Privacy Policy

Last updated: October 21, 2026

This Privacy Policy explains what data SuperCat (“we,” “us”) collects when you use our service, how we use it, and your choices. This document describes our current practice; it is not a substitute for independent legal advice.

Who we are

SuperCat is an AI service, reached over chat (for example WhatsApp, Zalo, SMS, Microsoft Teams, Google Chat or a website chat widget), that designs, builds, and hosts real websites and applications for individuals and businesses (“the Service”). This policy covers supercat.app and the Service itself; it does not cover the content or data practices of the individual websites/apps we build for customers, which each customer separately owns and operates.

What we collect

  • Conversation content. Messages you send us over WhatsApp, Zalo or another connected channel — what you’re asking us to build, and any business details you share to help us build it (business name, offer, contact info, images, and similar).

  • Account and business information. Details you give us to build and operate your site (e.g. a bank account for a payment QR, a domain name, branding).

  • Published site content. The files, data, and configuration of the website or app we build and host for you.

  • Basic technical data. Standard web request logs (IP address, browser, timestamps) for security and to keep the Service running.

  • Website analytics (only when you visit supercat.app). We use PostHog (servers in the United States) to record page views, clicks and form interactions, page errors, and session recordings (on-page text and input fields are masked; only interactions and layout are kept), to understand which pages are useful. PostHog stores an anonymous identifier in your browser’s cookies/local storage. We do not use this for advertising and do not sell it.

We do not run cross-site tracking on supercat.app or on customer-published sites by default; if that changes, we’ll update this policy and any relevant opt-in before it goes live.

How we use it

  • To understand what you want built, and to build, deploy, and host it.
  • To operate and secure the Service (fraud/abuse prevention, debugging).
  • To fix bugs and improve the Service: our staff may review conversations to find the cause of a problem. General technical lessons drawn from them are written anonymously (no business names, domains, personal data or secrets) and can help us build better for other customers.
  • Reusable templates: for your public website we may capture a copy with identifying details removed (images, emails, phone numbers, business names, secrets) and reviewed by our staff, as a starting point for other customers. We do not do this for private sites, and if you prefer we don’t, tell us at contact@supercat.app and the template is withdrawn.
  • To contact you about your project or account.

Building your request may involve sending relevant conversation content to third-party AI model providers (for generating text, code, images, or other media) and to service providers we use to host and operate the Service (e.g. cloud infrastructure). They receive it only to do the task we give them, not for their own purposes. We do not sell your personal data, use it for advertising, or train AI models on it.

Connecting your Google account

If you choose to connect your own Gmail, Google Drive, or Google Calendar so SuperCat can act on your behalf (e.g. sending an email, saving a file it built for you, or managing an event), here’s specifically what that means:

  • What we access. Only what’s needed to draft/send an email as you, save a file to your Drive, or create/view calendar events — never your existing inbox, and never the rest of your Drive. We do not read your past emails or browse your existing files.
  • How we use it. Solely to carry out the specific request you made in that conversation. We do not use your Google data for advertising, and we do not use it to develop, improve, or train any general-purpose AI/ML model. SuperCat’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
  • Where it’s held. Your Google access is stored securely on our own servers — it is never exposed to, or handled directly by, the AI models running your build sessions.
  • Disconnecting. You can revoke this access at any time by asking SuperCat to disconnect it, or directly from your Google Account’s security settings at myaccount.google.com/permissions — we recommend doing both for a complete disconnection.

Retention

We keep conversation and account data for as long as your account/site is active, and for a reasonable period after in case you return. You can ask us to delete data tied to you at any time — email contact@supercat.app. We may need to retain some records where we have a legal obligation to do so.

Cookies

We use functional cookies/local storage (e.g. to remember your light/dark theme preference and language choice) and the anonymous PostHog identifier described above. We do not use third-party advertising cookies. You can clear or block cookies in your browser; the pages still work.

Children’s privacy

The Service is not directed at anyone under 13, and we do not knowingly collect personal data from children under 13.

Changes to this policy

We may update this policy from time to time; the “Last updated” date above reflects the latest revision. Material changes will be communicated before they take effect where practical.

Contact us

Questions about this policy, or a request to access/correct/delete your data: contact@supercat.app