Privacy Policy

Welcome to Cattab. Cattab ("we", "us", "our") is a software-as-a-service (SaaS) platform providing project management, finance, file management, client management, reporting, and team directory tools for language professionals, including translators, editors, proofreaders, copywriters, graphic designers, and translation agencies worldwide.

This Privacy Policy applies to all users of our website at cattab.com, our web application, and any related services (collectively, the "Services"). By accessing or using our Services, you agree to the collection and use of information in accordance with this policy.

We are committed to complying with applicable privacy laws globally, including:

• General Data Protection Regulation (GDPR) — for users in the European Economic Area (EEA) and the United Kingdom
• California Consumer Privacy Act (CCPA/CPRA) — for California residents
• UK Data Protection Act 2018
• Brazil's Lei Geral de Proteção de Dados (LGPD)
• Other applicable regional privacy laws

Cattab operates as the data controller for personal data processed in connection with our Services. For the purposes of data protection law, the data controller is:

If you are located in the EEA or UK and have questions about how we process your data, you may contact our Data Protection representative at the address above.

We collect different types of information depending on how you interact with our Services.

3.1 Information You Provide Directly

3.2 Information Collected Automatically

When you use our Services, we automatically collect certain technical information:

• Log data: IP address, browser type, operating system, referring URLs, pages visited, time and date of access
• Device information: Device type, unique device identifiers, operating system version
• Usage data: Features used, actions taken within the application, session duration
• Cookies and similar technologies: See our Cookies section below

3.3 Information from Third Parties

We may receive information about you from third parties in limited circumstances, such as when you sign up using a social login (e.g., Google OAuth), or from payment processors to confirm transaction status.

We use the information we collect for the following purposes. Where we rely on a legal basis under GDPR, we have noted it in brackets.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without your consent.

We do not sell your personal data. We do not share your personal data with third parties for their own marketing purposes. We share data only in the following limited circumstances:

5.1 Service Providers

We work with trusted third-party service providers who process data on our behalf under strict contractual obligations:

5.2 At Your Direction

If you invite team members or collaborators to your workspace, we share relevant project data with those individuals as you instruct.

5.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Cattab, our users, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

We retain your personal data for as long as your account is active or as needed to provide you with the Services. Specifically:

• Active account data: Retained for the duration of your subscription and for 30 days after cancellation, during which you may request a data export
• Billing records: Retained for 7 years to comply with financial and tax regulations
• Support communications: Retained for 3 years after resolution
• Log and analytics data: Retained for up to 24 months in anonymised or aggregated form
• Deleted content: Removed from active storage within 30 days and from backup systems within 90 days

When we have no ongoing legitimate business need to process your personal data, we securely delete or anonymise it.

We take the security of your data seriously and implement appropriate technical and organisational measures, including:

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of data at rest using AES-256
• Regular security audits and vulnerability assessments
• Access controls and least-privilege principles for our staff
• Two-factor authentication available for all user accounts
• Regular automated backups with point-in-time recovery

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of a data breach affecting your rights or freedoms, we will notify you and relevant authorities as required by applicable law.

Cattab serves users worldwide. Your personal data may be transferred to and processed in countries other than your country of residence, including countries that may not provide the same level of data protection as your home country.

When we transfer personal data from the EEA, UK, or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• UK International Data Transfer Agreements (IDTAs) for UK transfers
• Binding Corporate Rules where applicable

You may request a copy of the safeguards we use by contacting us at privacy@cattab.com.

Depending on your location, you may have the following rights regarding your personal data. We honour all valid requests regardless of where you are based.

9.1 Rights for All Users

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Data portability: Receive your data in a structured, machine-readable format
• Opt-out of marketing: Unsubscribe from marketing communications at any time

9.2 Additional Rights under GDPR (EEA & UK Users)

• Restriction of processing: Request that we restrict how we use your data in certain circumstances
• Object to processing: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent, withdraw it at any time
• Lodge a complaint: Lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your national DPA in the EEA)

9.3 Rights for California Residents (CCPA/CPRA)

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale or sharing of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information

9.4 How to Exercise Your Rights

To exercise any of your rights, please contact us at privacy@cattab.com with the subject line "Privacy Request". We will respond within 30 days. We may need to verify your identity before processing your request.

We use cookies and similar tracking technologies to operate and improve our Services.

You can control cookies through your browser settings or through our cookie consent banner. Note that disabling certain cookies may affect the functionality of our Services.

Cattab is not directed to children under the age of 16 (or under the age of 13 in jurisdictions where that is the applicable threshold). We do not knowingly collect personal data from children under the applicable age threshold.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@cattab.com and we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this document
• Send an email notification to all registered users
• Display a prominent notice within the application for at least 30 days

Your continued use of the Services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you should stop using our Services and delete your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:

We aim to respond to all privacy-related enquiries within 5 business days, and within the legally required timeframe for formal rights requests.