Effective Date: June 21, 2026
1. Introduction
Welcome to Catalyst Scope. We respect your privacy and are strictly committed to protecting your personal data. This Privacy Policy explains exactly what information we collect, how we use it, and your rights regarding your data.
2. Information We Collect
We believe in data minimization. We only collect what is strictly necessary to provide and secure our service:
- Account Information: We collect your email address when you sign up. This serves as your unique user identifier and is required for account security and recovery.
- Usage Data: To function, our system stores the search filters, keywords, and AI prompts you configure. This data is used solely to execute the analysis jobs you request.
- Security & Device Telemetry: To detect malicious actors, prevent unauthorized automated scraping, and maintain infrastructure stability, our forensic engine collects device string metadata, network location indicators (VPN, TOR, or datacenter status), and machine hardware indicators (including Canvas Fingerprinting).
3. How We Use Your Data
We use your information strictly for transactional, processing, and security purposes.
- No Marketing: We do not send marketing emails, newsletters, or spam.
- Contact Reasons: We will only contact you to send a password reset link (upon your request), verify your identity if you change your account settings, or confirm account creation.
- Security Enforcement: Telemetry and hardware data are analyzed under the legal basis of "legitimate interest" to enforce our platform limits, block malicious data extractors, and protect the Service from denial-of-service pressure.
4. Data Sharing & Sales
We do not sell, trade, or rent your personal identification or machine telemetry information to others. Your data is yours. We do not monetize your usage patterns, device configurations, personal details, or financial interests.
5. Data Security & Storage
We implement robust security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal data.
- Password Encryption: Your passwords are never stored in plain text. They are securely hashed using Bcrypt (an industry-standard encryption algorithm) before being stored in our database.
- Evidence Captures: Viewport screen snapshots captured during a triggered security honeypot alarm are treated as encrypted forensic evidence and are subject to automatic deletion schedules.
6. Your Rights & Data Deletion
You have full control over your data:
- Access & Update: You can view and update your account details at any time via the "My Account" page.
- Deletion: You have the right to delete your account permanently. If you choose to delete your account via the settings panel, all your data—including saved filters, tracked documents, and personal information—is immediately and permanently removed from our servers.