Privacy Policy
Last updated: March 17, 2026
1. Data Controller
CATRO ("we", "us", "our") is the data controller for personal data collected through catroflow.com. Contact: catroflow@gmail.com
2. Data We Collect
- ·Identity: First name, last name
- ·Contact: Email address, phone number
- ·Professional: Company name, job title
- ·Communication: Form message content, early access requests
- ·Technical: IP address, browser type (anonymous analytics only)
We do not collect sensitive data (health, biometric, financial credentials).
3. How We Use Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Waitlist management and updates | Consent (Art. 6(1)(a)) |
| Responding to contact requests and scheduling demos | Consent (Art. 6(1)(a)) |
| Account creation and service delivery | Contract (Art. 6(1)(b)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
| Anonymous analytics to improve the service | Legitimate interests (Art. 6(1)(f)) |
4. Data Sharing & International Transfers
- ·Resend Inc. — Email delivery (USA; Standard Contractual Clauses apply)
- ·Vercel Inc. — Hosting and analytics (USA; Standard Contractual Clauses apply)
We do not sell or share your data with third parties for marketing purposes.
5. Data Retention
- ·Waitlist email: Until you unsubscribe
- ·Contact form data: 2 years after the inquiry is resolved
- ·Account data: Until account deletion
- ·Technical logs: Maximum 12 months
6. Your Rights (GDPR)
- ·Access: Request a copy of the data we hold about you
- ·Rectification: Correct inaccurate or incomplete data
- ·Erasure: Request deletion of your personal data ("right to be forgotten")
- ·Restriction: Limit how we process your data in certain circumstances
- ·Portability: Receive your data in a machine-readable format
- ·Objection: Object to processing based on legitimate interests
- ·Withdraw consent: Withdraw at any time without affecting prior processing
To exercise your rights, email catroflow@gmail.com. We respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.
7. Cookies
We use essential cookies for session management and anonymous analytics cookies to understand site usage. Essential cookies cannot be disabled. You can disable analytics cookies through your browser settings at any time.
8. Security
All data is transmitted over HTTPS. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, or disclosure.
9. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we will notify you by email if you are on our mailing list. The current version is always available at catroflow.com/privacy.