Privacy Policy
This policy explains what information CATCHO collects, why we collect it, and the choices you have. It covers the CATCHO website (catcho.uz), the CATCHO web application (app.catcho.uz), and the CATCHO browser extension.
1. Who we are
CATCHO is a private visual reference library that lets you capture images and links from supported websites, organize them into folders, search them, store fonts, and share selected boards. In this policy, "CATCHO", "we", "us" and "our" refer to the operator of CATCHO. You can reach us at support@catcho.uz.
2. Scope
- Website: the marketing pages at catcho.uz.
- Application: your account and library at app.catcho.uz.
- Browser extension: the CATCHO extension that adds a save button on supported reference sites.
3. Information we collect
Account information
When you create an account we store your email address, a securely hashed and salted password (we never store your password in plain text), and the workspace name you choose. We record trial start and end dates so we can provide the free trial.
Content you save
CATCHO stores the material you choose to save, so you can find it later:
- Reference links (URLs), titles, your notes, tags, ratings and folder names.
- Preview images of the references you save. To keep your library working after a source removes an image, we may download and store a copy of the preview on our server.
- Font files (TTF/OTF) you choose to upload, together with the font metadata we read from them.
- Extracted color palettes generated from your saved images, used for color search.
You control this content. You can edit it, move it to trash, export it, or ask us to delete it.
Product analytics (first party)
To understand how the closed beta is used and to improve it, we record a small set of first-party product events, for example: account created, signed in, a reference saved, a reference opened, a share link created or a shared board viewed. These events are stored in our own database.
We do not use third-party advertising trackers, we do not store advertising identifiers, and we do not sell your data. Public shared-board views are aggregated by board and hour rather than tied to a visitor profile.
Cookies
The application uses a single session cookie to keep you signed in after you log in. It is required for the service to function. We do not use advertising or cross-site tracking cookies. The marketing website does not require you to accept any non-essential cookies.
Browser extension data
The CATCHO browser extension is designed to touch as little as possible:
- It stores, locally in your browser (chrome.storage.local), the address of your CATCHO API, your workspace access token, and an offline queue of captures waiting to sync.
- When you click the CATCHO button on a supported page, it sends the reference you chose (link, preview image URL, title, the folder and note you enter) to your own CATCHO workspace.
- The extension runs only on the supported reference sites (Instagram, Pinterest, Dribbble, Behance) to place its save button. It does not read your browsing history, does not track the pages you visit, and does not collect data from other websites.
- The extension asks for permission to reach exactly one CATCHO API address. Plain-text HTTP is accepted only for local development addresses.
Chrome Web Store limited use. Data handled by the extension is used only to provide its single purpose of saving references to your CATCHO library. It is not sold, not used for advertising, and not transferred to third parties except as needed to deliver the service you requested.
4. How we use your information
- To provide the service: authenticate you, store and sync your library, and power search, fonts and sharing.
- To operate the free trial and read-only access after it ends.
- To keep the service secure and prevent abuse (for example, rate limiting sign-in attempts).
- To understand and improve the beta through the first-party analytics described above.
5. How your information is shared
We do not sell your personal information and we do not share it with advertisers. Your library is private to your workspace. Content becomes visible to others only when you create a shared board link and enable it; you can turn that link off at any time.
Third-party services
- Google Fonts: the website and application load fonts from Google's font service. When your browser requests those fonts, your IP address is visible to Google as part of the standard web request. See Google's privacy policy for details.
- Preview images: to save a reference, our server fetches the preview image from the source site you selected.
- We may use infrastructure providers (for hosting) that process data on our behalf under appropriate safeguards.
6. Data retention
- Account and library content is kept for as long as your account exists, until you delete it or ask us to.
- First-party analytics events are retained for a limited period (about 180 days) and then removed or aggregated.
- Offline captures held by the extension stay in your browser until they sync or you disconnect the extension, which clears its local data.
7. Your rights and choices
- Access and export: you can view your library at any time and export references, assets and metadata from within the app.
- Correction: you can edit titles, notes, tags, folders and ratings yourself.
- Deletion: you can move items to trash, and you can request deletion of your account and associated data by contacting us.
- Disconnect: you can revoke an extension key from the app and disconnect the extension, which clears its local data.
To exercise any of these rights, email support@catcho.uz.
8. Security
Passwords are stored hashed and salted. Traffic is served over HTTPS, and session cookies are marked secure. Access tokens for the extension are revocable and stored only as hashes on our side. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data.
9. Children
CATCHO is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will remove it.
10. International users
CATCHO is operated from Uzbekistan and your data is processed on servers we control. By using CATCHO you understand that your information is handled as described in this policy.
11. Changes to this policy
We may update this policy as the product evolves. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by a notice within the application.
12. Contact
Questions or requests about this policy or your data: support@catcho.uz.