Privacy Policy — Catalyst Art

Catalyst Art is operated by Catalyst Art, Inc. ("Company", "we", "us"). The Platform software is built and operated on our behalf by Zylzio LLC. This policy explains how information is collected, used, stored, and protected across catalystart.com, the Catalyst Art iOS app, and the Collector Portal (together, "the Platform").

How the Platform works — please read first. Catalyst Art is provided to you through your art advisor. Your advisor curates and manages your collection records inside the Platform, and is the primary party responsible for that information (the "controller"). We operate the software and process information on your and your advisor's behalf.

Information we collect

Information you provide: name, email, telephone number, company, and the collection details entered for you — artwork information, acquisition records, invoices, certificates, provenance documents, collection notes, photographs, insurance and valuation information, the messages you send your advisor, and your AI chat interactions.

Automatically collected: device type, browser, operating system, IP address, login history, usage analytics, crash reports, cookies, session information, and — only if you enable notifications — a push notification token used solely to deliver notifications to your device.

Face ID / biometrics: if you enable Face ID or Touch ID to unlock the app, that authentication is performed by your device and your biometric data never leaves your device and is never collected by us.

How we use information

To operate the Platform and show you your collection.
To authenticate users and secure accounts.
To deliver notifications you have enabled.
To generate AI insights and improve search and our software.
To provide support, detect fraud, and communicate about your account.

We do not sell your data, use it for advertising, or track you across other apps or websites.

AI processing

Certain information you submit may be processed using artificial intelligence services for artwork identification, document analysis, collection summaries, natural-language search, educational responses, and recommendations. AI is used solely to improve Platform functionality, and we do not permit our AI providers to use your content to train their general models.

Service providers we share with

We do not sell personal information. Information may be shared only with the providers we use to run the Platform:

Zylzio LLC — builds and operates the Platform software.
Supabase — hosting, database, authentication, and file storage.
Vercel — web hosting for the portal and website.
Google — sign-in, if you log in with Google.
Apple — push notifications and App Store distribution.
Anthropic and OpenAI — the Platform's AI features.
Stripe — payment processing, if and when a payment is processed.
Analytics and error-monitoring providers, your art advisor, and legal authorities when required by law.

All providers are contractually required to maintain appropriate confidentiality and security measures.

Security

Your collection is visible only to you and your advisor. We use encrypted communications (TLS/SSL), encrypted storage where appropriate, secure authentication, and row-level access controls so each collector sees only their own collection. Private documents such as certificates and appraisals are served through short-lived, access-controlled links. No transmission over the internet is completely secure.

Data retention & account deletion

We retain information while your account is active, as required by law, and as reasonably necessary for business purposes. Deleting your account from Settings → Account → Delete account in the app permanently deletes your account and personal information — your login, profile, messages, saved works, wishlist, and presentation rooms are erased, you are signed out, and you cannot sign back in. This cannot be undone.

The shared artwork records your advisor catalogs (artwork details, images, provenance, documents, and valuations), and transaction records such as invoices, are retained by your advisor as their business record. To request a copy of your data before deleting, email us at the address below.

Your rights

Depending on your jurisdiction (including under laws such as the GDPR and the CCPA/CPRA), you may have rights to access, correct, download, or delete your personal information, object to certain processing, and opt out of certain communications. Email kahl@catalystart.com to make a request. We will not discriminate against you for exercising these rights.

Cookies & notifications

We use cookies and similar technologies to maintain login sessions, improve performance, remember preferences, and analyze usage; you can manage cookies in your browser. If you enable push notifications, we use a device token to deliver them, and you can turn them off anytime in your device settings.

Children

The Platform is intended for adult art collectors and is not directed to children under 18. We do not knowingly collect personal information from children.

International users

If you access the Platform outside the United States, your information may be transferred to and processed in the United States, where data-protection laws may differ from those in your jurisdiction.

Changes to this policy

We may revise this policy from time to time. The updated version will be posted here with a revised effective date.

Contact

Catalyst Art, Inc.
6215 Old Court Rd
Boca Raton, FL 33433
kahl@catalystart.com