Effective October 29, 2026
CatalystOS, Inc. ("CatalystOS", "we", "us") makes a marketing platform that agencies and companies use to keep their brand in one place and produce on-brand marketing materials. This policy explains what information we collect, how we use it, who we share it with, and the choices you have. It covers our website at catalyst-os.ai and the CatalystOS platform.
Your name, email address and the agency or company you work for, plus a record of when you sign in. Sign-in is handled by Google Firebase Authentication. We never see or store your password for any connected service.
Logos, colors, fonts, images, writing samples, voice and style notes, team member profiles, campaign briefs and the materials you create. You or your agency choose what to add.
If you choose to connect an account, such as a LinkedIn Page, an Instagram or Facebook account, HubSpot or Mailchimp, you sign in on that service's own page and approve access. That service then gives us an access token. We store the token encrypted on our servers. Browsers can never read it. Through that connection we may read:
When you ask CatalystOS to research a company or industry, or to read a website you name, we look up publicly available pages and sources.
Basic logs needed to run and secure the service, such as errors, request times and the type of device and browser. We don't use advertising cookies, and we don't track you across other websites.
We do not sell personal information. We do not use it for advertising. We do not use one client's content to make materials for another client.
When you connect a LinkedIn Page, CatalystOS uses LinkedIn's official API and only accesses Pages that you administer. We read the Page's own posts, images and post performance, and we publish posts to that Page that you have approved. We don't read member profiles, connections or messages. We don't collect LinkedIn data in any other way. We don't sell or share LinkedIn data, and we don't combine it with data from other sources to build profiles of people. You can disconnect at any time in CatalystOS (Brand Command → Disconnect) or in your LinkedIn settings. When you disconnect, we delete the access token and ask LinkedIn to revoke it. We use LinkedIn data in line with LinkedIn's API Terms of Use.
We rely on these companies to run CatalystOS. Each receives only what it needs to do its job for us.
We may also share information if the law requires it, to protect our users or our service, or as part of a merger or sale of our company. In the case of a merger or sale, this policy would continue to apply to your information.
We keep your information while your account is active. If you or your agency close an account or ask us to delete it, we delete the related content and connection tokens within 30 days. The exceptions are anything we must keep by law and routine backups, which are overwritten on a regular cycle.
Connection tokens are encrypted (AES-256). Each client's information is kept separate, and only the people your agency or company authorizes can see it. All traffic uses HTTPS. No system is perfectly secure. If we learn of a breach that affects you, we will tell you as the law requires.
CatalystOS is a business service and isn't intended for anyone under 16. We don't knowingly collect information from children.
If we change this policy, we'll update the date at the top. If the changes are significant, we'll also tell account holders by email or in the platform.
Questions or requests about your information? Send them here. We reply within 30 days.