Privacy Policy

Plain-English summary:We collect only what we need to respond to design-partner applications and deliver the service. We don't sell your data. We don't share it with marketers. We use a small number of trusted vendors (Resend for email, Vercel for hosting) and we've listed them below. You can ask us to delete your data at any time by emailing hello@qatch.ai.

1. Who we are

QATCH.ai ("QATCH," "we," "our," "us") is a Delaware-formed company headquartered in the United States. We build wire-fraud verification + insurance software for title and escrow companies. This policy explains how we handle data collected through qatch.ai and through our product when it goes live in pilot.

2. What we collect

We collect three categories of data, each with a specific purpose:

• Information you give us directly. When you fill out the design-partner form, you provide your name, company, role, email, phone (optional), and details about your wire-fraud history and current verification process. When you email us, we receive whatever you choose to share. We do not ask for sensitive personal data via the form.
• Automatic technical data. Our hosting provider (Vercel) and our analytics tooling collect standard server logs: IP address, browser type, pages visited, referring URL, timestamps. We use this to keep the site working, debug problems, and understand which content prospects find useful. We do not use third-party advertising cookies. We do not track you across other sites.
• Product data (when the QATCH product goes live in pilot).Customer organizations who use our verification + insurance product entrust us with transaction-level data — wire details, counterparty information, email-thread context for verification — as required to operate the service. The handling of that data is governed by the customer agreement signed at onboarding, not by this website-focused privacy policy.

3. How we use it

Specifically and only:

• To reply to your design-partner inquiry personally, usually within one business day
• To send you the auto-confirmation email after you submit the form
• To improve the product based on feedback you share
• To send service-related emails (no marketing newsletter without explicit opt-in)
• To analyze aggregate site usage and improve content + UX
• To meet legal obligations (tax, audit, regulatory) where applicable

We do not use the data we collect to train AI models. We do not sell or rent your data. We do not share it with marketers, data brokers, or anyone else outside the listed processors below.

4. Who we share it with

We share data only with vendors who help us operate, under contractual confidentiality. The current list:

• Vercel — hosts the website and processes server logs. Privacy policy: vercel.com/legal/privacy-policy.
• Resend — sends transactional emails (admin notifications + applicant auto-confirmations). Privacy policy: resend.com/legal/privacy-policy.
• (Pilot phase, with customer consent)— when the QATCH product is in pilot, additional processors (Banking-as-a-Service partner, Plaid for transaction data, frontier LLM providers for AI verification) become involved. Each is governed by the customer agreement, listed at onboarding, with the customer's explicit consent.

We will update this list as our vendor stack evolves. Material changes will be communicated via email to anyone with an active account.

5. Where the data lives

All data is stored in United States data centers operated by our cloud providers (Vercel + AWS-based). Backup and disaster recovery also occur in US data centers. We do not transfer customer data outside the United States without explicit consent.

6. How long we keep it

• Form submissions — retained indefinitely for our customer-relationship records, unless you ask us to delete them.
• Email correspondence — retained while the relationship is active, deleted on request.
• Server logs — retained for 90 days, then aggregated and anonymized.
• Product transaction data (when in pilot) — retained for the regulatory minimum (7 years for financial transactions per BSA requirements), then deleted on request.

7. Your rights

Regardless of where you live, you have the right to:

• Access — request a copy of the data we have about you
• Correction — ask us to fix anything that's wrong
• Deletion — ask us to remove your data (subject to legal retention requirements)
• Portability — receive your data in a machine-readable format
• Objection — opt out of any processing you don't want
• Withdraw consent — for any processing that depends on consent

To exercise any of these, email hello@qatch.ai. We respond personally within one business day.

If you're a California resident, the CCPA gives you specific rights — we treat all users with the same level of respect regardless of residency, so the list above applies. If you're in the EU/UK and GDPR applies to you, the legal bases for our processing are: (a) consent (form submissions), (b) legitimate interests (responding to your inquiry, improving the service), and (c) contractual necessity (when you become a customer).

8. Cookies + tracking

We use essential cookies only (session management, security). We do not use third-party advertising cookies. If we add privacy-first product analytics (Plausible or PostHog) later, we'll update this section and disclose specifically.

9. Security

We use industry-standard security controls: HTTPS everywhere (Let's Encrypt cert via Vercel), MFA on all internal admin accounts, encrypted secrets management. We're targeting SOC2 Type II by Q4 2026. We'll publicly attest our security posture once that certification is complete.

If you find a security issue, please report it to security@qatch.ai. We acknowledge within 24 hours and prioritize fixes.

10. Children

QATCH is a B2B service for businesses. We don't knowingly collect data from anyone under 18. If you believe a minor has submitted information to us, email us and we'll delete it.

11. Changes to this policy

We'll update this policy when our practices change. Material changes will be announced via email to anyone with an active account, and the "Last updated" date at the top of this page will reflect the change. Continued use of QATCH after an update means you accept the revised policy.

12. Contact

Questions, requests, or concerns: email hello@qatch.ai. For specifically privacy-related requests, email privacy@qatch.ai and we'll route directly to whoever handles data requests.

This policy was drafted in plain English to be understood without a law degree. It is not a substitute for tailored legal advice. We recommend customers consult their own counsel on any specific data-handling questions.