Privacy policy
Catena does not share, sell, rent, or train AI on your data. The whole point of the suite is that you own it.
What we collect
Contact details and support requests. Payment goes through Polar, the merchant of record, which holds the payment details: card numbers never touch our servers. For clients who subscribe to the central audit log copy, the suite's administrative audit entries (each admin action, who took it, from which address), kept 90 days. The suite's data, its backups, the key that opens them and the credentials of its provider accounts stay on the client's own server and accounts, and never reach our systems.
What we do not do
We do not sell, rent, or share your data. We do not train AI models on it. We do not analyze it for advertising. We do not use third-party trackers on the marketing site.
Where data lives
Your suite data lives on the server you own, the S3 bucket you own, and the third-party accounts you yourself selected (Cloudflare, Tailscale, your VPS provider, your SMTP provider, etc.).
Subprocessors
Polar (payment and sales tax, as merchant of record). Cloudflare (Tunnel + edge for catena.run). The providers chosen for a suite are the client's own, contracted directly by the client.
Your rights
Law 25 and PIPEDA grant you the right to access, correct, and delete personal information we hold. Contact privacy@catena.run (or hello@catena.run interim) and we will respond within 30 days.
Cookies and analytics
No third-party trackers, no advertising cookies, no cookies on the marketing site. Aggregate visit analytics on the marketing site via a self-hosted Plausible instance -- no cookies, no fingerprinting, no personal data; Law 25 / GDPR compliant with no consent banner required.
Questions
Email hello@catena.run. We answer privacy questions within one business day.