Privacy policy

KatalystAI Ltd. is the data controller for personal data collected through this website and in the course of providing our services. Our registered address is 180 Sansome Street, Floor 4, San Francisco, CA 94104.

For any question about this policy or your data, contact hello@katalystsai.com.

Information you give us: your name, work email address, company, phone number where you provide it, and whatever you write in a contact or quote form. If you become a client, we also hold billing details and project correspondence.

Information collected automatically: pages visited, approximate location derived from IP address, device and browser type, referring source, and interaction events. This is collected through privacy-focused analytics and is used in aggregate.

We do not knowingly collect special-category data, and we ask that you do not include sensitive personal information in form submissions.

To respond to your enquiry and, where relevant, prepare a proposal. This is our legitimate interest in responding to someone who has contacted us about our services.

To deliver services under a contract with you, including project communication, invoicing and support.

To understand how the site is used so we can improve it. Analytics that are not strictly necessary run only with your consent.

To send occasional email updates, where you have explicitly opted in. Every such email carries a one-click unsubscribe link and we honour it immediately.

We do not sell personal data. We do not share it with advertising networks for their own purposes. We do not add enquiry form submissions to a marketing list without a separate, explicit opt-in.

If you contact us and we do not end up working together, your details stay in our records for the retention period below and you will not receive marketing emails from us.

Service providers who process data on our behalf under contract: hosting and infrastructure, email delivery, customer relationship management, analytics, and accounting. Each is bound to process data only on our instructions.

Professional advisers and regulators where we are legally required to disclose.

Where a provider is located outside your jurisdiction, transfers are covered by appropriate safeguards such as standard contractual clauses.

Enquiries that do not become projects: 24 months from last contact, then deleted.

Client records: seven years after the end of the engagement, which is the period our accounting and tax obligations require.

Marketing subscribers: until you unsubscribe, plus a suppression record so we do not accidentally re-add you.

Analytics data: retained in aggregated form; individual-level records are retained no longer than 14 months.

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format.

To exercise any of these, email hello@katalystsai.com. We will respond within 30 days and will not charge you for a reasonable request.

If you are unhappy with how we have handled your data, you have the right to complain to your local data protection authority. We would appreciate the chance to resolve it first.

We use a small number of cookies. Strictly necessary cookies keep the site working and do not require consent. Analytics cookies help us understand usage and run only if you accept them.

You can change your choice at any time, and you can block or delete cookies through your browser settings. Blocking strictly necessary cookies may break parts of the site.

Data is transmitted over TLS, stored with reputable providers, and access is limited to team members who need it for their role. Credentials are held in a managed password vault, never shared in plain text.

No system is perfectly secure. If a breach occurs that is likely to affect your rights, we will notify you and the relevant authority within the timescales the law requires.

We will update this page when our practices change, and revise the date at the top. Material changes affecting how we use data you have already given us will be notified to you directly where we hold contact details.