Privacy Policy

1. Controller Information

The controller responsible for your personal data is:

CODEGENIX LTD.
Academy House 11 Dunraven Place, Bridgend, Mid Glamorgan, United Kingdom, CF31 1JF
Company Number: 16808123
Email: privacy@catalystai.expert

This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Personal Information

We collect the following categories of personal data:

• Identity Data: Name, username, account ID
• Contact Data: Email address, correspondence
• Financial Data: Payment card details (processed by our payment provider), transaction history
• Technical Data: IP address, browser type, device information, cookies
• Usage Data: Pages visited, features used, time spent on platform
• Marketing Data: Communication preferences, newsletter subscription

2.2 How We Collect Data

We collect personal data through:

• Direct interactions when you create an account, purchase credits, or contact us
• Automated technologies including cookies and analytics tools
• Third parties such as payment processors

3. Lawful Basis for Processing

We process your personal data based on the following lawful bases under GDPR:

• Contract Performance: To provide services you've purchased (Art. 6(1)(b) GDPR)
• Legal Obligation: To comply with tax, accounting, and legal requirements (Art. 6(1)(c) GDPR)
• Legitimate Interests: To improve our services, prevent fraud, and ensure security (Art. 6(1)(f) GDPR)
• Consent: For marketing communications and non-essential cookies (Art. 6(1)(a) GDPR)

4. How We Use Your Information

We use your personal data to:

• Provide and maintain our platform and services
• Process credit purchases and transactions
• Manage your account and provide customer support
• Send service-related communications
• Improve platform functionality and user experience
• Prevent fraud and ensure platform security
• Comply with legal and regulatory requirements
• Send marketing communications (with your consent)

5. Data Sharing and Recipients

We do not sell your personal data. We may share data with:

• Service Providers: Payment processors, hosting providers, analytics services
• Specialists: Necessary information to fulfill your service requests
• Legal Authorities: When required by law or to protect our legal rights
• Professional Advisors: Lawyers, auditors, insurers

All third parties are required to keep your data secure and process it only as we instruct them.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Binding Corporate Rules where applicable

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Duration of your account plus 3 years for legal obligations
• Transaction Data: 7 years for tax and accounting requirements
• Marketing Data: Until you withdraw consent or 2 years of inactivity
• Technical/Usage Data: 12 months unless required for security

After retention periods expire, we securely delete or anonymize your data.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Right to Lodge a Complaint: File a complaint with your national supervisory authority

To exercise any of these rights, contact us at privacy@catalystai.expert. We will respond within one month.

Supervisory Authority: You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data properly. Contact details for EU supervisory authorities can be found at https://edpb.europa.eu/about-edpb/board/members_en

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection
• Incident response procedures

In the event of a data breach that poses a high risk to your rights, we will notify you and the relevant supervisory authority within 72 hours.

10. Cookies and Tracking

We use cookies and similar technologies. For detailed information, please see our Cookie Policy.

You can manage cookie preferences through your browser settings or our cookie consent tool.

11. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@catalystai.expert and we will delete it promptly.

12. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on our platform at least 30 days before taking effect. Continued use after changes constitutes acceptance.