalog matching, condition assessment, and pricing suggestions to enhance listing accuracy
Listing management, inventory synchronization, and multi-platform distribution to connected marketplace partners
Fraud detection, prevention, and investigation, including monitoring for counterfeit items, suspicious activity, and policy violations
Customer support, dispute resolution, and enforcing our Terms and Conditions
Personalizing your experience, including recommendations, search results, and content
Sending transactional communications such as order confirmations, shipping updates, and account alerts
Marketing communications, including newsletters and promotional offers, which you can opt out of at any time
Analytics, research, and service improvement, including aggregate usage analysis and A/B testing
Complying with legal obligations, responding to legal processes, and protecting our rights and the safety of our users

3. AI and Machine Learning Disclosure

SuperCatch uses artificial intelligence and machine learning technologies to enhance our marketplace services. We are committed to transparency about how these technologies process your data.

How We Use AI

Card recognition via computer vision: when you upload images, our AI analyzes them to identify the card, set, year, and other attributes to assist with listing creation
Automated catalog matching: AI matches your uploaded cards against our catalog database to suggest accurate product details and market pricing
Duplicate detection: image hashing and metadata analysis identify potential duplicate listings to maintain catalog quality
Fraud detection: algorithms analyze listing patterns, pricing anomalies, and user behavior to flag potentially fraudulent activity for human review
Listing copy and pricing suggestions: AI drafts titles, descriptions, and price suggestions that sellers review before publishing
Support assistant: an AI assistant answers help questions using our published help content
Condition assessment assistance: AI provides preliminary condition suggestions based on image analysis, which sellers can review and adjust

Your Rights Regarding AI Processing

No automated decision-making produces legal effects or similarly significant outcomes without human review and oversight
All AI-generated suggestions (card identification, pricing, condition) are presented as recommendations that you can accept, modify, or reject
You may request human review of any AI-assisted determination by contacting our support team
You may ask us to limit AI-powered personalization of your recommendations by contacting our support team
AI features may be provided by third-party AI service providers that process data on our behalf to deliver the feature, and by models we operate ourselves
Images you upload are used to create and display your listings, to identify and catalog cards, and to measure and improve the accuracy of our recognition features; we do not sell your images

5. Cookies and Tracking Technologies

We use cookies and similar technologies to provide, secure, and improve our services.

Types of Cookies We Use

Strictly necessary cookies: required for platform functionality, authentication, security, and fraud prevention. These cannot be disabled.
Functional cookies: remember your preferences, language settings, and display options to enhance your experience
Analytics cookies: help us understand how users interact with our platform, which features are most used, and where improvements are needed. Our analytics tools include Google Analytics and Microsoft Clarity. Microsoft Clarity records session replays of page interactions, such as clicks, scrolls, mouse movements, and the pages you visit, which Microsoft processes on our behalf under its privacy statement.
Marketing cookies: used to deliver relevant advertisements and measure the effectiveness of our marketing campaigns, and may be set by advertising partners such as Google, Microsoft Advertising, and Meta. These are only set with your consent where required by law.

Google Analytics and Your Consent

We use Google Analytics 4, loaded through Google Tag Manager, to measure page views and shopping activity such as product views, cart changes, and purchases. Google Analytics sets first-party cookies named _ga and _ga_<property-id> that hold a random client identifier and session state, and expire after up to two years.
If you visit from the European Union, the European Economic Area, the United Kingdom, or Switzerland, no analytics or marketing tags load and no _ga cookies are set until you choose Accept All or allow those categories in the cookie banner.
Visitors from other regions get analytics and marketing tags by default, and can switch them off at any time with Reject All in the cookie preferences.
If your browser sends a Global Privacy Control signal, no analytics or marketing tags load and no cookie banner is shown, wherever you are.
Your choice is stored in a first-party cookie named analytics_consent for one year. It records only whether analytics and marketing are allowed, and it is strictly necessary because it is how we remember your choice. Google Consent Mode v2 passes the same choice to every Google tag.
Withdrawing analytics consent deletes the _ga cookies from your browser. When you are signed in, we also keep a record of each choice you make so that we can demonstrate consent.
Signed-in account, seller, and admin areas never load analytics or marketing tags.

Managing Your Preferences

Use the Cookie Preferences link in the site footer, or the button in this section, to review or change your analytics and marketing choices at any time
You can control cookies through your browser settings, including blocking or deleting cookies
Disabling certain cookies may affect platform functionality, particularly authentication and shopping cart features
You can use supercatch.com/privacy-choices to submit advertising opt-out, marketing unsubscribe, sensitive-information limitation, and other privacy rights requests
If your browser sends Global Privacy Control or another recognized universal opt-out signal, we treat it as a request to opt out of sale, sharing, and targeted advertising for that browser where required by applicable law
Legacy Do Not Track browser settings are not treated as a legal opt-out because no common technical standard has been adopted for them; use Global Privacy Control or the Privacy Choices page for a tracked opt-out request
Third-party analytics providers may set their own cookies, subject to their own privacy policies and your opt-out choices

6. Data Retention

Active account data: when you deactivate your account, your name, email address, bio, and profile image are anonymized immediately; your listings are marked removed at the same time and permanently deleted 30 days later unless one is tied to an order that is still open, in which case it is kept until that order is resolved
Transaction and financial records: retained for a minimum of 7 years to comply with tax, accounting, and financial reporting obligations
Listing data: retained while actively listed; once removed, a listing is permanently deleted 30 days later unless it is tied to an order still being fulfilled, in which case it is kept until the order is resolved
Communication records: retained for as long as your account is active and as needed to resolve support inquiries and disputes, then deleted or de-identified
Analytics and usage data: usage and performance telemetry collected directly by our platform is retained for 30 days and then deleted; the third-party analytics tools described in Section 5 retain data under their own separate retention policies
Seller application records: retained for as long as your seller account remains open, and afterward as needed for legal, tax, and dispute-resolution purposes, then deleted or de-identified
Server logs: security and audit logs, including IP addresses and access times, are retained for 30 days for security monitoring and incident response
Upon receiving a valid deletion request, we will verify and respond within the applicable legal deadline. Where deletion is required, we delete or anonymize personal data as soon as reasonably practicable after approval, except where retention is required by law or necessary for legitimate business purposes such as fraud prevention.

7. Your Privacy Rights

Rights Available to All Users

Access: request a copy of the personal information we hold about you
Correction: request that we correct inaccurate or incomplete personal information
Deletion: request that we delete your personal information, subject to legal retention requirements
Data portability: request a machine-readable copy of your data for transfer to another service
Opt-out of marketing: unsubscribe from marketing emails using the link in any marketing message or through your account settings
Advertising opt-out: request that we stop sale, sharing, or targeted-advertising disclosures where those state-law rights apply
Account closure: close your account at any time through account settings or by contacting support

California Residents (CCPA/CPRA)

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information held by us and by our service providers
Right to opt out of the sale or sharing of personal information, including sharing for cross-context behavioral advertising where applicable
Right to non-discrimination for exercising your privacy rights
Right to correct inaccurate personal information
Right to limit use and disclosure of sensitive personal information
We do not sell personal information for money. If an advertising, analytics, or measurement disclosure is treated as a sale or sharing under California law, you may opt out through supercatch.com/privacy-choices or a supported Global Privacy Control signal.
You may designate an authorized agent to submit requests on your behalf with proper verification
To exercise these rights, use the Privacy Choices page at supercatch.com/privacy-choices, the contact form at supercatch.com/contact with Privacy Request selected, or email privacy@supercatch.com
Website-submitted privacy requests are recorded in an internal queue with a request type, SLA deadline, vendor action status where applicable, and resolution status

EU/EEA/UK Residents (GDPR)

Legal bases for processing: contract performance (providing marketplace services), legitimate interests (fraud prevention, platform improvement), consent (marketing), and legal obligations (tax, compliance)
Right to erasure (right to be forgotten) under Article 17
Right to restriction of processing under Article 18
Right to object to processing based on legitimate interests under Article 21
Right to data portability under Article 20
Rights related to automated decision-making and profiling under Article 22
Right to lodge a complaint with your local data protection supervisory authority
To exercise these rights, submit a request at supercatch.com/privacy-choices or supercatch.com/contact with Privacy Request selected, or email privacy@supercatch.com

U.S. State Privacy Rights

Residents of states with comprehensive consumer privacy laws may have rights to confirm whether we process their personal information, access that information, correct inaccuracies, delete information, obtain a portable copy, and opt out of sale, sharing, targeted advertising, or certain profiling where applicable
Some states also provide rights related to sensitive personal information, consent withdrawal, authorized agents, or appeal of a denied privacy request
We accept privacy requests from residents of all 50 states through supercatch.com/privacy-choices, the contact form with Privacy Request selected, or privacy@supercatch.com, and we process each request under the law that applies to the requester and our business
If we deny a rights request and your state law provides an appeal right, you may appeal by replying to our decision email or submitting a new Privacy Request with Appeal in the subject or details
We will not discriminate against you for exercising privacy rights, though some services may require data that is necessary to provide the requested marketplace, payment, shipping, fraud-prevention, or account function

8. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Encryption in transit using TLS 1.2 or higher for all data transmitted between your device and our servers
Encryption at rest for sensitive data stored in our databases
PCI DSS compliant payment processing through PayPal — credit card numbers are never stored on our servers
Optional two-factor authentication (authenticator app or email code) for every account
Role-based access controls and the principle of least privilege for employee access to user data
Incident response procedures with defined notification timelines: 72 hours for GDPR-regulated incidents, and as required by applicable state breach notification laws
Continuous monitoring for unauthorized access and suspicious activity
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

10. Children's Privacy

Parents or guardians who become aware that their child has provided personal information to SuperCatch without their consent may contact us to request deletion of that information.

11. Third-Party Marketplace Data Handling

Data We Receive from Marketplace Partners

Product and listing data, including titles, descriptions, images, categories, and pricing from your connected marketplace accounts
Order data, including order identifiers, buyer shipping addresses, item details, and transaction amounts
Account identifiers and store information necessary to maintain the integration connection

Data We Share with Marketplace Partners

Listing data, including product titles, descriptions, images, condition information, and pricing that you choose to sync or publish to connected platforms
Inventory and stock levels to keep availability consistent across platforms
Order fulfillment data, including shipping carrier, tracking numbers, and delivery status

Authorization and Revocation

All marketplace connections use OAuth or similar secure authorization protocols. We never store your marketplace account passwords.
You can review connected marketplace accounts in your SuperCatch account settings at any time
You may disconnect any marketplace integration at any time, which stops future data synchronization. Data previously synced may be retained per our data retention policy.
Disconnecting a marketplace does not delete data already transferred to the partner platform. Contact the partner directly to manage data on their platform.

12. Third-Party Links and Services

Our platform may contain links to third-party websites, services, and applications that are not operated by SuperCatch. This privacy policy does not apply to those third-party services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We maintain a version history of this Privacy Policy, which is available upon request through our contact form at supercatch.com/contact.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the methods below.

Privacy Choices page: supercatch.com/privacy-choices — submit rights requests, advertising opt-outs, marketing unsubscribe requests, and Global Privacy Control notices
Contact form: supercatch.com/contact — select Privacy Request for privacy inquiries
Email: privacy@supercatch.com
Phone: (888) 366-0930
Opt-out, marketing unsubscribe, and sensitive-information limitation requests are tracked to a 15-business-day SLA. Access, deletion, correction, and other privacy requests are tracked to a 45-calendar-day SLA unless another law requires a shorter period.
If your request is denied and an appeal right applies, reply to the response email or submit a new Privacy Request with Appeal in the subject or details.
Website-submitted requests are tracked with deadline, vendor action, response-note, and resolution status so the team can prove operational handling.
For our full marketplace rules and user agreements, see our Terms and Conditions at supercatch.com/terms-conditions
If you are not satisfied with our response, you may lodge a complaint with your local data protection authority (for EU/EEA/UK residents) or contact the relevant state Attorney General's office (for US residents).

Privacy FAQ

Answers to common questions about your data and privacy on SuperCatch.

Questions About Your Privacy?

Contact our team for privacy inquiries, data requests, or questions about this policy. Website-submitted privacy requests are tracked with an SLA deadline and resolution status.

Submit A Privacy Request Use Contact Form

For urgent security concerns, visit our Trust and Safety page or contact us.

Privacy Policy

Key Commitments

Your Data, Your Control

Transparent Sharing

Industry-Standard Security

AI with Disclosure

Contents

1. Information We Collect

Information You Provide Directly

Information Collected Automatically

Information from Third Parties

2. How We Use Your Information

3. AI and Machine Learning Disclosure

How We Use AI

Your Rights Regarding AI Processing

4. Information Sharing and Disclosure

Marketplace Partners

Payment Processors

Shipping Providers

Service Providers

Advertising, Analytics, and Measurement Partners

Legal and Safety Disclosures

5. Cookies and Tracking Technologies

Types of Cookies We Use

Google Analytics and Your Consent

Managing Your Preferences

6. Data Retention

7. Your Privacy Rights

Rights Available to All Users

California Residents (CCPA/CPRA)

EU/EEA/UK Residents (GDPR)

U.S. State Privacy Rights

8. Data Security

9. International Data Transfers

10. Children's Privacy

11. Third-Party Marketplace Data Handling

Data We Receive from Marketplace Partners

Data We Share with Marketplace Partners

Authorization and Revocation

12. Third-Party Links and Services

13. Changes to This Privacy Policy

14. Contact Us

Privacy FAQ

What personal data does SuperCatch collect?

How is my data shared with marketplace partners like TikTok Shop and eBay?

How does SuperCatch use AI with my data?

How can I delete my account and data?

Does SuperCatch sell my personal information?

How does SuperCatch protect my payment information?

What privacy rights do I have under U.S. state privacy laws and GDPR?

Questions About Your Privacy?

Privacy Policy

Key Commitments

Your Data, Your Control

Transparent Sharing

Industry-Standard Security

AI with Disclosure

Contents

1. Information We Collect

Information You Provide Directly

Information Collected Automatically

Information from Third Parties

2. How We Use Your Information

3. AI and Machine Learning Disclosure

How We Use AI

Your Rights Regarding AI Processing

4. Information Sharing and Disclosure

Marketplace Partners

Payment Processors

Shipping Providers

Service Providers

Advertising, Analytics, and Measurement Partners

Legal and Safety Disclosures

5. Cookies and Tracking Technologies

Types of Cookies We Use

Google Analytics and Your Consent

Managing Your Preferences

6. Data Retention

7. Your Privacy Rights

Rights Available to All Users