Privacy Policy
Last updated: May 15, 2026
1. Overview
This Privacy Policy explains what data Catalyst collects when you use our continuous-integration platform and why. Catalyst runs build pipelines, stores artifacts and logs, and helps teams organize projects, organizations and teams — handling this data responsibly is core to the service.
2. Account data
When you register we collect your email address and, optionally, your name, username and profile details. This identifies your account, secures sign-in, and lets collaborators find you within an organization or team.
3. Connected integrations
If you connect GitHub or Google (OAuth), we store the access tokens needed to read the repositories you authorize and to sign you in. We request the minimum scopes required to clone code and run the pipelines you configure, and you can revoke these connections at any time.
4. Source code, pipelines and artifacts
To run a build we temporarily process your source code and pipeline configuration, then store the resulting artifacts, build metadata and logs so you can review and download them. This content is treated as confidential and is accessible only to members of the owning project, organization or team.
5. API keys and credentials
API keys and secrets you add are stored to authenticate API requests and to let pipelines access the services you choose. Secret values are write-oriented: once saved they are not displayed back in full.
6. Billing data
For paid plans, payment and invoicing information is processed by our payment provider. We retain billing records (such as plan, invoices and usage totals) as required for accounting and tax purposes; we do not store full card numbers.
7. Authentication storage and cookies
We use JSON Web Tokens kept in your browser's local storage to keep you signed in. We do not use these tokens for advertising or cross-site tracking. Clearing browser storage or signing out removes them.
8. How we use data
We use the data above to operate and secure the platform, run and display your builds, provide support, enforce usage limits, prevent abuse, and meet legal obligations. We do not sell your personal data.
9. Sharing and subprocessors
We share data only with infrastructure and payment providers that help us run Catalyst, bound by confidentiality and data-protection obligations, or when required by law.
10. Retention
Account data is kept while your account is active. Build artifacts and logs are retained according to your plan and may be deleted after a reasonable window once a project or account is removed.
11. Your rights
Depending on your jurisdiction you may request access to, correction of, export of, or deletion of your personal data. You can manage most profile data in settings, or contact us for the rest.
12. Contact
For privacy questions or data requests, contact privacy@catalyst.dev.
This summary is provided for transparency and is not legal advice.