Privacy and security

Catch Up AI Privacy & Security Policy

At Catch Up AI, your privacy and security are our top priorities. We are committed to protecting user data with industry-leading safeguards, ensuring transparency, and giving users full control over their information.

Read our Terms of Service and Sub-processors

Policy area 01

Data Collection & Usage

  • Only essential data is collected from integrations such as Slack, Zoom, GitHub, Jira, and BambooHR.
  • Users are informed of requested scopes and permissions via OAuth or in-app UI during installation.
  • Data is collected solely to improve individual and team productivity, engagement, and well-being.
  • No raw data is sold or shared with third parties without explicit permission.
  • Consent logging and audit trails are maintained and available to enterprise customers.

Policy area 02

Data Storage & Transmission

  • All user data is encrypted in transit using TLS (Transport Layer Security).
  • Data at rest is securely stored in AWS S3 using AES-256 encryption.
  • Sensitive data is isolated in secure environments to prevent unauthorized access.
  • Internal encryption paths, including message queues, are continuously reviewed and updated.

Policy area 03

Access Control & Authentication

  • Role-Based Access Control (RBAC) ensures only authorized personnel can access sensitive data.
  • Auth0 is used for secure identity and access management.
  • Multi-Factor Authentication (MFA) is required for all administrative accounts.
  • API-to-API communication and internal service authentication are regularly audited.

Policy area 04

Compliance with U.S. Data Privacy Laws

  • Catch Up AI complies with CCPA and general U.S. privacy regulations.
  • Clients, on behalf of their employees, can request access to, deletion of, or transfer of personal data at any time.
  • Multi-tenant data separation is enforced to serve enterprise customers securely.
  • GDPR-like rights management workflows are supported upon request.

Policy area 05

Slack Integration & Privacy

  • Catch Up AI integrates with Slack via the official OAuth 2.0 process.
  • Users are clearly informed of all scopes and permissions during installation.
  • We only collect the minimum required data (such as public channel messages or metadata for feedback and productivity insights).
  • We do not access or store private messages (DMs) or private channels unless a workspace admin explicitly enables it through granted scopes.
  • We do not build permanent indexes of Slack message bodies, and we do not use Slack content to train models without a separate written agreement.

Policy area 06

Data Retention Policy

  • Personal data is retained no longer than necessary to fulfill the purposes of processing.
  • By default, Slack data and similar integration data are retained for up to 7 days in active systems, after which it is automatically deleted.
  • Verified user deletion requests are processed within 7 days upon client request.
  • Aggregated and anonymized data, which cannot be linked to an individual, may be retained for system improvement and benchmarking.
  • Application logs may be retained for up to 30 days; encrypted backups up to 30 days, then purged.

Policy area 07

Transparency & User Control

  • Users have visibility into data collection and usage through in-app summaries.
  • Full user-facing privacy controls are being developed.
  • Catch Up AI does not passively monitor or track user activity beyond feedback and insight generation.
  • Workspace admins can review integration scopes, retention settings, and revoke access at any time.

Policy area 08

Incident Response & Monitoring

  • We use Sentry and AWS CloudWatch for error tracking and anomaly detection.
  • A formal incident response process is in place, including breach notification protocols.
  • Intrusion detection and automated alerting systems are part of our security program.

Policy area 09

Continuous Improvement & Audits

  • Security practices follow OWASP and NIST frameworks.
  • External penetration testing and security audits are conducted regularly.
  • Internal documentation of security policies is continuously updated and expanded.

Policy area 10

Trust by Design

  • Catch Up AI is designed with privacy, fairness, and psychological safety at its core.
  • We build for hybrid work environments, privacy-aware users, and high-trust teams.
  • Product principles include respectful nudging, privacy-first design, and role-sensitive transparency.

Contact

Contact Our Security Team

If you have questions or wish to exercise your privacy rights (data access, deletion, or transfer), please contact us:

info@thecatchup.ai

Frequently asked questions

  • Catch Up AI is an autonomous performance and retention layer that connects to workplace tools like Slack, Teams, Jira, GitHub, and Zoom to detect attrition risk, identify top performers, generate manager-ready insights, and help leaders act earlier.

Voices of Catch Up AI Users

EEnterprise operations

My experience using Catch Up is that it is an extremely powerful technology with cumulative positive effects on work culture. The return on time invested leveraging Catch Up is excellent. Everyone found it non-intrusive, and highly respectful of people's valuable time when engaged with it. I strongly endorse gaining the benefits of Catch Up in any organization because the business case for it is so clearly apparent and reliable. Even as an early adopter of Catch Up, I wish I'd used it sooner and maximized the outcomes my teams produce. Now that we know it's available and what it's capable of, the biggest waste would be hesitating to get Catch Up in your organization.

- Jon, Work ManagerJon, Work Manager
NNon-profit leadership

I am not filling out performance evaluations at my paid work but with Catch Up I've been using it every week for the last 5 months voluntarily for our non-profit and no manager or HR pushes me to do so!

- Nariman, Risk EngineerNariman, Risk Engineer
AAgile delivery

All results we received in just one month align with what I observed over a period of 1 year and yet I was not able to bring it up since it looked like a gut feeling and I was not sure if they are accurate! Catch Up made it factual and based on data!

- Steve, Scrum MasterSteve, Scrum Master
PProduct & design

It's just so hard to notify managers about team members' strengths and weaknesses, even if you catch them soon, because managers are mostly either too busy or would ask for proof. Catch Up has been my best friend to notify, as an Architect why I think we can have this person added to our team or why we would have to give a member a different area to work on. And it has been a game changer!

- Zoe, ArchitectZoe, Architect

Ready to Transform Team Performance? 🚀

Join 1,000+ companies already achieving more with Catch Up AI!