Privacy Policy

Controller

Johannes Oster
Bendlgasse 31 Top 18
1120 Wien, Österreich
hey@cathrin.ai

Overview

This policy explains how cathrin.ai handles your personal data. We do not use cookies or store any data on your device.

Waitlist (email)

When you join our waitlist, we collect your email address to notify you about Cathrin's launch and product updates. We will never sell or share your email with third parties.

Legal basis: Your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by unsubscribing or contacting us.

Processor: Loops (Astrodon Corporation, USA) manages our mailing list. Your email is transferred to the United States on the basis of Standard Contractual Clauses (Art. 46(2)(c) GDPR). Loops acts as a data processor on our behalf.

Retention: Until you unsubscribe or request deletion.

Analytics

We use PostHog in cookieless mode for anonymous usage analytics (page views, device type, referrer). No cookies are set, no data is stored on your device, and no personal profiles are built.

PostHog computes a privacy-preserving, irreversible hash on its servers from your IP address and user agent. A daily rotating salt ensures this hash cannot be used to identify you. The salt is deleted once the day's events are processed. The resulting hash is not personal data.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) in understanding how our website is used. We have balanced this interest against your rights and concluded that cookieless, non-identifying analytics with no persistent tracking represents minimal intrusion.

Processor: PostHog (EU servers). No data is transferred outside the EU/EEA.

Retention: Raw IP address and user agent are processed momentarily for hash computation and are not stored.

Hosting

This website is hosted by Vercel. When you visit cathrin.ai, Vercel may process your IP address and technical connection data in server logs. Refer to Vercel's privacy policy for details.

Your rights

Under the GDPR, you have the right to:

• Access your data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time (Art. 7(3))

To exercise any of these rights, contact hey@cathrin.ai.

Supervisory authority

You have the right to lodge a complaint with the Austrian data protection authority:
Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Wien
dsb.gv.at

Automated decision-making

We do not use automated decision-making or profiling.