Privacy Policy

This Privacy Policy describes how Gone Coding Ltd. (“CatchPhi.sh”, “we”, “us”) collects, uses, and shares information when you use the CatchPhi.sh certificate transparency monitoring service (“Service”).

1. Information We Collect

We collect information you provide directly, including account details, billing information, rules you configure, and webhook destinations. When you use the Service, we process publicly-available Certificate Transparency log entries and metadata we generate to evaluate your rules. We also collect diagnostic data such as IP addresses, device information, and usage analytics to secure and improve the Service.

2. How We Use Information

We use collected information to deliver notifications, maintain the Service, respond to support requests, and improve detection quality. Rule definitions and webhook destinations are processed solely to provide CT monitoring for your organization.

3. Sharing of Information

We do not sell your personal information. We may share data with trusted subprocessors that help operate the Service (e.g., cloud hosting, email delivery, payment processors) subject to contractual safeguards. We may disclose information if required by law or to protect CatchPhi.sh and our customers.

4. Data Retention

We retain account information for as long as your subscription is active and for a reasonable period afterward to comply with legal obligations. Certificate matches and log metadata are stored for the retention window described in your plan, after which they are purged or anonymized.

5. Security

We implement administrative, technical, and physical safeguards to protect your data, including encryption in transit, least-privilege access, and routine security reviews. Despite our efforts, no method of transmission or storage is completely secure.

6. Your Choices

You may update account information through the dashboard or by contacting support. You can disable webhooks, delete rules, or cancel your subscription at any time. Email us at contact@catchphi.sh to request access, correction, or deletion of personal data.

7. International Transfers

If you access the Service from outside Hong Kong, your information may be transferred to, processed, and stored in Hong Kong or other countries where we operate.

8. Children’s Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If we become aware that a child has provided us data, we will delete it.

9. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-product messaging. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

10. Contact Us

If you have questions or concerns about privacy, contact contact@catchphi.sh.