Privacy Policy

1. Information We Collect

• Account information (name, email, password hash)
• Business information you provide (business name, category, content)
• Usage data (pages visited, features used, session duration)
• Device and browser information
• Payment information (processed securely by Stripe — we do not store card numbers)

2. How We Use Your Information

• To provide and improve the Platform
• To generate AI-powered content and recommendations
• To process payments and manage subscriptions
• To communicate service updates and support
• To analyze usage patterns and improve features
• To prevent fraud and enforce our terms

3. AI Data Processing

• Your business descriptions and content are processed by AI systems to generate outputs.
• We use anonymized, aggregated data to improve AI model quality.
• We do not sell your individual data to third parties.
• AI processing may involve third-party providers (Anthropic, OpenAI) under strict data processing agreements.

4. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe— payment processors for transaction processing
• Resend— email provider for transactional communications
• Anthropic, OpenAI— AI providers for content generation
• Law enforcement when required by law

5. Data Security

• All data is encrypted in transit (TLS) and at rest
• Passwords are hashed using industry-standard algorithms
• Access to production systems is restricted and audited
• We perform regular security reviews

6. Your Rights

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request account and data deletion
• Export: Download your data in a standard format
• Objection: Opt out of non-essential data processing

7. Cookies

• We use essential cookies for authentication and session management.
• We use analytics cookies to understand Platform usage (can be disabled).
• We do not use advertising cookies.

8. Data Retention

• Account data is retained while your account is active.
• After account deletion, data is purged within 30 days.
• Anonymized analytics data may be retained indefinitely.

9. Children's Privacy

The Platform is not intended for users under 18. We do not knowingly collect data from minors.

10. International Users

Data is processed in the United States. By using the Platform, you consent to this transfer.

11. Changes to This Policy

We will notify you of material changes via email or Platform notification.

12. Contact

Privacy inquiries: privacy@catalyst.space. You can also reach us through our contact page.