Privacy Policy

This Privacy Policy explains how Katallst Inc., a California corporation ("Katallst," "we," "us") collects, uses, and discloses information in connection with the Katallst platform (the "Platform"), which connects Fans and Creators for paid one-on-one video calls ("Calls"). This Policy is incorporated into, and should be read alongside, our Terms of Service.

1. Information We Collect

From Creators (currently collected): legal name, contact information (email, phone), identity/age verification documents, payout information (e.g., bank or payment processor details), and profile content Creators choose to submit.

From Fans (currently collected): account email and payment information processed through our payment provider. Fans do not currently submit additional personal information beyond what is needed to create an account and complete a purchase.

Planned — Social Account Linking: Katallst plans to introduce a feature allowing Fans to link their social media accounts to their Katallst profile. Once launched, this will involve collecting the connected platform's public profile information (e.g., handle, display name, profile image) via that platform's official authorization flow. This Policy will be updated, and affected Users notified, before that feature collects any data.

Call Data: Calls are transmitted through our video infrastructure provider (currently Agora) in real time and are not recorded — no video or audio is captured or stored. Where supported by a User's browser, the Platform generates a rolling text transcript of the Call locally as it happens, using the browser's built-in speech-to-text capability (in Chrome and Edge, this processes audio through Google's speech-recognition service to produce the text). If a User activates the in-call Report feature, that transcript is saved and stored for safety review, as described in Section 5 of the Terms of Service. If no report is made, the transcript is discarded when the Call ends.

Automatically Collected: device information, IP address, log data, and usage data collected through standard analytics tools.

Where This Data Lives: Account and profile data (names, emails, creator identity/payout details) is stored in our backend database, hosted by Supabase. Payment information is collected and processed directly by Stripe, our payment processor; Katallst does not store full card numbers.

2. How We Use Information

We use collected information to: operate and secure the Platform; verify Creator identity and eligibility; process payments and payouts; investigate and act on reports of Terms of Service violations; communicate with Users about their accounts; and comply with legal obligations.

3. How We Disclose Information

We disclose information to:

• Service providers who help operate the Platform on our behalf and are contractually restricted to using data only to provide their services to us, including: Supabase (backend database and authentication hosting), Stripe (payment processing and, for Creators, payout processing via Stripe Connect), Agora (video call infrastructure), and, where a User's browser generates a Call transcript, Google (speech-to-text processing performed by the browser's built-in capability);
• Law enforcement and government authorities, where (a) compelled by valid legal process (subpoena, warrant, or court order), (b) necessary to prevent imminent harm to a person, or (c) required under mandatory reporting laws, including reporting apparent child sexual abuse material to the National Center for Missing & Exploited Children under 18 U.S.C. § 2258A, which may in turn share that report with law enforcement;
• Successors, in the event of a merger, acquisition, or sale of assets, subject to this Policy or a comparable one.

We do not sell personal information, and we do not share reported Call transcripts for marketing or any purpose other than safety review and the disclosures described above.

4. Retention

We retain account information for as long as an account is active and as needed to comply with legal, tax, or payout obligations. Reported Call transcripts are retained only as long as necessary for safety review and any applicable legal preservation obligation (see Section 5.3 of the Terms of Service), after which they are deleted unless law requires longer retention.

5. Your Choices and Rights

Depending on your location, you may have rights to access, correct, or delete your personal information, and (for California residents) rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and to request its deletion, subject to legal exceptions (for example, information we are required to retain for safety reporting purposes). To exercise these rights, contact us at delia@katallst.com.

6. Children's Privacy

The Platform is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it and take appropriate action, which may include reporting as described in Section 3.

7. Security

We use reasonable technical and organizational measures to protect information, including restricting access to reported Call transcripts to authorized safety personnel. No system is completely secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We will update this Policy as our practices change, including before launching the planned social account linking feature, and will notify Users of material changes through the Platform or by email.

9. Contact

Katallst, Inc.
2108 N St, Ste N
Sacramento, CA 95816
delia@katallst.com