1. Controller
Controller for CatchTex is Johann Größbacher, Feldgasse 68, 3270 Scheibbs, Austria, email j.groessbacher@jgreaterlab.com.
Privacy
Privacy policy
Last updated: 24 August 2026
2. What we process
Depending on how you use CatchTex we process: account data (email, optional display name and assistant name, password hash, optional city/region for local or news-related AI answers, language preference), session cookies when signed in, saved memories (notes, links, media and file metadata, tags), stored uploads, AI chat history and short summaries on our servers, semantic search indexes derived from your card text, AI usage counters, billing identifiers via Stripe (customer/subscription IDs, plan status), and—if you enable them—verified inbound mail addresses or Gmail connection data.
3. Purposes and legal bases
We process data to provide the service (Art. 6 (1)(b) GDPR), to secure and operate the hosting (Art. 6 (1)(f) GDPR), to meet legal duties (Art. 6 (1)(c) GDPR), and—where you opt in—for features such as AI enrichment or connected email (Art. 6 (1)(b)/(a) GDPR).
4. Processors and third parties
Hosting and email infrastructure run on Hostinger. Payments and subscription management use Stripe. AI enrichment, chat, and search send relevant portions of your vault (e.g. card text, tags, media you attach for analysis, recent chat turns) to Google Gemini (Google Ireland / Google LLC). For some questions Tex may also use web search via Google to fetch public information—never another user's vault. Your data is stored per account; Tex and server-side search only access the signed-in user's content. Where Google processes data outside the EU/EEA (e.g. the United States), this relies on Google's contractual safeguards (such as standard contractual clauses) under its cloud and API terms. We do not sell your data.
5. Cookies and local storage
Signed-in use needs a session cookie. Without an account, sample or locally captured cards may remain in your browser only (local storage) and are not sent to our database; Tex and the cloud vault require sign-in. Theme, language, and similar preferences may also be stored locally. No analytics or marketing cookies.
6. Retention and deletion
Account, memory, chat, embedding, and media data are kept while your account exists. You can delete individual content or the whole account in the app; related server data including uploads and search indexes are then removed. Billing records may be retained as required by tax or commercial law.
7. Your rights
You may request access, correction, deletion, restriction, or portability where the law provides for it, and object to processing based on legitimate interests. Complaints may be filed with the Austrian Data Protection Authority (www.dsb.gv.at).
8. Contact
Questions about privacy: j.groessbacher@jgreaterlab.com. Company details: Legal notice
9. Separation between accounts
Each account has its own vault on the server. Database queries, file storage, AI search, and Tex only use data tied to your signed-in session. Other users' cards and files are not readable through the app. Keep your login details confidential—anyone with access to your session could see your vault.