Privacy Policy

1. Information We Collect

1.1 Information You Provide Voluntarily

• Contact form submissions: When you use our contact form (powered by Formspree), we collect your name, email address, and message content.
• Lead magnet and toolkit email requests: When you request our AI Execution Guide or ask a tool/toolkit brief to be emailed to you, we collect your email address through our mailing system (mailer.php) to deliver the requested output and notify the site owner that a request was made.
• Live chat: When you interact with our Intercom live chat widget, Intercom may collect your name, email address, and conversation content.

1.2 Information Collected Automatically

• Analytics data: On the production site, GA4 Consent Mode starts with analytics and advertising storage denied. Before optional consent, GA4 may send limited cookieless measurement pings containing event and device/context information; it does not read or write analytics or advertising cookies in this state. Google may use these pings for aggregate measurement and modelling. If you accept optional analytics, GA4 may then use analytics storage for fuller measurement.
• Session recordings and heatmaps: PostHog may record privacy-masked session replays, heatmaps, web performance signals, and interaction events after analytics consent to help us understand where visitors encounter friction.
• Intercom tracking: Intercom may collect browsing behaviour on our site to provide contextual support.

1.3 Local Storage

Our website uses your browser's localStorage to store:

• Theme preferences: Your selected light/dark mode preference so it persists between visits.
• Tool usage history: A local count of how many times you have used our tools, displayed on the homepage counter.

This data is stored entirely in your browser and is never transmitted to our servers. You can clear it at any time through your browser settings.

1.4 Information We Do Not Collect

• We do not require user accounts or login credentials.
• Our 54 live experiences run entirely client-side in your browser. No tool input data is sent to our servers.
• We do not collect payment information, as all tools are free.

2. How We Use Information

We use the information we collect for the following purposes:

• To respond to inquiries: Contact form submissions are used solely to respond to your message.
• To deliver requested content: Email addresses submitted for the AI Execution Guide or emailed toolkit/tool outputs are used to deliver the requested content and record a basic owner notification for follow-up context.
• To provide live chat support: Intercom conversations are used to answer your questions in real time.
• To improve the website: Analytics and session recording data help us understand which pages and tools are most useful and where users encounter friction.
• To maintain website functionality: localStorage data ensures your preferences persist between visits.

We do not sell, rent, or trade your personal information to third parties. We do not use your information for automated decision-making or profiling.

3. Third-Party Services

We use the following third-party services that may collect data when you visit our site:

4. Cookies and Tracking

4.1 Cookies Set by Third Parties

On the production site, GA4 Consent Mode initializes with analytics and advertising storage denied and may send limited cookieless measurement pings. It cannot read or write analytics or advertising cookies in that state. After you choose “Accept All,” optional analytics and support services may use cookies or local browser storage. Choosing “Necessary Only” keeps optional storage denied and keeps PostHog and Intercom blocked.

• Google Analytics: With optional analytics consent, GA4 may set cookies (e.g., _ga, _ga_*) to distinguish visitors and measure sessions. Without that consent, analytics storage remains denied and GA4 is limited to cookieless pings.
• PostHog: Uses cookie/local-storage identifiers for analytics, privacy-masked replay, heatmaps, and product measurement after consent.
• Intercom: Sets cookies to identify returning chat users and maintain conversation history.

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

• View and delete existing cookies
• Block all cookies or only third-party cookies
• Set preferences for specific websites

Please note that disabling cookies may affect the functionality of some third-party features (such as live chat) but will not affect the functionality of our tools.

4.3 Do Not Track

Optional analytics and support services are controlled by the site consent choice. You can reopen Cookie Preferences from the footer and choose Necessary Only at any time; browser privacy controls remain available as an additional layer.

5. Data Retention

• Contact form submissions: Retained for as long as necessary to respond to your inquiry, then deleted. Formspree retains submissions according to their own retention policy.
• Email addresses (lead magnet and toolkit/tool email requests): Retained only for the purpose of delivering the requested guide or generated output and basic follow-up context. We do not add you to a mailing list without your explicit consent.
• Google Analytics data: Retained for 14 months, after which it is automatically deleted by Google.
• PostHog data: Analytics and replay retention follow the retention settings configured in the CatalystAgile PostHog project.
• Intercom data: Chat conversations are retained according to Intercom's data retention policies.
• localStorage data: Stored in your browser indefinitely until you clear it manually. This data never leaves your device.

6. Your Rights

6.1 Rights Under GDPR (European Union Visitors)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation:

• Right of access: You can request a copy of any personal data we hold about you.
• Right to rectification: You can request correction of inaccurate or incomplete data.
• Right to erasure: You can request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: You can request that we limit how we use your data.
• Right to data portability: You can request your data in a structured, commonly used, machine-readable format.
• Right to object: You can object to our processing of your personal data, including for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you can withdraw that consent at any time.

Depending on your location and the processing involved, we rely on consent for optional analytics storage and support services, and may rely on legitimate interests for limited cookieless site measurement where permitted. Contact form submissions and requested-content delivery are processed to respond to actions you initiate. You may lodge a complaint with your local data protection authority if you believe your rights have been violated.

6.2 Rights Under PIPEDA (Canadian Visitors)

If you are located in Canada, you have the following rights under the Personal Information Protection and Electronic Documents Act:

• Right to access: You can request access to the personal information we hold about you.
• Right to challenge accuracy: You can challenge the accuracy and completeness of your personal information and have it amended as appropriate.
• Right to withdraw consent: You can withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions.
• Right to complain: You may file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

6.3 CASL Compliance

In accordance with Canada's Anti-Spam Legislation, we will only send you commercial electronic messages if you have provided express or implied consent. We do not operate a newsletter or mailing list; email communication is limited to delivering content you have explicitly requested or responding directly to a request you initiated.

6.4 Exercising Your Rights

To exercise any of the rights described above, please contact us at ignatious@catalystagile.com. We will respond to your request within 30 days.

7. Children's Privacy

CatalystAgile.com is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as soon as possible. If you believe we may have collected information from a child under 13, please contact us at ignatious@catalystagile.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, third-party services, or applicable laws. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the site after any changes constitutes acceptance of the updated policy.

9. Contact Information