OrangeAI Privacy Policy

How we handle your information across our apps and services.

This Privacy Policy describes how OrangeAI (referred to in this Privacy Policy as 'App', 'Company', 'Service', 'We', 'Us', or 'Our') collects, uses, and discloses information when you use any of our products and services, including the Catchnote mobile applications on iOS and Android, and any OrangeAI APIs or integrations you authorize (separately and collectively as the 'Services').

We may periodically make changes to this Policy as we update or expand our Services. The latest updated policy will be displayed on site. If you do not agree to the modifications, you should discontinue your use of the Services. If you continue using the Services after the revised Policy takes effect, you will be bound by the modified Policy.

Scope of This Policy

This policy covers three product surfaces:

• Catchnote for iOS — a mobile client that saves and classifies URLs, text, and images locally on your device.
• Catchnote for Android — the Android equivalent of the same mobile client.
• OrangeAI API integrations — programmatic services that act on your behalf against third-party platforms (e.g. eBay Inventory API) after you grant OAuth consent.

Information We Collect

Personal Data Collection: OrangeAI does not collect any type of sensitive personally identifiable information from any of its users. When you interact with us through the Services, we may collect Non-Personal Data as further detailed below.

From the Catchnote mobile apps

• Device identifiers (Device IMEI on Android; Vendor ID on iOS)
• Mobile Operating System information (iOS / Android version, locale, timezone)
• MAC (Media Access Control) id, where the platform allows access
• Crash and diagnostic reports (opt-in on iOS via system toggle)

From the OrangeAI API integrations

• OAuth access and refresh tokens issued by the third-party platform you authorized (e.g. eBay). These tokens are scoped to the permissions you explicitly consented to during the OAuth flow.
• Metadata required to perform the service you requested — for example, product catalog rows, listing identifiers, inventory counts, pricing, and order fulfillment notifications returned by the third-party platform.
• Operational audit records (timestamps, request identifiers, and outcome flags) generated locally to support troubleshooting and compliance reviews.

How We Use Your Data

Catchnote (iOS and Android)

Catchnote saves all user content (URLs, text notes, images, and classified data) locally on your device using SQLite. Your saved content is never uploaded to our servers or stored in any cloud database.

When you save content, metadata (such as title, description, and URL) is sent to our classification server solely for the purpose of AI-powered categorization. No personally identifiable information is transmitted. Personal data patterns (emails, phone numbers, etc.) are automatically masked before transmission.

OrangeAI API integrations

When you connect an OrangeAI-powered API integration to your third-party account, our software acts strictly within the OAuth scopes you approved. For example, the AutoEbay listing assistant:

• Reads your own product catalog (supplied by you, typically as a ledger CSV file stored on your own workstation).
• Reads public marketplace data (e.g. competitor listings, category metadata) through the authorized platform's public APIs.
• Creates, updates, or publishes listings on your own seller account via the authorized platform's Inventory or Listing APIs.
• Retrieves order notifications limited to the fields the platform exposes to sellers in the normal course of business (shipping address, order line items, buyer username). We do not attempt to enrich, cross-reference, or re-identify buyers using any external source.

All operational state (listing drafts, pricing calculations, audit logs, OAuth tokens) is stored locally on the operator's workstation in a SQLite database. None of this data is transmitted to OrangeAI servers or any third-party beyond the authorized platform itself.

Product titles and descriptions may be passed to a large-language-model provider for the sole purpose of automated translation and categorization — currently Anthropic Claude (anthropic.com/privacy). Requests are ephemeral and are not used to train that provider's models. No seller or buyer personally identifiable information is included in these requests.

Platform Permissions

iOS Permissions (Catchnote iOS)

• NSCameraUsageDescription — Requested when you scan a QR code or capture an image to save. All captured content is stored locally on your device only and never transmitted to our servers.
• NSPhotoLibraryUsageDescription / NSPhotoLibraryAddUsageDescription — Required to read images shared via the iOS Share Sheet and to write images back to your Photo Library when you explicitly request a save.
• User Notifications (UNUserNotificationCenter) — Used to display unread-item badges on the app icon and deliver classification-complete alerts. You can revoke this at any time in iOS Settings → Notifications → Catchnote.
• App Tracking Transparency (AppTrackingTransparency) — If you agree to the ATT prompt, the advertising identifier (IDFA) may be used by Google AdMob to serve personalized ads. Declining the prompt disables personalization without affecting core functionality.
• Background App Refresh — Optional; used only to finish queued classification tasks when the app is backgrounded. Can be disabled in iOS Settings.

Android Permissions (Catchnote Android)

• CAMERA — Required for QR code scanning and saving images shared from other apps. All captured content is stored locally on your device only and never transmitted to our servers.
• READ_MEDIA_IMAGES — Required to access images shared via the OS Share Sheet for local saving and AI classification.
• INTERNET — Required to connect to the AI classification server and load advertisements.
• READ_EXTERNAL_STORAGE — Required to access shared content (URLs, text, images) from other apps.
• WRITE_EXTERNAL_STORAGE — Required to save shared images and cached data locally.
• VIBRATE — Used for haptic feedback on notifications.
• SYSTEM_ALERT_WINDOW — Used for development tools (debug builds only).
• POST_NOTIFICATIONS — Used to display unread-item badge count on the app icon.

API and Third-Party Integrations

Some OrangeAI Services act on your behalf against third-party platforms. When you authorize such an integration you are giving our software — not OrangeAI staff — temporary, scoped access to your account on that platform.

eBay Marketplace (via AutoEbay)

• What we access: the seller's inventory, offers, business policies, merchant locations, and standard order notifications via eBay's Sell APIs, limited to the OAuth scopes you approved (typically sell.inventory, sell.account.readonly, and buy.marketplace.insights).
• What we write: new or updated listings on the authorized seller account, and only after the operator explicitly approves each draft through a human-in-the-loop review step. No listing is ever published without this explicit operator action.
• Token lifetime: eBay's OAuth refresh tokens are valid for 18 months. You may revoke the authorization at any time from your eBay account: My eBay → Account → Personal Information → Apps you've authorized. Revocation takes effect immediately.
• Compliance: the integration operates within the eBay API License Agreement and respects marketplace automation limits, including the requirement that listings be reviewed by a human operator before publication.

Anthropic Claude (translation and classification)

Short, non-personal text snippets (product titles, category labels, and similar) may be sent to Anthropic's Claude API to generate English-localized listing copy and to match catalog rows to marketplace categories. We do not send seller or buyer personally identifiable information in these requests, and Anthropic does not use the API traffic for model training. See Anthropic's privacy policy for details.

Google AdMob (Catchnote apps only)

The Catchnote iOS and Android apps display advertisements via Google AdMob. AdMob may collect advertising identifiers (IDFA on iOS, GAID on Android) to serve personalized ads. For more details, please refer to Google's Privacy Policy at https://policies.google.com/privacy. AdMob is not used in any OrangeAI API integration.

Advertising

Advertisements are served exclusively inside the Catchnote mobile apps. They are never shown inside the API integrations or on this website. You may opt out of personalized advertising at the operating system level:

• iOS: Settings → Privacy & Security → Tracking → toggle off "Allow Apps to Request to Track".
• Android: Settings → Google → Ads → "Delete advertising ID".

Security

We take consistent steps to protect the Non-Personal Data provided via the Services from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. We may keep this information with us as long as necessary or we may destroy it if we find it of no use. We use Ad Serving Technology in our apps which may collect some non-personally identifiable information for analytics purposes. We assure you that this information is completely non-identifiable and never identifies anyone.

For API integrations, OAuth tokens are stored only on the operator's workstation in a local database file with restrictive filesystem permissions. Tokens are never committed to version control, shared with third parties, or transmitted to OrangeAI servers. API keys required by the integration (for example, Anthropic Claude keys) are read from environment variables at runtime and are never logged.

Data Deletion

Catchnote apps: All user data is stored locally on your device. Uninstalling the Catchnote app will permanently delete all saved content and preferences. No server-side data deletion is required as we do not store user content on our servers.

API integrations: You may revoke the OAuth authorization at any time from the third-party platform's account settings (e.g. My eBay → Apps you've authorized). Revocation immediately invalidates the tokens held by our software. To request deletion of any local operational records held on the operator's workstation, contact us at the address below and we will confirm removal within a reasonable timeframe.

Your Rights

Depending on your jurisdiction (for example, the European Economic Area under GDPR, or California under CCPA), you may have rights to access, correct, delete, or export the limited data described in this policy. Because we collect no sensitive personally identifiable information and store no user content on our servers, most of these rights are satisfied automatically by uninstalling the app or revoking the API authorization. For any additional request, please contact us at the address below.

Privacy Policy Changes

The policy solely depends on OrangeAI and we may make significant changes or update this policy at any time. We recommend you review this policy at regular intervals and use our products and services only if you agree to the updated policy listed.

Contact Us

You can share your feedback or complaints to our email: shoedogfit@gmail.com

Last updated: April 23, 2026