Privacy Policy
Last updated: 10/7/26
1. Introduction
Netch ("Netch", "we", "us", or "our") is a professional networking platform designed to enable intentional one-to-one online meetings between professionals.
This Privacy Policy explains how we collect, use, store, and protect personal data when you access or use the Netch application, website, and related services (collectively, the "Service").
Netch processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
Data Controller: Netch
Email: info@netch.pro
3. Personal Data We Collect
3.1 Account and Profile Data
When you register and use Netch, we collect the following personal data:
- Full name
- Email address
- Authentication method (e.g. email, OAuth provider)
- Country and city
- Company name
- Professional industries
- Skills
- Tools
- Professional goals
- Profile completion status and percentage
3.2 Usage, Interaction, and Product Analytics Data
We use PostHog and Google Analytics as our product analytics providers. Both process data on our behalf under a Data Processing Agreement in accordance with Article 28 GDPR. Analytics data is used strictly to improve platform functionality, usability, and performance. We do not use analytics data for behavioral advertising, we do not conduct automated decision-making that produces legal or similarly significant effects, and we do not sell analytics data to third parties.
We collect data related to your interaction with the Service, including:
- Sign-up and onboarding progress
- Profile completion milestones
- Swipe activity and session metrics
- Interests sent and received
- Matches created
- Chats automatically created after a match
- Meetings booked (excluding meeting content)
- Time-based metrics (e.g. time from signup to match or meeting)
3.3 Reports, Safety, and Moderation Data
If a user submits a report, we collect:
- Reported user identifier
- Reporting user identifier
- Reason for the report
- Optional text description
- Date and time of the report
3.4 Administrative and Security Data
For operational and security purposes, we may process:
- User account status (active, suspended, deleted)
- Suspension periods and enforcement actions
- Administrative role assignments
- Application configuration and security logs
4. Marketing, Advertising, and Sponsored Content
4.1 Advertising Platforms
Netch may use third-party advertising platforms, such as Google Ads and Meta Ads, to promote the Service. These platforms may process certain data (e.g. cookies, device identifiers, conversion events) in accordance with their own privacy policies and subject to user consent where required.
4.2 Sponsored Content and Partnerships
Netch may display sponsored content, promotional banners, or send newsletter communications that include sponsorships or partnerships. In such cases:
- Sponsors do not receive access to users' personal data
- We do not share email addresses, profile information, or identifiable user activity with sponsors
- Sponsored content is managed internally by Netch
4.3 No Sale of Personal Data
Netch does not sell personal data to third parties. We do not provide advertisers or partners with access to identifiable user information.
5. Cookies and Tracking Technologies
Netch uses cookies and similar technologies for:
- Authentication and security
- Core platform functionality
- Analytics and performance measurement
- Advertising and conversion tracking (where consent is given)
Users located in the European Union are presented with a cookie consent banner and may manage or withdraw consent at any time through cookie settings. For more details, please refer to our Cookie Policy.
Netch's business model is not based on the sale of personal data. The platform does not monetize user behavior through data resale or profiling.
6. Purpose of Processing
We process personal data to:
- Provide and operate the Service
- Enable professional networking and meetings
- Improve functionality and user experience
- Monitor usage and prevent abuse
- Manage reports, moderation, and safety actions
- Conduct marketing and promotional activities
- Comply with legal obligations
7. Legal Basis for Processing (GDPR)
We process personal data on the following legal bases:
- Contractual necessity – to provide the Service
- Legitimate interest – platform improvement, security, abuse prevention
- Consent – marketing cookies, advertising, optional features
- Legal obligation – compliance with applicable laws
8. Data Storage and Security
Personal data is stored on secure servers and protected using industry-standard security measures. Access to personal data is restricted to authorized personnel only.
9. Data Retention
We retain personal data only for as long as necessary:
- Active accounts: for the duration of the account
- Suspended accounts: until suspension expires or account is deleted
- Deleted accounts: anonymized or retained only where legally required
- Reports and moderation records: retained for safety, legal, and audit purposes
- Analytics data: retained for a maximum period of 24 months unless a shorter retention period is implemented for operational purposes
10. Data Sharing and Disclosure
We may share personal data only with:
- Infrastructure and service providers necessary to operate the Service, including:
- Supabase (database hosting, authentication, infrastructure)
- PostHog (product analytics)
- Google Analytics (product analytics)
All service providers process personal data under Data Processing Agreements in accordance with Article 28 GDPR and implement appropriate technical and organizational security measures.
- Legal authorities, when required by law
We do not engage in unrestricted data sharing or data brokerage.
11. International Data Transfers
If personal data is processed outside the European Union, appropriate safeguards are implemented, including standard contractual clauses where applicable.
12. User Rights
Under GDPR, users have the right to:
- Access their personal data
- Rectify inaccurate or incomplete data
- Request deletion of personal data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
12.1 United Kingdom (UK GDPR)
If you are located in the United Kingdom, your personal data is processed in accordance with the UK GDPR and the Data Protection Act 2018. You have the same rights described above.
12.2 United States – California Residents (CCPA / CPRA)
If you are a resident of California, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to:
- Know what personal information we collect, use, and disclose
- Request deletion of your personal information
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information
Netch does not sell personal information as defined under CCPA/CPRA. Requests can be submitted by contacting info@netch.pro.
13. Children's Privacy
Netch is intended for professionals and is not designed for individuals under the age of 18. We do not knowingly collect data from minors.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Any changes will be reflected by updating the "Last updated" date.
15. Contact
For questions regarding this Privacy Policy or data protection matters:
Email: info@netch.pro
Company: Netch