⚡ Plain language summary: We collect only what we need to run ShowCato. We never sell your data. We never share it with advertisers. Data is protected with TLS in transit and AES-256 encryption at rest. Data is stored in India on Hostinger servers. You can request access, correction, export, or deletion of your data by email. This policy also explains important limitations of our beta service.
1. Who we are
ShowCato ("the Platform", "we", "us", "our") is a B2B catalog sharing and enquiry management service operated by APP TEAM (Proprietorship), a software business based in Surat, Gujarat, India.
Legal entity: APP TEAM (Proprietorship)
Registered address: 204 Shubhsquare, Lal Darwaja, Surat – 395003, Gujarat, India
GSTIN: 24DIGPM2415C1ZS
Website: showcato.in
ShowCato is a software service only. We are not a marketplace, seller of goods, payment processor, or shipping provider for transactions between sellers and their buyers.
For privacy-related matters, contact our Privacy Contact at: info@appteam.com
2. Data we collect
2.1 Account data (you provide this)
- Business name, your name, email address, mobile number
- Industry, country, city, business address
- Business logo (if uploaded)
- Password (stored as a one-way cryptographic hash — we cannot see it)
2.2 Product & catalog data (you provide this)
- Product names, SKUs, descriptions, weights, prices, attributes
- Product photos you upload
- Category and collection names
2.3 Buyer data (you provide this)
- Buyer names, companies, mobile numbers, email addresses, cities
- Notes you add about buyers (private to you)
2.4 Activity data (generated automatically)
- Catalog links you create (codes, expiry times, settings)
- Enquiries received (buyer selections, quantities, timestamps)
- Link view counts
- Login timestamps and IP addresses (for security)
2.5 Technical data
- IP address, browser type, device type
- Pages visited on showcato.in
2.6 Payment data (if you purchase paid features or storage)
- Payment status, transaction IDs, and billing records processed through Razorpay or Cashfree
- We do not store full card or bank account numbers on our servers
3. How we use your data
We use your data only to provide the ShowCato service:
- To create and manage your account
- To display your product catalog to your buyers via secure links
- To deliver enquiries from your buyers to you
- To send you transactional emails (OTP codes, enquiry notifications, billing receipts)
- To provide customer support when you contact us
- To detect fraud, abuse, and maintain platform security
- To improve the platform (aggregated, anonymous analytics only)
We do not use your data for advertising. We do not build advertising profiles. We do not sell personal information. We do not use your product or buyer data for any purpose beyond operating ShowCato.
4. Data storage & security
🇮🇳 Your data is stored in India. We use Hostinger web hosting with servers located in India. Your data does not leave Indian jurisdiction under normal operations.
- Encryption in transit: All data transferred between your browser/app and our servers is encrypted using TLS (HTTPS)
- Encryption at rest: Your product data, buyer information, and enquiries are encrypted at rest using AES-256
- Passwords: Stored as bcrypt hashes. We cannot see your actual password
- Product images: Stored on Hostinger's secure servers. Image URLs expire to prevent unauthorised sharing
- Access controls: Staff access to production systems is restricted and logged
- Reasonable safeguards: We maintain administrative, technical, and organisational measures appropriate to the nature of the data we process
5. Encryption & password loss — IMPORTANT
⚠️ Critical: If you lose your password, we cannot recover your data.
ShowCato uses strong encryption to protect sensitive user data. All data in transit is protected by TLS. Sensitive data at rest is encrypted using AES-256. Some sensitive fields may additionally use password-derived encryption keys. This means:
- Your data may be encrypted with a key derived from your password
- If you forget or lose your password, we cannot decrypt or recover your data
- Password reset will allow you to log in, but encrypted data from before the reset may not be recoverable
- Even APP TEAM employees cannot see or access your encrypted business data without proper authorisation
- There is no "backdoor" or master key for user-encrypted content
Please store your password securely. We strongly recommend using a password manager.
6. Who we share data with
We do not sell, rent, or trade your personal data with any third party.
We share data only in these limited circumstances:
- Hostinger (infrastructure): Your data is physically stored on Hostinger servers in India. Hostinger acts as a data processor under our instructions
- Payment processors (Razorpay / Cashfree): When you make a paid purchase, payment data is processed by the payment gateway under their own privacy policies
- Email / WhatsApp delivery: Transactional messages are sent through service providers only to deliver enquiries and account notifications you or your buyers initiate
- Your buyers: When you share a catalog link, the products you selected are visible to the specific buyer during the link's active period. No other data is shared with buyers
- Legal requirements: If required by applicable law, court order, or to protect the rights and safety of users, we may disclose data to authorities
We do not use Facebook Pixel, Google Analytics user tracking, or any third-party advertising trackers.
7. Beta version disclaimer
⚠️ ShowCato is currently in beta. Some features may not work correctly, and service interruptions may occur.
As a beta product:
- Features may be incomplete, unstable, or temporarily unavailable
- We may change, add, or remove features without prior notice
- Data loss is unlikely but possible during this phase — we recommend keeping backups of critical product information
- The platform is provided free of charge during beta — we reserve the right to introduce paid tiers in future
- We will notify users at their registered email before any major changes to pricing or data policies
8. Your rights (India, US, EU/EEA)
8.1 Rights available to all users
Depending on your location, you may have the following rights regarding your personal data:
- Right of access: Request a copy of personal data we hold about you
- Right to rectification: Correct inaccurate data via your Settings page or by contacting us
- Right to erasure: Request deletion of your account and associated personal data
- Right to data portability: Export your buyer and enquiry data as CSV from within the platform, or request an export by email
- Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time
- Right to object or restrict processing: In certain circumstances, you may object to or request restriction of processing
8.2 United States users
If you are a resident of a U.S. state with a comprehensive privacy law (such as California, Virginia, Colorado, Connecticut, or others), you may have additional rights including access, deletion, correction, and opt-out of certain processing. We do not sell personal information and do not use personal information for cross-context behavioural advertising.
To exercise your rights, email info@appteam.com with the subject line "Privacy Request — [Your Name]". We will verify your request and respond within the timeframe required by applicable law.
8.3 EU/EEA users (GDPR)
If you are in the EU/EEA, you also have the right to lodge a complaint with your local Data Protection Authority if you believe your rights have not been respected.
8.4 Lawful basis for processing
We process your data on the following bases:
- Contract performance: Processing necessary to provide the ShowCato service you signed up for
- Legitimate interests: Security monitoring, fraud prevention, platform improvement
- Consent: Marketing emails (if you opt in — we currently do not send marketing emails)
- Legal obligation: Where required by applicable tax, accounting, or regulatory law
8.5 Data retention
- Active account data: Retained while your account is active
- After account deletion: Personal data deleted within 30 days; anonymised analytics may be retained
- Legal hold: Some data may be retained longer if required by applicable law (for example GST or tax records)
9. Data access, export & deletion requests
You can manage much of your data directly inside ShowCato (Settings, CSV export). For any request we cannot fulfil in-app, email us:
- Delete account: Email info@appteam.com with subject "Delete My Account" from your registered email address. We will confirm and complete deletion within 30 days.
- Export data: Email with subject "Export My Data". We will provide your account, buyer, and enquiry data in a readable format within 30 days.
- Correct data: Update via Settings, or email with subject "Correct My Data" if you need assistance.
- Withdraw consent: Email with subject "Withdraw Consent" for any consent-based processing.
We may ask you to verify your identity before fulfilling a request to protect your account security.
10. India — Digital Personal Data Protection Act, 2023
Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), APP TEAM acts as a Data Fiduciary for personal data of users who register on ShowCato.
- We collect personal data only for lawful purposes connected to providing ShowCato
- We provide this Privacy Policy as notice of what data we collect and why
- We obtain consent where required, including for optional marketing communications
- We implement reasonable security safeguards to protect personal data
- Data Principals may contact us to access, correct, or erase personal data, or withdraw consent
- We will respond to grievances within the timelines stated in Section 11 below
Sellers remain responsible for ensuring they have a lawful basis to upload buyer contact details into ShowCato and share catalogs with those buyers.
11. Grievance Officer
In accordance with the Consumer Protection (E-Commerce) Rules, 2020 and India's data protection framework, APP TEAM has appointed a Grievance Officer to handle user complaints about ShowCato's services and privacy practices.
- Designation: Grievance Officer, APP TEAM
- Email: info@appteam.com
- Alternate email: dhavalpanasara@gmail.com
- Address: 204 Shubhsquare, Lal Darwaja, Surat – 395003, Gujarat, India
- Acknowledgement: Complaints acknowledged within 48 hours
- Resolution: Complaints resolved within 30 days of receipt, where reasonably possible
You may also contact us through our Contact page or raise a support ticket from your ShowCato account.
12. Data breach notification
We maintain an internal incident response process for suspected unauthorised access to personal data. If we become aware of a data breach that is likely to affect your rights, we will:
- Investigate and contain the incident promptly
- Notify affected users by email where required by applicable law
- Cooperate with relevant authorities where legally required
If you suspect unauthorised access to your ShowCato account, contact us immediately at info@appteam.com.
13. Cookies
We use only essential cookies necessary for the platform to function:
- Session cookie: Keeps you logged in during your session
- CSRF token: Protects against cross-site request forgery attacks
We do not use advertising cookies, tracking cookies, or third-party analytics cookies. Because we use essential cookies only, no cookie consent banner is required at this time.
14. Children's privacy
ShowCato is a business tool intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18 for account registration.
For U.S. users: ShowCato is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact us at info@appteam.com and we will delete it promptly.
15. Changes to this policy
We may update this Privacy Policy from time to time. We will notify registered users by email at least 14 days before material changes take effect. The "last updated" date at the top of this page will always reflect the most recent version. Continued use of ShowCato after changes means you accept the updated policy.
For any privacy-related questions, data requests, or complaints:
- Email: info@appteam.com
- Email: dhavalpanasara@gmail.com
- Response time: Within 72 hours for privacy requests; resolution within 30 days where applicable
- Company: APP TEAM (Proprietorship), 204 Shubhsquare, Lal Darwaja, Surat – 395003, Gujarat, India
See also: Terms of Service · Refund & Cancellation Policy · Contact us