Privacy

Cato helps people challenge UK parking tickets. You can reach us about anything on this page at support@catoparkingappeals.co.uk.

What you type. The description of what happened, plus the ticket details you enter (issuing authority, date, PCN reference, vehicle registration, contravention code, location, penalty amount, appeal stage, and whether you were the driver). If you upload a photo of your ticket, we read the details from it.

Please note your description is free text, so it may contain whatever you choose to include - your name, your employer, your health, or other people. Only include what is relevant to your appeal.

If you create an account. Your email address, and the appeals you save: the analysis, the letter, the evidence list, and the outcome you record.

Technical. Your IP address, used to apply usage limits and prevent abuse.

We do not sell your data or use it for advertising. We use these processors to run the service:

• Anthropic - your description and ticket details are sent to Anthropic's Claude models to produce the assessment and letter. This is the core of how the tool works.
• Supabase - stores your account and saved appeals.
• Resend - sends the confirmation and follow-up emails (your email address only).
• Railway and Vercel - host the service.

Some of these providers process data outside the UK. Each of them publishes a data processing agreement incorporating the standard contractual clauses together with the UK International Data Transfer Addendum, and those are the safeguards these transfers rely on.

We process what you enter in order to provide the service you asked for (performance of a contract). We use your IP address for usage limits and security on the basis of our legitimate interest in keeping the service available and preventing abuse.

If you do not create an account, your appeal is not stored on our servers after the request completes - it stays in your browser only.

If you do create an account, we keep your saved appeals until you delete them or delete your account. If an account goes unused for 24 months we delete it and everything saved in it.

We keep the IP addresses used for usage limits and abuse prevention for 30 days.

You can access, correct, delete, or take a copy of your data. Two of these are built into the app and take effect immediately:

• Get a copy of everything we hold - use Download my data in your account menu.
• Delete everything - use Delete account in your account menu. This removes your appeals and your login. It cannot be undone.

For anything else, email us at the address above.

We do not use advertising or analytics cookies. If you sign in, we store your session in your browser so you stay logged in; clearing your browser data signs you out.