Privacy policy
Short version: this website does not track you. No analytics, no pixels, no advertising, no cookies. For the leads side of Kateion, we use only public posts businesses wrote about themselves, keep the minimum, and remove anyone who asks.
Last updated 2026-10-06
Who we are
Kateion is run by Ivan Popov, a sole trader based in Larnaca, Cyprus (“we”, “us”). We are the controller of the personal data described here. Contact: hello@kateion.com.
Part 1: visitors to this website
What we collect
| Data | Why | Kept for | Legal basis |
|---|---|---|---|
| Server logs: IP address, browser user agent, page requested, time, status code | Keeping the site running and secure, and stopping abuse | 14 days | Legitimate interest |
| Messages you send us by email or through the contact form: your name, email, company, website and what you write. With form messages we also keep a one-way hash of your IP address and your browser’s user agent, only to stop spam | Answering you and, if you start a pilot, providing the service | As long as we are talking, then up to 2 years; longer only where accounting law requires it | Steps before a contract, or legitimate interest |
| Your cookie choice, stored in your own browser | So the notice does not come back | Until you clear it | Strictly necessary |
What we do not do
- No Google Analytics or any other analytics, no tracking pixels, no session recording, no advertising tags.
- No cookies. Fonts and every other file are served from our own server; nothing loads from third parties.
- No selling or sharing of visitor data.
Google Search Console and Bing Webmaster Tools
We use Google Search Console and Bing Webmaster Tools to see how the site appears in search: which searches show our pages, and how often people click through. That information comes from Google’s and Microsoft’s own search data, in aggregate. Nothing is added to our pages for it, and it does not identify you to us.
Part 2: businesses that appear in Kateion lists
Kateion finds public posts in which businesses talk about their own situation (for example a price change, an outage, or a hire) and passes a link to them to our customers, who may offer help.
- Source: public posts only, on X, the open web and public forums. We do not use private messages, closed groups, bought lists or leaked data.
- What we keep: the link, a short quote, the business name and website if they were made public, and our scores. We never guess who an anonymous account belongs to and never collect private emails or phone numbers.
- Legal basis: legitimate interest, ours and our customers’, in finding businesses that have publicly said they need a product or service. We have weighed this against your interests: the data is public, about business matters, minimal, and easy to remove.
- Who receives it: customers subscribed to the relevant feed. They agree to use it only for genuine, relevant outreach by a person, with no spam or automated messages, and to honour opt-outs.
- How long: source items are deleted after 180 days.
- Removal: ask to be removed and we do it the same working day, add you to a do-not-contact list, and tell customers who received the item.
Who processes data for us
Our hosting provider stores the server and its logs on our behalf. Our email provider handles messages you send us. The contact form uses Cloudflare Turnstile to tell people from bots: it runs in your browser, sends Cloudflare technical signals such as your IP address and browser details, and sets no tracking cookies. When we analyse public posts we send their text to language-model providers (such as xAI) for classification; no visitor data is sent to them.
Some providers are outside the EU. Where that is the case we rely on an adequacy decision or the European Commission’s standard contractual clauses.
Your rights
Under the GDPR you can ask to access, correct or delete your data, to restrict or object to how we use it, and to receive it in a portable form. Use the contact form (subject: Privacy request) or write to hello@kateion.com, and we will answer within one month, usually much sooner.
You can also complain to the supervisory authority in Cyprus, the Commissioner for Personal Data Protection (dataprotection.gov.cy), or to the authority where you live.
Changes
If this policy changes, we update the date at the top. Material changes are noted on this page for at least 30 days.
About your privacy
Does the Kateion website track me?
No. There is no analytics, no tracking pixel, no session recording and no advertising tag. Server logs are kept for 14 days to keep the site secure.
Does the website use cookies?
No. The only thing stored is your cookie choice, in your own browser’s local storage, and it is never sent to us.
What do you keep about businesses in Kateion lists?
The link to the public post, a short quote, the business name and website if they were made public, and our scores. Never private emails, phone numbers or guessed identities.
How long do you keep it?
Source items are deleted after 180 days. Emails you send us are kept while we are talking and then for up to two years, longer only where accounting law requires it.
Who receives lead data?
Only customers subscribed to the relevant feed. They agree to genuine, person-to-person outreach, no spam or automated messages, and to honour every opt-out.
How do I use my GDPR rights?
Use the contact form or write to hello@kateion.com to access, correct, delete, restrict or object to the use of your data. You can also complain to the Commissioner for Personal Data Protection in Cyprus or to the authority where you live.