Material changes to the Catch Privacy Policy. The current policy is always available at usecatch.io/privacy.
April 23, 2026
Comprehensive rewrite with strict truth constraints. Expanded security disclosures with explicit "in place today" vs "in active development" separation. Added customer data ownership declaration, government request policy, AI training prohibition extended to all subprocessors, data classification table, internal access transparency, service mode distinction, DPA inline summary. Aggregate benchmark opt-out via email. Penetration test status disclosed.
Prior versions of the privacy policy are available on request at privacy@usecatch.io.