Catalyte

Privacy Notice

Last updated: July 1, 2026

This Privacy Notice describes how Stefan Coroianu ("Catalyte", "we", "us") collects and processes personal data when you use the Catalyte service at catalyte.dev (the "Service"). Stefan Coroianu is the data controller responsible for your personal data.

1. Data we collect

  • Account data: name, email, hashed password, workspace membership.
  • Catalog data: products, channels, API keys, and related configuration you provide.
  • Usage & telemetry: IP address, device type, browser, pages visited, feature usage, and error logs.
  • Support data: messages you send us and their metadata.
  • Payment data: handled by Paddle (see §4). We receive limited billing metadata (plan, status, country, last-4).

2. Purposes & legal basis

  • Providing the Service and your account — performance of contract.
  • Security, fraud prevention, abuse detection — legitimate interests.
  • Product improvement and analytics — legitimate interests.
  • Customer support — performance of contract.
  • Legal and tax compliance — legal obligation.
  • Marketing emails (if applicable) — consent, withdrawable at any time.

3. How we share data

We share personal data with:

  • Subprocessors: hosting, database, and infrastructure providers used to run the Service.
  • Paddle.com Market Ltd — our Merchant of Record for all sales. Paddle handles payments, subscription management, invoicing, and tax compliance. See Paddle's privacy policy.
  • Professional advisers (legal, accounting) where necessary.
  • Authorities where required by law.

We do not sell your personal data.

4. Payments

Paddle is the Merchant of Record for purchases on Catalyte and acts as an independent controller for payment data (card details, billing address, tax identifiers). Paddle shares limited billing metadata back to us so we can provision your subscription.

5. International transfers

Where personal data is transferred outside the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards.

6. Retention

We retain account and catalog data for as long as your account is active, and for a reasonable period thereafter to meet legal, tax, and dispute-resolution obligations. Telemetry and logs are retained for up to 12 months. When data is no longer needed it is deleted or anonymised.

7. Your rights

Subject to applicable law you have the right to access, rectify, erase, restrict processing of, port, and object to processing of your personal data, and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority. To exercise any right, email hello@catalyte.dev. We will respond within one month.

8. Security

We use appropriate technical and organisational measures — encryption in transit, access controls, least-privilege service accounts, and audit logging — to protect personal data.

9. Cookies

We use strictly necessary cookies for authentication and session management, and limited first-party analytics cookies to understand aggregate usage. You can manage cookies through your browser.

10. Contact

Stefan Coroianu — hello@catalyte.dev.