Privacy Policy

This Privacy Policy explains how Catcher ("we", "us", "Catcher") collects, uses, stores and protects your personal data when you use catcher.so and related services.

1. Who we are

Catcher is an AI-powered job search assistant available at catcher.so, operated by Maria Martin (sole proprietor). It helps users find job openings, adapt their resumes, and prepare and send application letters from the user's own email account. For questions about this policy, contact us at support@catcher.so.

2. What data we collect

We collect the following categories of data:

• Account data — your email address and authentication details when you register.
• Resume data — the resume and profile information you upload, used to find matching jobs and generate application letters. This may include your name, contact details, work history, education, skills and languages.
• Email connection data — to send letters on your behalf, you provide a Gmail App Password (a separate 16-character code, NOT your main password). This code allows sending only and can be revoked by you at any time in your Google account settings. We do NOT use OAuth or request access to read your inbox. App Passwords are stored encrypted (AES-256) in our database and are never logged, exposed in API responses, or shared with third parties.
• Usage data — actions inside the product, such as jobs viewed, letters generated and letters sent.
• Technical data — IP address, browser type, device information, country (detected via Cloudflare), and similar data collected automatically.
• Payment data — handled entirely by our payment provider (Paddle); we do not store, process or have access to full card details.

3. How we use your data

We use your data to:

• Provide the core service — search for jobs, adapt resumes and generate application letters.
• Send application letters from your connected email account at your explicit request.
• Track replies to your letters so you can manage your job search.
• Process payments and manage your subscription.
• Improve the product, fix issues and ensure security.
• Communicate with you about your account and important updates.

AI and your data: Your resume and letters are processed by Anthropic's Claude AI to generate adapted content. We use the Anthropic API with the zero data retention policy — your data is NOT used to train AI models, is not stored by Anthropic after processing, and is not shared with any other party. See Anthropic's privacy policy for details.

4. Legal basis for processing

Where the GDPR applies, we process your data on the following bases:

• Performance of contract — providing the job search service you signed up for (account, resume processing, letter generation, sending).
• Consent — when you explicitly connect your email account for sending letters.
• Legitimate interest — improving and securing the product, analytics, fraud prevention.
• Legal obligation — where we must retain data to comply with applicable law.

5. How we store and protect your data

Your data is stored on Cloudflare Workers (edge computing) and Cloudflare D1 (SQLite database), both hosted in Cloudflare's global network. Email credentials (App Passwords) are encrypted at rest using AES-256. Access to production systems is restricted to the founder only.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach, we will notify affected users within 72 hours as required by GDPR.

6. Sharing your data

We do not sell your personal data. We share data only with the following service providers, and only to the extent necessary:

• Cloudflare (USA) — hosting, database, CDN
• Anthropic (USA) — AI processing (resume adaptation, letter generation). Zero data retention.
• Hunter.io (France) — finding public HR contact emails
• Paddle (UK) — payment processing
• Google Gmail — sending letters from YOUR account (your credentials, your sending reputation)

These providers process data under their own privacy terms and are bound by contractual confidentiality obligations.

7. International data transfers

Your data may be processed in the United States (Cloudflare, Anthropic) and France (Hunter.io). For transfers from the EU/EEA, we rely on Cloudflare's and Anthropic's Standard Contractual Clauses (SCCs) and their adherence to the EU-US Data Privacy Framework where applicable.

8. Cookies and analytics

We use minimal cookies and similar technologies to keep you signed in and remember your language preference. We use a lightweight, first-party analytics tracker (no Google Analytics, no third-party tracking pixels). You can control cookies through your browser settings.

9. Data retention

We keep your personal data for as long as your account is active. When you delete your account:

• Your resume, letters, and usage data are deleted within 30 days.
• Your email credentials (App Passwords) are deleted immediately.
• Payment records may be retained for up to 7 years as required by tax law.
• Anonymized analytics data may be retained indefinitely.

10. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time.

To exercise any of these rights, contact us at the address below.

11. Children's privacy

Catcher is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. International data transfers

Your data may be processed in countries other than your own. Where required, we take steps to ensure an appropriate level of protection for such transfers.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. Significant changes will be communicated through the service.

14. Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact us at support@catcher.so.