Catalyst Genie Privacy Policy

Catalyst AI Labs (a Partnership firm), having its registered office at No. 4, Ground Floor, Thimmaiah Road, Near Congress Committee, Bengaluru – 560001, Karnataka, India ("Company", "we", "us", or "our"), is committed to protecting the privacy of individuals who access or use the Catalyst Genie website (https://www.catalystgenie.ai/) and application (collectively, the "Service").

This Privacy Policy describes how we collect, use, process, store, share, and protect your personal information, and the choices and rights available to you regarding your information. This Policy should be read together with our Terms and Conditions. By accessing or using the Service, you consent to the practices described in this Privacy Policy.

This Privacy Policy applies to all Users of the Service and is designed to comply with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable data protection laws of India, including the Information Technology Act, 2000 and the rules made thereunder. This Policy currently addresses Users located in India; should the Service expand to other jurisdictions, this Policy will be updated to reflect applicable regional requirements (such as the GDPR or CCPA), as relevant.

We use the information we collect for the following purposes:

• To create, maintain, and secure your Account and provide access to the Service;
• To process subscription payments, invoices, and manage billing;
• To operate, maintain, personalise, and improve the Service and develop new features;
• To analyse usage patterns and Service performance through analytics tools;
• To communicate with you regarding your Account, transactional notices, updates, and – where you have consented – promotional communications;
• To detect, investigate, and prevent fraudulent transactions, unauthorised access, and other illegal or malicious activities;
• To comply with applicable legal, regulatory, and tax obligations; and
• To respond to your enquiries, feedback, and support requests.

We use cookies and similar tracking technologies to operate and improve the Service. Specifically, we use Google Analytics to understand how Users interact with our website and application, including page views, session duration, and traffic sources. Google Analytics may set its own cookies and collect data in accordance with Google's Privacy Policy.

We currently do not use the Service for third-party advertising or ad-retargeting purposes. You can control or disable cookies through your browser settings; however, disabling essential cookies may affect the functionality of the Service.

We process your personal data on the basis of your consent, as provided at the time of registration and continued use of the Service, and, where applicable, on the basis of the performance of a contract with you, compliance with our legal obligations, and our legitimate interests in operating and securing the Service. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal, by contacting us at adnan@catalystgenie.ai.

We do not sell your personal information. We may share your information in the following circumstances:

• Payment Processors: with third-party payment gateway(s)/processor(s) engaged by the Company (currently under evaluation as part of our pilot testing phase) solely to process your subscription payments.
• Service Providers: with vendors who perform services on our behalf, such as cloud hosting, analytics (e.g., Google Analytics), customer support tools, and email delivery services, under appropriate confidentiality and data-processing obligations.
• Legal and Regulatory Requirements: where required to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of the Company, our Users, or the public.
• Business Transfers: in connection with any merger, acquisition, restructuring, or sale of assets involving the Company, subject to equivalent confidentiality protections.
• With Your Consent: with any other third party where you have provided explicit consent for such sharing.

We implement reasonable technical, administrative, and organisational security measures – including encryption in transit, access controls, and secure hosting infrastructure – designed to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. Your data may be stored on servers located in India or with reputable cloud infrastructure providers, which may involve processing outside India; where this occurs, we take reasonable steps to ensure equivalent levels of protection.

We retain your personal information for as long as your Account remains active, or as necessary to provide the Service, comply with our legal obligations (including tax and accounting requirements), resolve disputes, and enforce our agreements. Upon account closure or a valid deletion request, we will delete or anonymise your personal information, except where retention is required by applicable law.

Subject to applicable law, including the DPDP Act, you have the following rights in respect of your personal data:

• Right to Access: to request a summary of the personal data we hold about you and the processing activities undertaken;
• Right to Correction and Updating: to request correction of inaccurate or incomplete personal data;
• Right to Erasure: to request deletion of your personal data that is no longer necessary for the purpose it was collected, subject to legal retention requirements;
• Right to Withdraw Consent: to withdraw previously given consent for processing at any time;
• Right to Grievance Redressal: to raise a grievance regarding the processing of your personal data, as described in Section 12 below.

To exercise any of these rights, please contact us at adnan@catalystgenie.ai. We will respond to your request within a reasonable time and in accordance with applicable law.

The Service is intended for use only by individuals who are eighteen (18) years of age or older. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take reasonable steps to delete such information promptly.

In accordance with the Information Technology Act, 2000, the rules made thereunder, and the DPDP Act, the Grievance Officer for the Service can be contacted as follows:

Any complaints, concerns, or grievances relating to the processing of your personal data may be directed to the Grievance Officer, who shall endeavour to redress the same within the timelines prescribed under applicable law.

The Service may contain links to third-party websites or integrate third-party services (such as payment processors or analytics providers). This Privacy Policy does not apply to, and we are not responsible for, the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party service you interact with.

The Service is currently intended for Users located in India. If you access the Service from outside India, you do so on your own initiative and are responsible for compliance with local laws, to the extent applicable. Should the Company expand its operations to other jurisdictions, this Privacy Policy will be updated accordingly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Policy on the Service with a revised "Effective Date." Your continued use of the Service after such changes constitutes your acceptance of the updated Policy.