Privacy Policy
Last updated: October 2, 2026
Ulagg is an operations and profit workspace for Etsy sellers. This policy explains what data we collect, why, and your rights. It applies to users in Türkiye (KVKK), the European Union (GDPR) and elsewhere.
1. Who we are
The data controller is CATCHOPS YAZILIM SAN. VE TİC. LTD. ŞTİ. (Ünsal Mah. 5 Temmuz Kurtuluş Cad. Rima Apt. Sitesi No:226/B Kepez/ANTALYA). Contact: support@ulagg.com. Users in Türkiye can read the KVKK notice (in Turkish).
2. Data we collect
- Account: email, name, profile photo from Google if you sign in with Google. Passwords are handled by our authentication provider and are never visible to us.
- Etsy data, once you authorize it: shop details, listings, images, orders, reviews and performance statistics. Orders include buyer name and shipping address.
- What you enter: product costs, drafts, notes, uploaded images, and messages (with any files you attach) sent through the contact form.
- Technical data: IP address, browser, session and error logs.
We never collect your Etsy password. The connection is made through Etsy's authorization screen (OAuth).
3. How we use it
- To provide the service: show listings, orders and profit, and write changes to Etsy only after you approve them.
- Security, debugging and abuse prevention.
- Service messages and support.
We do not use Etsy data to train AI models, sell it, build advertising profiles, or show it to anyone other than you and the members of your workspace.
4. AI features
When you use an AI feature, the relevant content (for example a listing title, description or image) is sent to the AI provider to produce a result. Details are in AI & Data Use. AI output is never written to Etsy without your approval.
5. Sharing
We share data only with the infrastructure providers needed to run the service, and with authorities where required by law:
| Provider | Purpose | Location |
|---|---|---|
| Etsy, Inc. | Reading shop data and writing changes you approve | USA |
| Supabase | Authentication, database, file storage | EU |
| Render | Application servers and background jobs | EU / USA |
| Vercel | Hosting of the web interface | Global CDN |
| Anthropic, OpenAI, Google | AI text and image generation, only when you use an AI feature | USA |
| Payment provider (when paid plans launch) | Subscriptions and invoices | EU / USA |
6. International transfers
Some providers are outside the EU/EEA and Türkiye (for example in the USA). Transfers rely on legal safeguards such as standard contractual clauses or adequacy decisions.
7. Retention and deletion
We keep data for as long as needed to provide the service. When you disconnect Etsy, data received from Etsy is deleted. Contact form messages and their attachments are deleted automatically after 12 months. We keep your sign-up consent record (policy version, time, IP address) while your account is open, as legal proof. You can delete your account under Settings, Account and data; your personal data is then deleted or anonymized, except records we must keep by law.
8. Your rights
You can request access, correction, deletion, restriction, portability, and object to processing. If you live in the EU you can also complain to your local data protection authority. Requests: privacy@ulagg.com.
9. Security
Etsy access tokens are stored encrypted, connections use HTTPS, and each customer's data is logically separated. No system is risk-free; in case of a data breach we will notify affected people, and Etsy where applicable, within the legally required time.
10. Children
The service is not intended for anyone under 18.
11. Changes
We may update this policy. We will tell you about material changes by email or in the app and ask for consent again where needed.