Your catalogue is yours. Here's exactly how we handle it.

The short version

• Your catalogue, sales, invoices and images belong to you.
• We never sell your data and never build advertising profiles from it.
• You can export your data at any time (works, invoices, sales, contacts and all of your original images, straight from the app), and you can delete your account and everything in it whenever you like.
• This marketing site sets no cookies and runs no third-party trackers.

What we store

To run CloudCat we hold the information you give us and the records you create in the app:

• Account details: your name and email address, used to sign you in and contact you about the service.
• Catalogue content: your works, editions, images, dimensions and notes.
• Sales and invoices: including details you enter about buyers and sellers, such as names, addresses, VAT and registration numbers, and bank details for payment. These exist only so you can produce and keep your own records.
• Contacts: the buyers and collaborators you choose to keep on file.
• Basic technical logs: needed to keep the service secure and working.

Who processes your data

CloudCat is built and operated from Cape Town, South Africa. We rely on a small set of established providers to host and run the service. They process data only on our instructions:

• WorkOS: sign-in and account authentication.
• Cloudflare: secure image storage (R2), content delivery, and hosting for published sites.
• Vercel: hosting for the web app and this site, plus privacy-friendly, cookieless analytics.
• Stripe: subscription billing. Your card details are handled by Stripe and never touch our servers.
• Sentry: error monitoring, so we can find and fix faults in the service.

We keep this list current. If we add or change a provider that handles personal data, we will update this page.

Cookies and tracking

This marketing site is cookie-free and carries no third-party advertising trackers. The web app uses a single session cookie to keep you signed in. It is essential to the service and is not used for advertising.

Your data stays portable

One click exports your full catalogue (works, invoices, sales, contacts and every original image), and published collections also sit behind a public API. So you can take your data elsewhere at any time. You are never locked in.

How long we keep it

We keep your data for as long as your account is active. When you delete your account, we remove your catalogue, sales, invoices and associated personal data from our systems.

Your rights

Depending on where you live (including under South Africa's POPIA and the EU/UK GDPR) you have the right to access the personal data we hold about you, to correct it, to export it, and to ask us to delete it. To exercise any of these, email us at hello@cloudcat.works.

For the personal details of buyers and collaborators you enter into your catalogue, you are the controller of that data and CloudCat processes it on your behalf.

Changes to this policy

If we make material changes, we'll update the date at the top of this page and, where appropriate, let you know in the app.

Contact

Questions about privacy or your data? Email hello@cloudcat.works.