This Privacy Policy describes how Mono Software (OPC) Private Limited (“Mono”, “we”, “us”, or “our”) collects, uses, and handles information when you visit catchable.io or join the Catchable waitlist (“Service”). Catchable itself is still being built; it will have its own policy when it launches.
1. Who we are
Mono Software (OPC) Private Limited is a software company incorporated under the laws of India, based in Nagpur, Maharashtra. We build Catchable, and also Billable, for international users.
2. Information we collect
Information you provide:
- Your email address, when you join the waitlist
- Anything you send us by email
Information collected automatically:
- The campaign tags on the link you followed (such as
utm_source,utm_medium,utm_campaignorref), the page that referred you, and which form on the site you used. These are held in your browser’s session storage until you submit the form, then saved with your signup - IP address and request details, processed by our hosting infrastructure as part of serving and securing the Service
- Signals about your browser and device, checked by Cloudflare Turnstile to tell people from bots when you submit the form
- Aggregate page-view data from Cloudflare Web Analytics: the pages viewed, referring sites, country, and page performance. It sets no cookies and doesn’t track you across sites or between visits
- Usage analytics from Google Analytics: the pages you view, how you arrived, your browser, device type and approximate location. If you accept cookies on the cookie banner, Google Analytics also sets cookies so it can recognise your return visits. Until you accept, or if you decline, it sets no cookies and receives only cookieless signals that can’t recognise you from one visit to the next
3. How we use your information
We use the information we collect to:
- Run the waitlist
- Email you once when Catchable is ready for you
- Understand how many people are interested in Catchable and which channels they find us through
- Detect and prevent abuse, such as bots and repeated sign-ups
We do not sell your personal data. We do not use it for advertising, and we don’t send newsletters or marketing sequences. Joining the waitlist doesn’t trigger any email; the only one we plan to send is the launch email.
4. Third-party service providers
We share data with third-party providers only as necessary to operate the Service. These providers are:
- Supabase (Supabase, Inc.): the database where your signup is stored, and the server function that receives the form
- Cloudflare (Cloudflare, Inc.): website hosting, bot protection (Turnstile), cookieless analytics (Web Analytics), and forwarding of mail sent to hello@catchable.io
- Google (Google LLC): Google Analytics, receiving the usage data described in Section 2 (with cookies only if you accept them)
Each provider operates under their own privacy policy and data processing terms.
5. Data retention
We retain your data only as long as necessary to run the waitlist and launch Catchable.
- Waitlist data is kept until Catchable launches, plus 12 months, unless you ask us to delete it sooner
- You may request deletion at any time by emailing hello@catchable.io; we remove it from our systems, including backups, within 30 days
- Request logs held by Supabase and Cloudflare expire on those providers’ own retention schedules
6. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Receive a copy of your data in a portable format
If you’re in India, you have these rights under the Digital Personal Data Protection Act, 2023. If you’re in the EU or UK, you have them under the GDPR, including the right to complain to your local data protection authority.
To exercise any of these rights, email hello@catchable.io. We will respond within 30 days.
7. Data transfers
Mono is based in India. Waitlist data is stored with Supabase. The website is served by Cloudflare from its global network, so pages may be delivered from a data center near you. Google processes analytics data in the United States and other countries where it operates.
This means your data is transferred and processed outside your country of residence. By using the Service, you consent to this transfer.
8. Children
The Service is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.
9. Security
We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or misuse. All traffic between your device and the Service is encrypted in transit using HTTPS. The waitlist database is reachable only from our own server code, never from your browser, and we don’t store IP addresses. No system is completely secure, and we cannot guarantee absolute security.
10. Cookies and analytics
We use Google Analytics to understand how the site is used. Analytics cookies
are off until you turn them on: on your first visit we ask through a banner,
and we set none unless you accept. If you decline, or ignore the banner,
Google Analytics runs in a restricted, cookieless mode and receives only the
limited signals described in Section 2. We record your choice in a small
first-party cookie (catchable_consent) that lasts 12 months, after which we
ask again. That cookie is strictly necessary to remember your choice, and you
can change your mind at any time from the “Cookie settings” link in the site
footer. We don’t use Google’s advertising features.
We also use Cloudflare Web Analytics to count visits. It works without cookies, local storage or fingerprinting, doesn’t track you across sites or between visits, and gives us only aggregate numbers.
The sign-up form uses your browser’s session storage to remember the campaign tags on the link you arrived from, so they can be saved with your signup. That storage stays in your browser tab, is cleared when you close it, and is not used for tracking.
Cloudflare Turnstile checks that a real person is submitting the form. It runs only on the form, and Cloudflare processes the signals it collects under its own privacy policy.
You can block scripts or clear storage in your browser at any time; the site still works, though the form needs Turnstile to submit.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will update the “Last updated” date when changes are made.
12. Contact
For privacy-related questions or requests, contact us at:
Mono Software (OPC) Private Limited
Nagpur, Maharashtra, India
hello@catchable.io
Related