Legal
Privacy Policy
Last updated: March 7, 2026 · Effective: March 7, 2026
1. Who We Are
Catchuply ("we", "us", "our") is a tech news aggregation service operated by an individual data controller based in Poland, European Union. Our service is available at https://catchuply.com.
As the data controller, we are responsible for how your personal data is collected and used. For all privacy-related enquiries, please contact us at support@catchuply.com.
Because we are established in the European Union, the General Data Protection Regulation (GDPR) applies to all of our processing activities, including data relating to users outside the EU.
2. Data We Collect
2.1 Account and Identity Data
- Email address (required to create an account or join the waitlist)
- Name (optional, if provided during sign-up)
- Authentication tokens managed by Clerk, Inc.
2.2 Usage and Behavioural Data
- Articles you read, skip, or save
- Reading time and session duration
- Topics and sources you engage with
- Filter preferences and time-budget settings
2.3 Subscription and Billing Data
- Payment method details (processed and stored by Stripe — we never see full card numbers)
- Billing history and subscription status
2.4 Technical Data
- IP address and approximate location (country/region)
- Browser type and version
- Device type and operating system
- Pages visited and referring URL
- Session cookies set by Clerk for authentication
2.5 Communications
- Emails you send to support@catchuply.com
- Waitlist and product update emails (via Loops.so)
We do not collect sensitive personal data (special category data under GDPR Article 9) such as health data, political opinions, or biometric data.
3. Legal Basis for Processing (GDPR)
We process your personal data only where we have a valid legal basis under GDPR Article 6:
- Contract (Art. 6(1)(b)): Account data, billing data, and usage data necessary to provide the Catchuply service to subscribers.
- Legitimate interests (Art. 6(1)(f)): Usage and behavioural data to improve our ranking algorithms, detect abuse, and improve the service — balanced against your privacy interests.
- Consent (Art. 6(1)(a)): Marketing emails and product update communications. You may withdraw consent at any time by unsubscribing.
- Legal obligation (Art. 6(1)(c)): Tax and financial records required by Polish law.
4. How We Use Your Data
- To create and manage your account
- To deliver the personalised news feed and ranking
- To process subscription payments
- To send transactional emails (receipts, password resets)
- To send product updates and newsletters (with your consent)
- To analyse usage patterns and improve the service
- To detect and prevent fraud or abuse
- To comply with legal obligations
5. Third-Party Service Providers
We share your data with the following processors who act on our behalf. Each is bound by a Data Processing Agreement and employs appropriate safeguards for international transfers.
- Clerk, Inc. (USA) — Authentication and user identity management. Privacy policy
- Stripe, Inc. (USA) — Payment processing. Stripe is PCI-DSS Level 1 certified. Privacy policy
- Loops, Inc. (USA) — Transactional and marketing email delivery. Privacy policy
- Supabase, Inc. (USA) — Database hosting and storage. Privacy policy
- Vercel, Inc. (USA) — Application hosting and infrastructure. Privacy policy
We do not sell your personal data to any third party, and we do not share it with third parties for their own marketing purposes.
6. International Data Transfers
Several of our service providers are based in the United States. When we transfer personal data from the EU/EEA to these providers, we rely on the EU–US Data Privacy Framework (where applicable) and/or Standard Contractual Clauses (SCCs) adopted by the European Commission as the legal mechanism for that transfer.
You can request a copy of the relevant transfer safeguards by contacting us at support@catchuply.com.
7. Data Retention
- Account data: Retained for the duration of your account plus 30 days after deletion, then permanently erased.
- Billing records: Retained for 5 years as required by Polish tax law.
- Usage and behavioural data: Retained for 12 months from collection, then aggregated or deleted.
- Waitlist emails: Retained until you unsubscribe or request deletion.
- Support emails: Retained for 2 years from the date of the last communication.
8. Your Rights Under GDPR
If you are located in the EU, UK, or EEA, you have the following rights regarding your personal data:
- Right of access (Art. 15): Request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): Request correction of inaccurate data.
- Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
- Right to restriction (Art. 18): Request that we limit how we use your data.
- Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to object (Art. 21): Object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any of these rights, email us at support@catchuply.com. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Polish supervisory authority: the President of the Personal Data Protection Office (UODO), uodo.gov.pl.
9. California Residents — CCPA Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:
- Right to know: What personal information we collect, use, disclose, or sell (we do not sell personal information).
- Right to delete: Request deletion of your personal information.
- Right to opt-out of sale: We do not sell personal information. No opt-out is required.
- Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
To submit a verifiable consumer request, contact us at support@catchuply.com.
10. Cookies
We use a minimal set of cookies necessary to operate the service:
- Authentication cookies set by Clerk — strictly necessary to keep you logged in. These cannot be disabled without breaking the service.
- Analytics cookies (if enabled) — used to understand aggregate usage patterns. We will seek your consent before enabling any non-essential analytics.
You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent you from using the authenticated parts of the service.
11. Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- HTTPS encryption for all data in transit
- Encrypted storage for sensitive data at rest
- Access controls limiting who can access personal data
- Regular security reviews
No method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately at support@catchuply.com.
12. Children's Privacy
Catchuply is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) and update the "Last updated" date at the top of this page. Continued use of the service after the effective date constitutes acceptance of the updated policy.
14. Contact Us
For any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact:
Catchuply
Email: support@catchuply.com
Location: Poland, European Union