Security and your data

Items marked to be confirmed are placeholders that the operator must complete before launch.

What we store

Catchment stores daily totals for each business, such as views, calls and clicks. It does not store records about individual visitors or customers.

How we protect it

• Connection tokens and secrets are encrypted at rest with AES-256-GCM.
• Sign-in supports two-factor authentication, and it is required for admins.
• Sessions end after an idle timeout, and you can sign out everywhere.
• A strict content security policy limits what each page can load or run.
• Each agency's data is kept separate from every other agency's.
• Backups run nightly.

Deleting your data

You can cancel a workspace, disconnect a platform or ask us to delete your data. See Delete your data.

Where it is hosted

Hosting location: hosting location to be confirmed

Report a security issue

Email security contact email to be confirmed. Please include enough detail for us to reproduce the issue, and do not access other people's data. Our privacy policy explains how we handle information.