Legal

Privacy Policy

Last updated September 20, 2026

This policy explains what PandaCat Labs (“we”, “us”) collects when you use our website, our applications and anything else we offer (together, the “service”), what we do with it, and the choices you have. It is written to cover everything we make; where a particular product handles something differently, we'll tell you in that product. The summary is here to help; the full policy below is the one that counts.

1. 1. What we collect
2. 2. How we use it
3. 3. Who else sees it
4. 4. Google account data
5. 5. Other connected accounts
6. 6. Our mobile apps
7. 7. This website
8. 8. How long we keep it
9. 9. Keeping it safe
10. 10. Your choices and rights
11. 11. Children
12. 12. Changes
13. 13. Contact

01What we collect

Things you give us.

• Contact details — your email address when you sign up, join a waitlist or write to us, and a username or phone number where a product uses one.
• What you send us — whatever you type, upload, record or submit so the service can do what you asked: text, pictures, documents, recordings, and the results the service produces for you.
• Logins and access you choose to share — where a feature signs in to another website or service on your behalf, the credentials or access tokens needed to do that, and details of any account it creates for you at your request.
• Billing details — if you buy something, your payment is handled by a payment processor. We see your name, your billing email and whether you've paid, not your full card number.

Things from accounts you connect. If you connect another service — for example a Google account — the service can read and act on data in it only as far as needed to do what you ask. See sections 4 and 5.

Things collected automatically. Basic technical records of how the service is running — times, errors, and how much of any applicable limit you've used. Our website host keeps standard server logs, such as IP addresses (see section 7).

02How we use it

• To provide the service: understanding what you've asked for, carrying it out, and keeping the results available to you.
• To set up and support your account, answer your emails, and fix things when they break.
• To apply any plan limits and take payment.
• To keep the service safe and prevent misuse.
• To improve the service — understanding what breaks and what people need.
• To meet legal obligations.

We don't sell your personal information. We don't use it for advertising. Where a feature uses artificial intelligence, we don't use what you send us or your connected-account data to train AI systems — ours or anyone else's.

The service runs on its own, but people at PandaCat Labs may look at what you've sent when you ask us for help, when something has gone wrong and we need to fix it, or when we need to check for misuse. We keep that to what's needed.

03Who else sees it

We share information only with companies that help us run the service, only as much as each one needs, and only to provide the service to you:

• Hosting and infrastructure. The computers, storage and networks the service runs on. Our website is hosted by Cloudflare.
• AI providers. Where a feature uses artificial intelligence, the relevant parts of what you've sent are passed to an AI service to produce the result — which can include text or images from documents, messages or web pages the service is working with for you. Where a provider offers settings that stop it keeping your data or training on it, we turn them on.
• Payments. Purchases go through our payment processor.
• Messaging and email. Whichever service carries messages between you and us, or between you and the service, sees them in transit. Its own privacy policy applies.
• Services a feature uses for you. For example a search provider, or a website the service visits on your behalf — which sees what any visitor would, plus whatever the service enters there at your request.

We may also share information if the law requires it, to protect someone's safety, or as part of a merger or sale of our business — in which case this policy still applies to your information.

04Google account data

If you connect a Google account, the service can — depending on what you allow — read and write data in the Google services you approve, such as Gmail drafts, Calendar, Drive files, Docs, Sheets, Slides, Contacts and Tasks. It uses them only to do what you ask.

PandaCat Labs' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• we use Google data only to provide and improve features you can see and use in the service;
• we send it to AI providers only to carry out your request, and never to train or improve AI models;
• we don't sell it, use it for advertising, or let people read it except with your permission, for security, or when the law requires it.

You can disconnect at any time from your Google Account permissions page, or by asking us.

05Other connected accounts

You may connect other services, and we use each one only for the tasks you ask for — nothing more. Where a feature can spend money, make a commitment in your name, or do something that can't easily be undone, it asks you first.

You can disconnect any of these by telling us, or by removing access in that service's own settings.

06Our mobile apps

Where we offer a mobile app, it asks only for the permissions the features you use actually need, and says why at the time. Anything that can be done on your own device rather than on our computers is done on your device — so, for example, speech is turned into text on the phone where the phone can do it. Our apps carry no advertising, no third-party analytics and no crash-reporting tools.

07This website

pandacatlabs.com uses no cookies, analytics or tracking. It's hosted by Cloudflare, which processes standard request data such as IP addresses to serve and protect the site. Fonts are loaded from Google Fonts, so Google receives your IP address when the page loads. If you write to us from the site, the link opens your own email app, and we get your email address when you send it.

08How long we keep it

We keep what you've sent us, what the service has produced for you, and your connected-account access for as long as you use the service, because that's what makes it useful. You can ask us to delete any of it at any time.

When you leave, or ask us to delete everything, we delete your data within 30 days — except anything the law requires us to keep, such as billing records. Waitlist and enquiry emails are deleted if you ask, or once we no longer need them.

09Keeping it safe

The service runs on computers we manage. Access is limited to the people who run it, and any logins you share are kept separately from everything else. No system is perfectly secure, though, so we can't promise that nothing will ever go wrong. If a problem ever affects your information, we'll tell you as the law requires.

10Your choices and rights

Wherever you live, you can ask us to:

• tell you what personal information we hold about you, and send you a copy;
• correct it;
• delete it, or delete one particular item or connected account; and
• stop using it for anything other than providing the service to you.

Email hello@pandacatlabs.com from the address we know you by, and we'll reply within 30 days. We may ask you to confirm it's you. We won't treat you differently for asking.

California residents. The California Consumer Privacy Act gives you the rights above, and the right to know what categories of information we collect (listed in section 1), where it comes from (you, and accounts you connect), why (section 2) and who we share it with (section 3). We don't sell personal information or share it for cross-context behavioral advertising, and we don't use sensitive personal information for anything beyond providing the service. You can also have someone you've authorised make a request for you.

11Children

The service is for adults 18 and over. We don't knowingly collect information from children. If you think a child has given us information, tell us and we'll delete it.

12Changes

If we change this policy, we'll update the date at the top. If a change matters, we'll tell you by email, or in the service, before it applies.

13Contact

PandaCat Labs · California, USA
hello@pandacatlabs.com