Privacy Notice

Last updated: 28 June 2026.

1. Who we are

RadarX is operated by Catalyst Secure. Catalyst Secure is the data controller of personal data processed through your RadarX workspace.

2. Data we collect

• Account data: name, email, company name, phone, address.
• Authentication data: login credentials, session tokens.
• Tenant data: connected Microsoft 365 / Google Workspace credentials, mailbox metadata, and email metadata/content used for threat scoring.
• Operational data: IP address, device identifiers, usage telemetry, support messages.

3. Purposes & legal basis

• Provide the service (contract performance).
• Security, fraud prevention, and abuse detection (legitimate interest).
• Customer support (contract performance).
• Product improvement and analytics (legitimate interest).
• Legal and tax obligations (legal obligation).

4. Data sharing

• Paddle.com — Merchant of Record for payments, subscription management, tax compliance, and invoicing.
• Cloud hosting and infrastructure subprocessors used to run the service.
• Microsoft and Google APIs to access tenant data you connect.
• Professional advisers (legal, accounting) and authorities where required by law.

5. Retention

Account data is kept for the lifetime of the account plus 12 months. Tenant message metadata used for threat detection is retained for 90 days unless you delete the tenant sooner, in which case associated data is removed within 30 days.

6. Your rights

Subject to applicable law, you may request access, correction, erasure, restriction, portability, and objection to processing. Email privacy@catalystsecure.example.

7. International transfers

Data may be processed outside your country. Where it is, we rely on appropriate safeguards such as Standard Contractual Clauses.

8. Security

We use industry-standard technical and organisational measures including encryption in transit and at rest, access controls, and audit logging.

9. Cookies

RadarX uses essential cookies for authentication and session management. We do not use marketing cookies.

10. Contact

Privacy queries: privacy@catalystsecure.example.