Catalyst Adaptive Systems
Before you sign in
Catalyst uses your founder-created account, password authentication and essential session/security records to provide and protect access. A later signature does not retroactively authorize earlier collection. Product telemetry is a separate later choice. Do not submit government ID or project secrets here.
Operator and privacy/grievance contact: Daniel Allen Dugas, operating Catalyst under the Catalyst Adaptive Systems brand · [email protected].
India privacy notice · IN-1.0
1. Who operates this beta
Daniel Allen Dugas operates Catalyst under the brand Catalyst Adaptive Systems from Texas, United States. For this India pilot, the privacy and grievance contact is Daniel Allen Dugas at [email protected]. Use that address for information requests, concerns, correction, withdrawal, deletion requests and copies. Provider will address a privacy grievance promptly and within one month of receiving it; any shorter mandatory deadline still applies. The contact page identifies the applicable correspondence details. This notice concerns India private-beta participation, not unrelated public-site marketing subscriptions.
2. Intake, signing, and essential security records
Provider collects your country declaration, authenticated tester-account identifier, contact email, legal name, adopted typed signature and affirmative choices to determine the applicable offer, administer access, communicate about the beta and preserve an acceptance record. Your email is self-entered and not independently verified. Provider has already prepared the company/workspace name, purpose, testing focus and display name; you are not asked to configure them during legal intake.
Normal sign-in processes the credentials you submit and uses the existing protected account authentication mechanism. Session cookies, limited request/security records, server timestamps, browser information and request IP information, when available from trusted infrastructure, support security and operation. Signing evidence also records the exact agreement, notice and provider-disclosure versions/hashes, the document access event and the complete retained signed copy. These are not government identity or location verification.
No Aadhaar, passport, government ID, full birth date, biometric signature or precise location is requested for this pilot. Password values, secrets, access tokens, unsubmitted contact fields and signature-field keystrokes are excluded from activity analytics. The privacy notice is available before the relevant submission. Necessary account/contact processing is explained separately from consent to product telemetry. You may decline to provide required information, in which case Provider cannot complete this online beta admission.
3. Private-beta activity and content
Only with your separate beta-telemetry choice, Provider collects account-linked session identifiers; entered/exited pages and routes; duration and visibility changes; clicks and submissions; errors and run status; and submitted test prompts, sample inputs and results needed to understand testing. Daniel and people or providers authorized for these purposes may review this information to diagnose problems and improve Catalyst. Testing is not anonymous.
This choice does not authorize recording your microphone, camera, entire screen or every keystroke. Any separate recording requires separate permission. Use synthetic or supplied sample data only. Choosing No keeps the agreement and signed copy available but does not admit you to this instrumented private beta. Withdrawing Yes through the agreement/access-status page stops future instrumented product access and telemetry under that choice. Essential security and legally justified record retention are separate. You may also contact Daniel without entering the product.
4. Recipients, cross-border processing and AI
The beta is operated from the United States, and information described here may be transmitted from India and processed in the United States or other locations used by the disclosed service providers. The provider disclosure presented with this notice identifies the actual services, roles, information categories, processing/storage locations or known limitations, and the retention/training practices that have been verified. Unverified account-specific settings are identified as unverified; there is no promise of India-only storage, universal zero retention or a specific certification.
Web delivery/security infrastructure can process the request information necessary to provide its service, which may include request content depending on its role and configuration. HTTPS transport alone is not a promise that an edge provider cannot process content. The exact applicable provider disclosure distinguishes the authentication/legal-document path from AI-enabled product features. Contact, signature, country and legal archive information are not sent to AI models, placed in Company Brain or provided to departments for reasoning. An email request that you choose to send is handled by the mail service identified in the disclosure.
When you invoke an enabled AI feature, only its authorized test context is supplied to the disclosed model or tool service for that purpose. Provider uses reasonable safeguards, limited access and appropriate provider arrangements. Permission to process information outside India is limited to the described purposes and does not waive applicable data-protection requirements. Provider does not sell your personal information or use this required intake and beta telemetry for targeted advertising. Public attribution, testimonials and marketing messages require separate permission.
5. Retention, corrections and requests
Detailed product telemetry is retained for up to 90 days unless a specific incident, dispute or legal requirement justifies longer. Test-workspace content is removed within 90 days after participation ends unless an authorized earlier reset removes it. Identifiable feedback is de-identified or removed on that schedule; non-identifying product findings and permitted feedback can remain. Routine security records follow the published operational schedule, normally up to 90 days, except where an applicable mandatory retention or incident requirement requires a different period. Such exceptions are documented and access-restricted; they are not permission to retain everything indefinitely.
The exact signed agreement, accepted notices/disclosure and minimal acceptance evidence are stored separately from resettable test work, normally for six years after participation ends. Continued retention then requires review and a documented justification, such as a dispute, legal hold, continuing trade-secret obligation or another applicable requirement; otherwise the records are securely deleted. Six years is an operating policy, not a representation of a universal statutory minimum. Deleted data may remain in restricted backups for up to 90 additional days and must not return to ordinary use following restoration.
You may ask Daniel for access, a copy, correction, deletion or withdrawal of future processing consent. Requests are authenticated proportionately before personal records are disclosed. Email possession or a claimed matching email is not, by itself, authority to obtain someone else's legal record. A correction appends or updates the current contact view without altering the original signature evidence. Withdrawal may end product access but does not erase records that must lawfully be retained. Provider explains an applicable limitation rather than promising unconditional erasure. Mandatory rights and legal remedies are not restricted by this notice.
6. Electronic records: read before consenting
Your electronic-record consent covers the offered India agreement, this notice, its provider disclosure, your acceptance receipt and related beta-administration records. You can decline electronic signing and contact Daniel about a paper process before participating. Copies are available electronically or on paper at no charge. A postal address is requested only if needed for a requested paper copy. Any alternative acceptance must be received and verified before access is authorized.
You may withdraw consent to future electronic records or correct contact details through the available contact process. Withdrawal does not invalidate a previously accepted agreement or remove its surviving confidentiality obligations. Provider will confirm the change within a reasonable time; there is no withdrawal fee. Online participation may pause while an appropriate alternative is arranged.
You need an internet-connected device, a browser that displays the complete printable HTML document, a contact email address you supply, and a way to save or print that HTML. Open the complete document before signing, and confirm that you can access and retain it. The access check records that the document was opened; it does not claim that software can prove you read every word. Material technical-requirement changes will be notified and renewed consent sought where required.
A complete agreement, notice, provider disclosure and acceptance receipt is available to download, save or print immediately after signing. No automatic email delivery, mailbox verification, paid e-signing service or government-ID upload is required by this process. You may request another electronic or paper copy from Daniel, including after private-beta access ends.
7. Separate choices and participation
Before submitting India contact information, the narrow processing choice states: "I agree to the processing of my account, contact and legal-intake information for the beta-administration and security purposes described in the India privacy notice, including the disclosed processing outside India. This does not authorize product telemetry." The applicable notice and provider disclosure must be available before this choice.
At signing, four separate choices are initially unchecked: (A) "I have read and agree to the Catalyst India Confidential Beta Testing Agreement IN-1.0." (B) "I consent to electronic signing and delivery for the records described in the India notice." (C) "I opened the supplied complete HTML agreement and confirm I can access and retain it." (D) "I reside in India, am participating from India, am at least 18, have legal capacity to enter this agreement, and am signing for myself." Enter your adopted typed signature and select Sign agreement only if those statements are true.
After signing, choose separately whether to permit the described beta activity/content collection. Nothing is preselected and no marketing opt-in is included. Participation is voluntary and unpaid; you may stop without completing the scenarios. The beta does not ask you to develop Catalyst's own software or promise future paid work.
Provider disclosure
Disclosure version IN-LIVE-20260920-131115
Limited India private-beta pilot for founder-provisioned adult testers. Catalyst is operated by Daniel Allen Dugas / Catalyst Adaptive Systems from Texas, United States. Public access uses Cloudflare. AI-enabled product functions may use OpenAI only after admission and only for authorized test context. Microsoft 365 is used only for voluntary/manual correspondence. Legal identity, country, agreement and signature records remain in the protected legal boundary and are not intentionally supplied to AI models. Cross-border processing may occur in the United States or other provider locations. No India-only residency, certified e-signature, universal zero-retention, compliance certification or guaranteed enforceability is claimed.
Operator and operational review
Privacy and grievance contact: Daniel Allen Dugas · [email protected].
Operator address: verified — Operator is Daniel Allen Dugas, an individual operating Catalyst under the Catalyst Adaptive Systems brand from Texas, United States. Privacy and beta correspondence uses [email protected]. No private home address is publicly disclosed. A physical delivery address will be supplied privately if genuinely required for a requested paper copy or applicable process.
Provider inventory: verified — Current limited India pilot inventory reviewed by founder: the Catalyst application and protected legal archive run on a founder-controlled Windows host in Texas, United States; Cloudflare provides public web delivery, tunnel/edge and security functions; OpenAI may process only authorized synthetic product context when a tester intentionally invokes enabled AI product functions after admission; Microsoft 365 handles voluntary/manual correspondence through [email protected]. Microsoft 365 is not the signing, authentication or automatic agreement-delivery mechanism. Legal name, contact email, country declaration, agreement signature and retained legal records are not intentionally sent to AI models or Company Brain.
Precollection processing: verified — For the India path, residence selection and the India privacy/provider notice precede new legal contact-name submission. The necessary-processing choice is separate and initially unchecked. Existing account credentials are processed only for authentication and security before legal intake; testers are instructed not to place passwords in prompts, feedback or attachments. This review does not claim that a later NDA retroactively authorizes earlier credential processing.
Cross border: verified — The India notice expressly states that Catalyst is operated from the United States and that permitted information may be transmitted from India and processed in the United States or other locations used by disclosed providers. No India-only storage, universal zero-retention or geographic-certification claim is made. Cloudflare may use its distributed network; OpenAI and Microsoft processing locations depend on their applicable services and account configuration.
Security retention: verified — The pilot uses authenticated individual tester accounts, least-privilege customer-facing access, a separately protected legal archive, retained document hashes, revocable access, scoped country admission, and guarded legal backups. Routine security records follow the stated operating schedule, normally up to 90 days except where a mandatory security, incident, dispute or legal requirement requires longer. No representation is made that this review establishes a universal CERT-In exemption, certification or jurisdiction-wide compliance determination.
Retention deletion: verified — Founder adopts the India notice operating policy for this limited pilot: detailed telemetry and resettable test-workspace information are normally removed within 90 days after participation ends; restricted deleted-data backups may persist up to 90 additional days; signed agreement, accepted notice/disclosure and minimal acceptance evidence are retained separately and normally reviewed after six years. Holds, disputes or mandatory requirements may justify longer restricted retention. For this small pilot Daniel is responsible for administering these retention and deletion decisions and documenting exceptions.
Grievance: verified — Daniel Allen Dugas is the designated privacy and grievance contact for this India pilot at [email protected] and undertakes to monitor that mailbox, authenticate personal-record requests proportionately, and respond to India beta privacy/grievance requests within one month or explain an applicable lawful limitation.
Legal formalities: verified — Founder reviewed the proposed India IN-1.0 private-beta instrument for use as authenticated-account electronic assent with a deliberate typed signature and an exact retainable HTML record. The process does not claim certified Indian eSign, DSC, Aadhaar/KYC, notarization, government identity verification or guaranteed enforceability. Mandatory Indian rights and remedies are expressly preserved. This founder review is an operating decision for the limited private beta and is not an attorney certification or general compliance representation.