Privacy Policy

Last updated: October 4, 2026

This Privacy Policy explains what data SuperCat (“we,” “us”) collects when you use our service, how we use it, and your choices. This document describes our current practice; it is not a substitute for independent legal advice.

Who we are

SuperCat is an AI service, reached over chat (for example WhatsApp, Zalo, SMS, Microsoft Teams, Google Chat or a website chat widget), that designs, builds, and hosts real websites and applications for individuals and businesses (“the Service”). This policy covers supercat.app and the Service itself; it does not cover the content or data practices of the individual websites/apps we build for customers, which each customer separately owns and operates.

What we collect

  • Conversation content. Messages you send us over WhatsApp, Zalo or another connected channel — what you’re asking us to build, and any business details you share to help us build it (business name, offer, contact info, images, and similar).
  • Account and business information. Details you give us to build and operate your site (e.g. a bank account for a payment QR, a domain name, branding).
  • Published site content. The files, data, and configuration of the website or app we build and host for you.
  • Basic technical data. Standard web request logs (IP address, browser, timestamps) for security and to keep the Service running.

We do not currently run cross-site analytics tracking on supercat.app or on customer-published sites by default; if that changes, we’ll update this policy and any relevant opt-in before it goes live.

How we use it

  • To understand what you want built, and to build, deploy, and host it.
  • To operate and secure the Service (fraud/abuse prevention, debugging).
  • To improve how SuperCat works, including reviewing past conversations to fix bugs or improve responses.
  • To contact you about your project or account.

Building your request may involve sending relevant conversation content to third-party AI model providers (for generating text, code, images, or other media) and to service providers we use to host and operate the Service (e.g. cloud infrastructure). We do not sell your personal data.

Connecting your Google account

If you choose to connect your own Gmail, Google Drive, or Google Calendar so SuperCat can act on your behalf (e.g. sending an email, saving a file it built for you, or managing an event), here’s specifically what that means:

  • What we access. Only what’s needed to draft/send an email as you, save a file to your Drive, or create/view calendar events — never your existing inbox, and never the rest of your Drive. We do not read your past emails or browse your existing files.
  • How we use it. Solely to carry out the specific request you made in that conversation. We do not use your Google data for advertising, and we do not use it to develop, improve, or train any general-purpose AI/ML model. SuperCat’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
  • Where it’s held. Your Google access is stored securely on our own servers — it is never exposed to, or handled directly by, the AI models running your build sessions.
  • Disconnecting. You can revoke this access at any time by asking SuperCat to disconnect it, or directly from your Google Account’s security settings at myaccount.google.com/permissions — we recommend doing both for a complete disconnection.

Retention

We keep conversation and account data for as long as your account/site is active, and for a reasonable period after in case you return. You can ask us to delete data tied to you at any time — email [email protected]. We may need to retain some records where we have a legal obligation to do so.

Cookies

We use minimal, functional cookies/local storage (e.g. to remember your light/dark theme preference and language choice). We do not currently use third-party advertising or cross-site tracking cookies.

Children’s privacy

The Service is not directed at anyone under 13, and we do not knowingly collect personal data from children under 13.

Changes to this policy

We may update this policy from time to time; the “Last updated” date above reflects the latest revision. Material changes will be communicated before they take effect where practical.

Contact us

Questions about this policy, or a request to access/correct/delete your data: [email protected]