Legal
Privacy
This page explains what this website stores about you, why, who else sees it, and for how long.
Last updated: 17 October 2026
Who is responsible
Ba Nguyen, Gia Lam, Hanoi 10000, Vietnam. Email: hello@gotchu.support. Full details are in the imprint.
Gotchu is run from Vietnam, outside the European Union. The data protection rules of the EU (GDPR) and the UK still apply to what we do with your data, and you have every right listed below.
The early-access form
When you request early access we store your name and work email address, the number of Shopify stores and the monthly support-mail volume you chose, the language of the page you used, and the time of the request.
We use this to reply to you about early access and to decide whom to invite first. A person makes that decision; nothing is decided automatically.
The legal basis is our legitimate interest in answering business enquiries about our product (Art. 6 (1) (f) GDPR). If you are requesting access for yourself as a sole trader, it is also a step you asked for before a possible contract (Art. 6 (1) (b) GDPR). Filling in the form is voluntary; without your email address we cannot reply.
If you send the same email address twice, we keep the first request and store nothing new. We do not use your address for a newsletter or advertising unless you separately ask for one.
If you write to hello@gotchu.support, or we write to you, your email address and the content of the messages are processed by Cloudflare (Cloudflare Email Routing, which receives our mail and forwards it), by Google (Gmail, where we read it) and by Brevo (Sendinblue SAS, Paris, France), which sends our replies. Brevo records whether a message was delivered, and may record whether it was opened and which links were clicked.
Protection against abuse
The form is protected by Cloudflare Turnstile, which checks whether a request comes from a person rather than a bot. When the form comes into view, your browser loads Turnstile from Cloudflare, and Cloudflare processes your IP address and technical details about your browser and connection. Cloudflare does this for us as our processor, and also, as an independent controller, to improve Turnstile's bot detection: see Cloudflare's Turnstile privacy addendum. When you send the form, we pass the Turnstile result and your IP address to Cloudflare to check it.
We also limit how many requests can come from one network. For this we do not store your IP address. We store a salted one-way hash of it (for IPv6, of its /64 network) with a counter for the current hour, and delete older counters at the latest within a day.
The legal basis for both is our legitimate interest in keeping the form free of spam and abuse (Art. 6 (1) (f) GDPR).
Hosting and server logs
This site and the form run on Cloudflare (Cloudflare Pages, Pages Functions, the D1 database and Cloudflare's security features). Delivering any web page requires processing your IP address and the request details; Cloudflare does this to serve the page and to protect it against attacks. Form requests are stored in a Cloudflare D1 database whose primary location is in Western Europe. Our own logs record only that a request was accepted or rejected and why, never what you typed.
Who receives your data, and transfers outside the EU
Recipients are the providers named above: Cloudflare, Inc. (USA), Google LLC (USA) and Brevo / Sendinblue SAS (France). Cloudflare and Google may process data in the USA. Both are certified under the EU-U.S. Data Privacy Framework and its UK Extension (Art. 45 GDPR), and also use the EU standard contractual clauses (Art. 46 GDPR). We read requests and email from Vietnam. We do not sell your data or share it with anyone else.
How long we keep it
We delete your early-access request 12 months after you send it, or sooner if you ask us to. Rate-limit counters are deleted within a day. Emails are kept as long as we need them to deal with your enquiry, and no longer than 12 months after the last message.
Cookies and tracking
This site sets no cookies of its own and uses no analytics, advertising or tracking tools. Fonts and videos are served from this site; your browser does not contact Google or any other font or video service. Cloudflare Turnstile is the only third-party code, and it runs only for the form, as described above.
Your rights
You can ask for access to your data, correction, deletion, restriction of processing and a copy of the data you gave us (Art. 15–18, 20 GDPR). You can object at any time to processing based on our legitimate interest (Art. 21 GDPR); we will then stop, unless the processing is needed to defend legal claims. Write to hello@gotchu.support.
You also have the right to complain to a data protection supervisory authority, in particular in the country where you live or work. In the UK, this is the Information Commissioner's Office (ico.org.uk).
Changes
If what this site does with your data changes, we update this page first and change the date at the top.