Application privacy
How Studio uses information.
Last updated: 18 October 2026. This policy covers Pawfenn Catalogue Studio, the private catalogue operator workspace. It is separate from the customer shop’s privacy policy. Questions and access, correction or removal requests can be sent to contact@pawfenn.co.uk.
Google information accessed
The Google Ads connector reads the configured advertiser’s account ID, descriptive name, currency, time zone and account type. It resolves country and language targeting and requests Keyword Planner ideas, historical search estimates, grouped close variants, competition and available bid estimates. These are used to assess product demand and prepare relevant catalogue content. Studio’s exposed Google Ads tools do not edit campaigns, bids or budgets and do not request customer lists, individual browsing activity or order information.
The Merchant connector reads the operator’s configured account, product source, upload results and processed catalogue offers. It can request a refresh of that existing source after an authorised catalogue workflow. The connector does not provide customer or payment data.
Use and sharing
Research estimates, product facts and the operator’s instructions may be sent to OpenAI for reasoning, writing and review. Selected images are sent to Google Gemini for image understanding, bounded text findings to TypeSafe Jev for classification, and product references and prompts to Higgsfield for the configured image-generation service when connected. This supports the workspace functions visible to the operator. Account credentials and private keys are never supplied to these models or made public. Studio does not sell Google data, use it for personalised advertising or share it with data brokers.
Shopify and Zendrop provide the authorised product catalogue and supplier information. The application is being developed locally; its intended hosted operator workspace uses Cloudflare. This separate public information site is hosted by Cloudflare and contains no workspace database, private credentials or connected-account API.
Storage and security
The private workspace stores its settings, run history, research results, source evidence and provider-operation records so work can resume and decisions can be reviewed. Credentials are encrypted separately, provider calls use HTTPS, and the state shown to the operator excludes private keys and session values. Local development binds to the operator’s loopback interface. Hosted workspace access requires authentication. The public information site does not set advertising or analytics cookies; its hosting provider may process ordinary request and security logs.
Retention and removal
Workspace records are retained for operational history until the operator removes the stored workspace or requests removal; there is no automatic expiry currently configured for run history. Disconnecting a provider removes Studio’s saved access, but does not by itself erase previous run records. Operators can revoke access at Google or another provider independently. Contact us to request removal of saved records and credentials; information retained by the original provider is governed by that provider’s policy.
Limited use and changes
Pawfenn Catalogue Studio’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. A material new use or sharing of Google information requires an updated disclosure and the operator’s consent before that use begins.