Privacy Policy

ProCatalyst, LLC (“ProCatalyst,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we collect, use, and handle your information when you visit procatalyst.com (the “Site”) or interact with our services.

Information We Collect

Information You Provide Directly

When you fill out our contact form, schedule a consultation, or communicate with us by email or phone, we may collect:

• Your name
• Your company name
• Your job title or role
• Your email address
• Your phone number
• The content of your message or inquiry
• Your service interest (e.g., Staff Augmentation, Project Catalyst)

We collect this information because you choose to provide it. We do not require you to create an account to use the Site.

Information Collected Automatically

When you visit the Site, our hosting provider and analytics tools may automatically collect certain technical information, including:

• Pages visited and time spent on each page
• Referring URL (the page that linked you to us)
• General geographic region (country or state level, not precise location)
• Device type, browser type, and operating system
• Performance data (page load times, Core Web Vitals)

We use privacy-focused analytics tools that do not use cookies for tracking and do not collect personally identifiable information through analytics.

We do not use third-party advertising trackers, and we do not sell or share analytics data with advertisers.

ProCatalyst Dashboard

If you are an authorized user of the ProCatalyst Dashboard (dashboard.procatalyst.com), we collect additional information in connection with your Dashboard use:

Account Information: Your name and email address, provided during account creation. Employee accounts are authenticated through Microsoft Single Sign-On (SSO) via your organizational Microsoft Entra ID identity. Client accounts are created by ProCatalyst administrators with an email address.

Authentication Data: We use Clerk, a third-party authentication provider, to manage Dashboard login sessions. Clerk collects session tokens and login event data necessary to authenticate your identity and maintain your session. Essential cookies are used for authentication and session management. These cookies are required for the Dashboard to function and cannot be disabled.

Project Data: The Dashboard displays project information, time entries, invoices, milestones, utilization metrics, and related data sourced from Productive.io (our project management platform). This data is retrieved in real-time via API and is not separately stored in the Dashboard application. Client users can only view data associated with their own projects.

Role-Based Access: Dashboard access is governed by a tiered permission model. Your access tier determines what data is visible to you. Client users see only their own project data. Internal employees see data relevant to their role and assignments.

Financial Integration

ProCatalyst uses Plaid Technologies, Inc. (“Plaid”) to connect our business banking institution for the purpose of reconciling incoming payments against outstanding invoices. This is an internal business function only.

• Plaid accesses transaction metadata (dates, amounts, sender names) and account balances from our business bank account
• No consumer, client, or employee financial data is collected through Plaid
• Plaid access tokens are stored as encrypted environment variables on our hosting platform and are never exposed to client-side code
• Transaction data retrieved through Plaid is retained for 24 months for reconciliation purposes, then permanently deleted
• For more information about Plaid's data practices, visit https://plaid.com/legal

How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and consultation requests
• To provide, maintain, and improve our services
• To send you information about our services if you have requested it
• To understand how visitors use the Site so we can improve the experience
• To monitor Site performance and security

We do not use your information for automated decision-making or profiling.

How We Share Your Information

We do not sell your personal information. We do not share your personal information with third parties for their marketing purposes.

We may share your information with service providers who assist us in operating the Site and delivering our services. Our service providers include:

• Clerk (clerk.com), for authentication and user session management on the client dashboard
• Vercel (vercel.com), for hosting the dashboard application and marketing website
• Productive.io, as our internal project management and time tracking platform, from which dashboard data is derived
• Resend, for email delivery related to contact form submissions and dashboard invitations
• Sanity.io, for content management on our marketing website
• PostHog (posthog.com), for product analytics, session recording, and usage tracking on the client dashboard and marketing website
• Upstash (upstash.com), for serverless database storage used in dashboard configuration and feature management
• Plaid Technologies (plaid.com), for business bank account reconciliation (internal use only; no client financial data is accessed)
• Analytics providers, to understand Site usage patterns

These service providers are authorized to use your information only as necessary to provide services to us and are contractually obligated to protect your information.

We may also disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect the information we collect. These measures include encrypted data transmission, access controls, and secure cloud infrastructure. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

For detailed information about our security practices, please visit our Data Security page at procatalyst.com/data-security.

Data Retention

We retain your contact information for as long as reasonably necessary to fulfill the purposes described in this policy, respond to your inquiries, and maintain our business relationship. If you would like us to delete your information, please contact us using the information below.

Analytics data is retained in aggregate form and does not contain personally identifiable information.

Dashboard account data is retained for the duration of the service relationship plus 3 years. Project data displayed on the Dashboard follows the retention schedule defined in our Data Retention and Deletion Policy, including contractual override provisions for client NDAs and BIM Service Agreements that may require earlier deletion of project files.

Your Choices

You may choose not to provide certain information, though this may limit our ability to respond to your inquiry or provide certain services.

If you have previously provided your contact information and would like to update, correct, or request deletion of your information, please contact us at info@procatalyst.com.

If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, to request deletion of your personal information, and to opt out of the sale of your personal information (which we do not do). To exercise these rights, contact us at the information below.

Additional Rights for EU/EEA Residents

If you are located in the European Union or European Economic Area, you may have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate personal data
• The right to request deletion of your personal data, subject to certain legal exceptions
• The right to restrict or object to our processing of your personal data
• The right to data portability (receiving your data in a structured, commonly used format)
• The right to withdraw consent at any time, where processing is based on consent
• The right to lodge a complaint with a supervisory authority in your member state

To exercise any of these rights, please contact us at info@procatalyst.com. We will respond to your request within 30 days.

Legal Basis for Processing (EU/EEA)

Where GDPR applies, we process personal data under the following legal bases:

• Legitimate interest: to respond to your inquiries, improve our Site, and conduct our business operations
• Contract performance: to fulfill requests related to our professional services
• Consent: where you have voluntarily provided your information through our contact form or other communication channels
• Legal obligation: where we are required to retain or disclose information by law

International Data Transfers

ProCatalyst operates in the United States with a production team based in Poland (EU). When you provide personal data through the Site, your information may be transferred to and processed in the United States. We implement appropriate safeguards for international data transfers, including secure encrypted transmission and access controls. By submitting your information through the Site, you acknowledge this transfer.

For data processed by our Poland-based team in the course of client engagements, processing occurs within the EU/EEA and is subject to GDPR protections.

Cookies

The Site uses minimal cookies necessary for basic functionality. We do not use cookies for advertising or cross-site tracking. Our analytics tools operate without cookies. We do not use cookies that require consent under GDPR or the ePrivacy Directive. If this changes in the future, we will implement a cookie consent mechanism before deploying any non-essential cookies.

The client dashboard at dashboard.procatalyst.com uses session cookies necessary for authentication. These cookies are set by our authentication provider Clerk and are required to maintain your logged-in session. They are not used for advertising or tracking. By logging into the dashboard, you consent to these functional cookies.

Third-Party Links

The Site may contain links to third-party websites, including our client dashboard (dashboard.procatalyst.com), LinkedIn, and other external resources. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies.

Children's Privacy

The Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

ProCatalyst, LLC
Dallas, TX
Email: info@procatalyst.com
Phone: 972.640.1367