Privacy Policy

Effective Date: September 24, 2026

This Privacy Policy explains how WebCatalog ("we", "us", or "our"), operated via webcatalog.in, collects, uses, discloses, and safeguards information when you use our platform, website, Android application, and related services (the "Service"). It covers business account holders (sellers) and visitors or inquirers who interact with merchant catalogs powered by WebCatalog.

1. Who We Are, Roles, and Scope

WebCatalog provides digital product catalog storefronts and inquiry / lead tools for businesses in India and elsewhere. Catalogs may be hosted on a webcatalog.in subdomain or, on eligible paid plans, on a custom domain you connect. This Policy applies to data processed through webcatalog.in, connected custom domains that use our Service, and our Android app.

  • Account / merchant data: For personal data relating to Account registration, billing metadata, and Service administration, WebCatalog determines the purposes and means of processing as needed to provide and secure the Service.
  • Buyer Inquiry data on a merchant catalog: When a visitor submits an inquiry, the merchant is primarily responsible for how they use those leads in their business. WebCatalog processes that inquiry data to provide the Service — in particular, to deliver it to the merchant's dashboard and related inquiry features. We do not sell leads to third-party marketers or marketing agencies.

Related documents: Terms of Service (merchants) and Terms of Use (catalog visitors).

2. Lawful and Legitimate Purposes

We process personal data for lawful and legitimate purposes under applicable Indian law, including the Information Technology Act, 2000 and rules thereunder, and the Digital Personal Data Protection Act, 2023 (and rules, as and when applicable), as well as other applicable privacy and data-protection laws. Processing is undertaken to provide the Service, perform contracts with Account holders, pursue legitimate interests consistent with those purposes (such as security, fraud prevention, and Service improvement), comply with legal obligations, and, where required, on the basis of consent.

3. Categories of Personal Data We Collect

Depending on how you use the Service, we may collect the following categories of personal data:

  • Account and identity data: Name, email address, phone number, business name and details, and login-related information when you create or manage an Account.
  • Catalog Content: Product images, descriptions, pricing, categories, pages, testimonials, videos, and other materials you upload or configure (which may include personal data if you choose to include it).
  • Inquiry / lead data: Name, contact information, message content, and related metadata submitted by a visitor through inquiry, chat, or WhatsApp inquiry features, delivered to the relevant seller.
  • Technical, device, and usage data: IP address, browser type, device information (including device IDs / FCM tokens for push notifications where enabled), log data, approximate location derived from IP where applicable, and usage patterns via cookies and similar technologies.
  • Camera and gallery data (Android app): Our Android app may access the camera or gallery only when you explicitly take an action to capture or upload product photos. Images you choose to upload are stored to display in your catalog.
  • Billing and subscription data (paid plans): If you subscribe to a paid plan (such as Growth at ₹5,999/year or Business at ₹11,999/year; Forever Free remains ₹0), we may process plan selection, subscription status, billing contact details, invoices, payment confirmation or transaction references, and related metadata needed to provide paid features. See Section 6 regarding payment processors.
  • Communications: Support requests, Feedback, and correspondence you send to us.

4. How We Use Information

We use collected information to:

  • Provide, operate, host, and maintain catalogs and the Service (including subdomain and custom-domain hosting where entitled by plan).
  • Facilitate inquiries, inbox/chat, WhatsApp inquiry flows, and notifications between sellers and potential buyers.
  • Provide customer support, service messages, and technical alerts.
  • Secure the Service, prevent fraud and abuse, and enforce our terms.
  • Analyze usage (including via analytics tools) to improve features and reliability.
  • Process subscriptions, entitlements, renewals, and billing for paid plans.
  • Comply with legal obligations and respond to lawful requests.

5. Ownership, Roles, and Lead Privacy

  • Your Catalog Content: You remain the owner of product data and materials you upload. We process them to host and display your catalog.
  • Buyer leads: Lead data generated through your catalog is provided for your business use. WebCatalog processes leads to deliver them to your dashboard and related tools. We do not sell, rent, or share your customer leads with third-party marketers or marketing agencies.
  • Visitors: If you inquire on a merchant catalog, your inquiry details are shared with that merchant so they can respond. After delivery, the merchant's own privacy practices may also apply to how they handle your information. Merchants may use Forever Free or paid WebCatalog features; that does not change our role as the technology provider delivering the inquiry.

6. Sharing of Information and Payment Processors

We do not sell personal information or leads to third-party marketers. We may share information in these cases:

  • Service providers / processors: Trusted vendors who help us host, store, send messages, analyze usage, or support the Service, under appropriate confidentiality and security expectations.
  • Payment processors: For paid Plans, card and payment-instrument data are typically handled by independent payment processors (as controllers and/or processors under their own terms and policies). WebCatalog may receive limited billing metadata (such as confirmation status, last four digits where provided, transaction references, and invoice details). We do not store full card Primary Account Numbers (PAN) when the processor handles card capture and storage.
  • Merchants: Inquiry data is shared with the catalog owner you contacted.
  • Legal requirements: When required by law, regulation, legal process, or to protect rights, safety, and security.
  • Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, subject to continued privacy protections where reasonably practicable.

7. Subdomains, Custom Domains, and Third-Party Links

Catalogs on webcatalog.in subdomains are operated through our Service. Custom domains connected on eligible paid plans (Growth and Business; see /pricing) still use our platform for catalog and inquiry features, but DNS and domain registration remain the merchant's responsibility. Catalogs may link to social media or other third-party sites; their privacy practices are governed by those sites.

8. Cookies, Similar Technologies, and Analytics

We use cookies and similar technologies to support login sessions, remember preferences, maintain security, and understand usage. We may also use analytics tools to measure performance and improve the Service. You may disable cookies in your browser, but some features may not work correctly. Where required by law, we will provide additional notice or choice mechanisms for non-essential cookies.

9. Data Security

We implement technical and organizational measures appropriate to the nature of the Service (such as SSL/TLS where applicable, access controls, and secure storage practices) to protect data against unauthorized access, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot and do not guarantee absolute security.

10. Retention

We retain personal data while an Account is active and for a reasonable period after closure as needed for legal, accounting, security, dispute-resolution, backup, and enforcement purposes. Inquiry logs and related records are retained as needed to provide the Service to the merchant and for security and abuse-prevention. Account holders may access or update certain profile information in the dashboard, export product or inquiry data where the feature is available, and request account deletion. Deletion requests may be limited by legal retention needs or residual backup copies for a limited period.

11. Cross-Border Processing

We primarily operate in India. Personal data may be processed or stored using vendors and infrastructure located in India and/or outside India. Where we transfer or permit processing outside India, we will do so with appropriate safeguards as required under applicable law (including the Digital Personal Data Protection Act, 2023, as applicable).

12. Your Rights and Grievance Redressal

Subject to applicable law and verification of your identity / Account, you may have rights to: (a) access personal data we hold about you; (b) request correction of inaccurate data; (c) request erasure where applicable; (d) withdraw consent where processing is based on consent (without affecting prior lawful processing); and (e) seek grievance redressal. To exercise these rights or raise a privacy grievance, contact us at support[at]webcatalog[dot]in. Our location for privacy correspondence is Noida, Uttar Pradesh, India. We may need to verify your Account or identity before responding and may retain certain data where legally required.

13. Children's Privacy

The Service is directed to businesses and is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children under 18. If you believe we have collected such information, contact us at support[at]webcatalog[dot]in and we will take appropriate steps to delete it.

14. We Do Not Sell Personal Data

We do not sell personal data or Buyer leads to third-party marketers. Sharing with service providers, merchants (for inquiries you submit), payment processors, and as required by law is described in Section 6 and is not a "sale" for marketing purposes.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the Effective Date. Material changes may also be communicated through the Service or by email where appropriate.

16. Contact Us

If you have questions about this Privacy Policy, your data, or privacy requests / grievances, contact us at: