Privacy Policy
Effective 6 August 2026.
This policy explains what Supplier Data Ops collects and why. The data controller is Batuhan Ceyhan, an individual based in the Republic of Türkiye, contactable at batuhan@ceyhanlabs.com.
Supplier Data Ops is published under the name CeyhanLabs and served from the ceyhanlabs.com domain. CeyhanLabs is a trading name that Batuhan Ceyhan operates under — not a company, and not a separate controller. Wherever you see CeyhanLabs, the person responsible for your data is Batuhan Ceyhan.
Your catalog files stay on your device
Reading, validating and exporting a supplier catalog all happen in your browser. The file itself is never uploaded to us, and we cannot see the product rows inside it. This is the central design decision of the product, not a policy promise layered on top of it.
Two pieces of information about a file are saved when you are signed in, so your import history is useful: the file name and the names of any columns we could not map to a Shopify field. If your file names or column headings contain something you would rather we did not store, rename them before importing, or use the importer signed out.
What we collect
- Account details — your email address, and the name and profile picture supplied by your sign-in provider. Email is what identifies your account.
- Profile details you enter — the name, company and role you give during onboarding.
- Sign-in records — the provider you used, its account identifier, and session and verification tokens needed to keep you signed in.
- Import summaries — per run: file name, file size, row and column counts, error, warning and issue counts, unmapped column names, status, and the times it ran and was exported.
- Subscription records — your plan, its status, the identifiers issued by our payment provider, renewal and cancellation dates, and a log of processed billing event identifiers.
We do not collect payment card details. We never see them — they go directly to our payment provider.
Why we collect it
- To provide the Service and keep you signed in — necessary to perform our contract with you.
- To count imports against your monthly allowance and show your history — necessary to perform our contract.
- To take payment and manage subscriptions — necessary to perform our contract.
- To keep the Service secure and to fix faults — our legitimate interest in a working, non-abused service.
Who we share it with
We do not sell your data or use it for advertising. We share it only with the providers needed to run the Service:
- Paddle.com Market Ltd — payments and subscriptions, as merchant of record. They receive your email and the identifiers tying a subscription to your account, and handle billing and tax under their own privacy policy.
- Google — where you sign in with a Google account. We receive your email, name and profile picture; we do not receive your password, and we request no access to your Google data beyond basic profile information.
- Our hosting and database providers — they store and serve the data above on our behalf.
We may also disclose data where we are legally required to. Data is processed on servers that may be outside your country, including in the United States and the European Union.
How long we keep it
Account and import records are kept while your account exists. To have your account deleted, email batuhan@ceyhanlabs.com — we action it within 30 days. Deletion removes your sign-in records, import history and subscription record together; nothing is left behind under a detached identifier. Records we must retain for tax or accounting purposes are kept by our payment provider for as long as the law requires.
Your rights
Depending on where you live, you may have the right to access, correct, export, restrict or delete your data, to object to processing, and to complain to a data protection authority. Exercise any of these by emailing batuhan@ceyhanlabs.com. We aim to respond within 30 days and do not charge for it.
Cookies
We set a cookie to keep you signed in. It is required for the Service to function and is not used for tracking or advertising. Our payment provider may set its own cookies during checkout, governed by their policy.
Security
Data is encrypted in transit. Access is limited to what is needed to operate the Service. No system is perfectly secure, but keeping catalog files out of our infrastructure entirely means the most sensitive thing you handle is never at risk from us.
Children
The Service is not intended for children, and we do not knowingly collect their data.
Changes
We may update this policy. Material changes will be notified by email or in the app, and the effective date above will change.
Contact
Privacy questions or requests: batuhan@ceyhanlabs.com. This policy is governed by the laws of the Republic of Türkiye.