Privacy Policy
01 Information Collection
Directly Provided
Account details, Research abstracts, API keys (local), and payment info via Paddle.
Automated Systems
Usage logs, IP addresses, and device signatures for security and optimization.
02 How We Use Data
We process data to maintain your account, facilitate research through Gemini/CORE APIs, and refine the CatalystLab interface.
03 Storage
Supabase handles our database. API keys reside in your browser's LocalStorage.
04 Sharing
No rentals or sales. Data shared only with Supabase, Google, Paddle, and Vercel.
05 Cookies
Strictly necessary session cookies and preference-based LocalStorage only.
06 Your Rights & Choices
Contact legal@catalystlab.tech to exercise these rights.
07 Children's Privacy
CatalystLab is not intended for users under 13. We do not knowingly collect such data.
08 International Transfers
Operated from **Bangladesh**. Data is processed globally via US/EU-based infrastructure (Vercel/Supabase) ensuring standard contractual clauses for protection.
09 Security Architecture
- • TLS 1.3 Encryption
- • Supabase RLS Policies
- • Bcrypt Password Hashing
- • Automated Threat Detection