Privacy Policy

Data controller

Catalog.show is a digital service operated from the Argentine Republic under the "Catalog.show" brand.

The Service is operated alongside other products of the same holder, which share the contact channel indicated below.

For the purposes of Law No. 25.326 on the Protection of Personal Data, the data controller is the tax holder of the Service.

Enquiries, complaints or requests to exercise rights of access, rectification, update, erasure or objection should be sent to contact@argenpix.com.

Where necessary to verify, process or respond to a valid request, or at the requirement of a competent authority, the corresponding registration details will be provided through the applicable formal channels.

The merchant's data

When a merchant publishes their catalog, the data in their WhatsApp Business profile and catalog is processed exactly as they have it stored:

• Business name, category, description and profile or cover photo.
• WhatsApp phone number, which is indispensable: it is where the contact button leads and it is what identifies the merchant within the Service.
• Address, coordinates, opening hours, email, website and social profiles, when present.
• Products: name, description, prices, currency, availability, categories and images.

This data is published and accessible to anyone who knows the address of the page, which is precisely the purpose of the Service. The merchant decides what is in their WhatsApp Business catalog and, with that, what is published.

Images are copied to our storage. This is not a collection decision but an operational one: the photo URLs WhatsApp hands out expire within days and the page would be left without images.

Where the data comes from, and what the extension reads

The merchant's data is read by the Google Chrome extension from the WhatsApp Web session open in their own browser, at their request and on their own account. Reading happens only when the merchant starts it from the extension panel.

The extension does not access:

• Message content or conversation history.
• The merchant's chat, contact or group lists.
• Attachments, statuses or activity indicators.

Nor does it send messages or take any action on the merchant's behalf inside WhatsApp.

Data of whoever visits a published page

So that a merchant can tell whether their page works, visits are recorded. That measurement was designed not to identify anyone, which is why there is no cookie notice on top of a merchant's catalog.

No cookie is set, and nothing is stored in the visitor's browser: no localStorage, no persistent identifier, nothing equivalent.

For each visit the following is kept:

• An identifier derived from combining a random key of the day, the IP address, the browser and the business visited. The key changes every 24 hours, so the same person the next day is a different identifier and cannot be followed over time.
• Approximate country and city, resolved at that moment and without keeping the IP address.
• Whether the device is desktop or mobile, the browser language, and the site the visit came from.
• What was looked at: pages, products, searches performed, and whether the contact button was tapped.

The IP address is not stored. It is used at that moment to compute the identifier and to derive the approximate location, and then discarded. It is not recorded in the database.

Outbound links on a published page — to the map, website, social profiles or email of the merchant — pass through an address of ours before reaching their destination, so they can be counted. That step records the click, not who made it.

Data of whoever visits this site

On the Service's own pages the same information is recorded, on the same terms as on published pages, plus the page the visit came from when it came from the footer of a published page.

The only cookie the Service uses is the session cookie of the internal administration panel, accessible only by the controller. There are no cookies on published pages, nor on this site for someone who is only visiting.

Purpose

• Publishing and maintaining the merchant's page and catalog.
• Letting the merchant's customer message them on WhatsApp.
• Giving the merchant aggregate information about the use of their page.
• Operating, maintaining and improving the Service, and answering enquiries.

The data is not used for advertising, nor to build profiles, nor for cross-site tracking, and it is neither sold nor shared for commercial purposes.

Legal basis

Processing of the merchant's data rests on their consent and on the performance of their relationship with the Service: they install the extension and expressly request that their catalog be published.

Processing of measurement data rests on the legitimate interest of giving the merchant information about their own page, bounded by the design described above: no cookies, no persistent identifier, and no way to follow a person across sites or across days.

Third parties

The Service relies on infrastructure providers:

• Hosting of the site and the database.
• Image storage, which may be provided by Amazon Web Services.

Those providers act on behalf of the controller and solely to deliver the Service. No third-party analytics tools or advertising networks are used on published pages.

Data may be hosted on servers located outside the Argentine Republic. In that case the safeguards required by applicable law for international transfers are adopted.

Retention

• The merchant's data is kept while their page is published and until they request its erasure.
• A merchant can take their page offline at any time from the extension. Doing so removes it immediately and keeps the catalog and the statistics, so that it can be published again at the same address.
• Measurement data is kept in aggregate form. Because the visitor identifier changes every 24 hours, after that period there is no way to link a visit to a person.

Rights of the data subject

Under Law 25.326, the data subject has the right to:

• Access: to know what personal data is being processed.
• Rectification and update: to correct inaccurate or incomplete data. A merchant can also do this themselves: fix their WhatsApp profile and publish again.
• Erasure: to request deletion of the data where appropriate.
• Objection: to object to processing for specific purposes.

Requests should be sent to contact@argenpix.com, stating the scope of the request and details allowing the identity of the subject, or their representation, to be established.

Erasure is effective and final. On a valid request, the business, its catalog, its images in storage and the measurement events associated with its page are deleted. The published address stops existing and the operation cannot be undone.

Access requests will be answered within 10 (ten) calendar days from when the request is established, and rectification, update or erasure requests within 5 (five) business days, without prejudice to the extensions or exceptions the regulations allow.

The supervisory authority in the Argentine Republic is the Agencia de Acceso a la Información Pública (AAIP), before which any complaint about non-compliance with personal data protection rules may be filed.

Security

Reasonable technical and organisational measures are taken to protect data against unauthorised access, alteration or accidental destruction. All communication with the Service is over HTTPS and access to the data is restricted.

No system is invulnerable. In the event of an incident compromising personal data, its scope will be assessed and the corresponding notifications made to those affected and to the supervisory authority.

Minors

The Service is intended for people over 18 with legal capacity to contract, or for those validly acting on behalf of a business or legal entity. Data of minors is not knowingly collected.

Use of data by the extension (Chrome policy)

This section is included to comply with the Limited Use data requirements applicable to extensions published on the Chrome Web Store.

The extension uses data obtained from WhatsApp Web exclusively to publish the merchant's page, which is the Service's single, visible function. Specifically, it is declared that:

• Personal data is not sold, nor transferred to third parties for advertising purposes.
• Data obtained from WhatsApp Web is not used to build advertising profiles, for market segmentation, or for cross-site tracking.
• Data is not transferred to third parties for purposes unrelated to providing the Service.
• Human access to the data is not permitted, except with the subject's consent, where needed for security or legal compliance, or where the data is aggregated and identifies no one.

Changes

This Policy may be updated for new features, operational changes or legal amendments. Substantial changes will be communicated through the Service with reasonable notice. The date of the last update appears at the top.

Contact

Enquiries and exercise of data protection rights: contact@argenpix.com.