1. Information We Collect
When you use Catly, we collect the following information:
Account information — Email address, hashed password, display name.
Files you upload — File content stored in Cloudflare R2, metadata (name, size, MIME type) stored in our database.
Usage data — IP address (hashed), user agent, download counts, access timestamps.
Payment information — Transaction details processed through Midtrans. We do not store your card number.
2. How We Use Your Data
- Provide and maintain the file sharing service.
- Enforce file size limits, storage quotas, and retention periods.
- Process payments and manage subscriptions.
- Prevent abuse, spam, and security threats.
- Improve our service based on aggregated, anonymized usage patterns.
3. Data Storage & Security
Your files are stored on Cloudflare R2 with server-side encryption. Database records are hosted on Cloudflare D1. All data transfers use TLS 1.3 encryption.
Access to your data is restricted to authenticated sessions. Admin access is logged and audited.
4. Data Retention & Deletion
- Files are automatically deleted when their expiration date is reached (7, 30, or 90 days depending on your plan).
- You can manually delete your files at any time from your dashboard.
- Account deletion removes all personal data, files, and activity logs within 30 days.
- Anonymized audit logs may be retained for security purposes for up to 90 days after account deletion.
6. Third-Party Services
We use Midtrans for payment processing. Payment data is handled in accordance with Midtrans's privacy policy. We do not share your personal data with other third parties.
7. Your Rights
You have the right to:
- Access, download, or correct your personal data.
- Delete your account and all associated data.
- Request a copy of your data in a portable format.
Contact us at privacy@catly.cloud
8. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be notified via email or in-app notification before taking effect.