Legal

Privacy Policy

How Cotta handles account, product, supplier, and store connection data.

Last updated: April 27, 2026

Cotta helps ecommerce operators turn supplier listings into store-ready product drafts. This policy explains what we collect, how we use it, and the choices you have when you use Cotta.

Information we collect

We collect information you provide directly, including your name, email address, password credentials, product imports, brand presets, supplier URLs, generated listing copy, uploaded or imported images, and messages you send to support.

We also collect technical information about how the product is used, including device and browser details, log data, approximate location derived from network information, feature usage, errors, and performance events.

If you connect a store or third-party account, we collect the information needed to operate that integration, such as store identifiers, product catalog data, draft listing fields, publish status, and authorization tokens.

How we use information

We use information to:

  • Create and manage your account.
  • Import supplier products and generate product drafts.
  • Rewrite titles, bullets, descriptions, metadata, and other listing fields.
  • Clean, process, and organize product images.
  • Sync drafts, product data, and publishing status with connected ecommerce platforms.
  • Improve reliability, safety, security, and product quality.
  • Communicate with you about product updates, support, account activity, and service notices.

AI processing

Cotta may process supplier content, product images, listing text, brand presets, and related product data with AI systems to generate drafts and improve product output. We only use this content to provide and improve Cotta unless a separate written agreement says otherwise.

Sharing information

We share information with service providers that help us run Cotta, including hosting, analytics, authentication, payment, support, AI processing, email delivery, and ecommerce integrations.

We may also share information if required by law, to protect Cotta or others, to prevent fraud or abuse, or as part of a merger, acquisition, financing, or sale of assets.

Data retention

We keep information for as long as needed to provide Cotta, comply with legal obligations, resolve disputes, enforce agreements, and maintain security. You can ask us to delete your account or certain data, subject to legal and operational limits.

Security

We use administrative, technical, and organizational safeguards designed to protect information. No system is perfectly secure, so we cannot guarantee absolute security.

Your choices

You can update account information, disconnect integrations, request deletion, or contact us about privacy questions. Some requests may require identity verification.

International use

Cotta may process information in countries other than where you live. Those countries may have different data protection laws.

Changes

We may update this policy from time to time. If changes are material, we will take reasonable steps to notify you.

Contact

Questions about this policy can be sent to privacy@cotta.ai.