Privacy Policy & DPA

CATCHUPS.AI PRIVACY POLICY & DPA Last Updated: April 2026 1. INTRODUCTION AND COMPLIANCE This document serves as both our Privacy Policy and our Data Processing Agreement (DPA) for B2B Clients. We comply with the Israeli Privacy Law (1981), GDPR, and relevant AI data regulations. 2. DATA PROCESSING ROLES • Client (Data Controller): Responsible for the legal basis of end-user interactions. • Catchups.ai (Data Processor): Processes data solely to provide the autonomous video service. 3. TYPES OF DATA AND ANONYMIZATION • Lead Data: Professional contact info for account management. • Contextual Input: Topics and keywords provided via API. • End-User Privacy: We use Pseudonymization and Anonymization for analytics. We do not store Client end-user PII (names, emails) unless explicitly required for a specific custom feature. 4. INFORMATION SECURITY & ENCRYPTION • At Rest & In Transit: All data is encrypted using industry-standard protocols (AES-256, TLS 1.2+). • Security Standards: We host our infrastructure on ISO 27001 and SOC2 compliant cloud providers (AWS/Google Cloud). • Incident Response: In the event of a confirmed data breach, we will notify affected Clients within 72 hours. 5. SUB-PROCESSORS AND TRANSFERS • Third-Party AI: We use LLM providers (e.g., OpenAI, Google) as sub-processors. Data is sent via secure API prompts. • Cross-Border: Data may be transferred between Israel and the US. We utilize Standard Contractual Clauses (SCCs) where applicable. 6. DATA RETENTION & DELETION POLICY • Retention: API logs are kept for 12 months for security auditing. Output files are kept for the duration of the Client's active subscription. • Deletion: Upon Client request or contract termination, data is deleted or anonymized within 60 days, excluding data required for legal compliance or financial records. 7. AI TRAINING & DATA ISOLATION • Privacy Guarantee: We do NOT use proprietary Client inputs or niche industry topics to train general-purpose AI models. Your business context and data remain isolated from other Clients. 8. AUDIT RIGHTS Enterprise Clients may request a summary of our latest security audit or a self-assessment questionnaire once per calendar year to ensure compliance with this DPA. 9. CONTACT US IQT Media Ltd. Privacy & Data Protection: legal@catchups.ai Technical: support@catchups.ai