Privacy Policy
Project Catalyst Platform Privacy Policy
Last Updated: July 17, 2025
Thank you for choosing to be part of our community at Input Output Global, Inc. (together with its subsidiaries and affiliates, “IOG”, “we”, “us”, or “our”). This Project Catalyst Platform Privacy Policy (this “Platform Privacy Policy”) applies to all information that can be used to identify you ("Personal Data") that is collected through the https://app.projectcatalyst.io, https://reviews.projectcatalyst.io and https://milestones.projectcatalyst.io websites, the Catalyst Voting app (available at the Apple App Store and the Google Play Store) and other services, features, functionality or resources available or enabled within the foregoing (collectively, the “Platform”). Personal Data collected through IOG’s other websites (including, without limitation, for Platform technical support), browser extensions or plug-ins or any other mobile apps, products, services, sales, marketing or events is excluded from the scope of this Platform Privacy Policy and will be collected in accordance with the IOG Privacy Policy, found here.
We are committed to protecting your Personal Data. In this Platform Privacy Policy, we describe what personal data we collect, how we collect, use, store and share your Personal Data and what rights you have in relation to it. Please read this Platform Privacy Policy carefully. If there are any terms in this Platform Privacy Policy that you do not agree with, please discontinue access to and use of the Platform.
Collection and Use of Data. IOG collects several types of information, including Personal Data, for various purposes to provide and improve the Platform for your use. While using the Platform, IOG may collect the following types of data (some of which constitutes Personal Data) for the following purposes:
First and last name – If applicable to you as a Project Catalyst participant, we collect this to enable you to submit proposals to the Platform and to communicate with you regarding your use of the Platform (including, without limitation, collecting feedback) and your participation in Project Catalyst.
Email address – If applicable to you as a Project Catalyst participant, we collect this to enable you to register to use the Platform, to create a Platform account and to communicate with you regarding your use of the Platform (including, without limitation, collecting feedback) and your participation in Project Catalyst. We also collect this if you opt to receive our newsletter to receive Project Catalyst updates. You may opt out of receiving these communications by following the unsubscribe link or instructions provided in any email sent to you by IOG.
Name of the company you are employed or engaged by – If applicable to you as a Project Catalyst participant, we collect this to enable you to register to use the Platform and to personalize the Platform for your user experience.
Cookie Data – We deploy required functionality cookies to enable features of the Platform, as further described in our Cookie Policy. These cookies are placed on your device when you access or use the Platform.
Anonymized Log Data – We collect anonymized log data to track the Platform’s operations to improve user experience without identifying you. Anonymized log data may include problems, errors and system operations and how you may be using the Platform.
IP Address – We temporarily collect IP address data for the basic functionality of the Platform where you make requests from your device to the Platform and to comply with legal requirements (e.g., blocking users from sanctioned jurisdictions).
Where permitted under applicable law (e.g., with your prior consent under GDPR), IOG may process your contact information that you share with us for direct marketing purposes (e.g., event invitations, newsletters, unpaid research opportunities and general information relating to Project Catalyst) and to carry out customer satisfaction surveys, in each case also by email. You may opt out of the processing of your contact information for these purposes at any time by submitting a request here, by writing to [email protected] or by using the opt-out mechanism provided in the respective communication you received. Information we collect and store for other purposes (e.g., to permit you to register to use the Platform) remains unaffected. We do not share your information collected for these purposes with third parties.
Legal Basis under General Data Protection Regulation (GDPR). For a citizen or resident of a member country of the European Union (EU) or the European Economic Area (EEA), the legal basis for collecting and using Personal Data described in this Platform Privacy Policy depends on the Personal Data being collected and the specific context in which it is collected, as described below.
IOG may process your Personal Data because:
You have given us permission to do so (e.g., by opting into receiving newsletters) (GDPR Article 6(1)(a))
IOG needs to perform a contract with you (e.g., providing Platform functionality based on your usage) (GDPR Article 6(1)(b))
IOG has to comply with applicable law (e.g., blocking access from sanctioned jurisdictions) (GDPR Article 6(1)(c))
IOG has legitimate interests to do so (e.g., improving the Platform based on your feedback) (GDPR Article 6(1)(f))
Please note that in some cases, the legal basis for IOG processing Personal Data may (in addition or instead) be that you have consented (GDPR Article 6(1)(a)).
Generally, the legitimate interests pursued by IOG in relation to our use of your Personal Data is the efficient performance or management of our business relationship with you, such as improving the Platform. When we rely on legitimate interests, we assess that our interests are not overridden by your rights and freedoms. You have the right to object to this processing (see “Rights Under GDPR” below), and we will stop processing your data unless we can demonstrate compelling legitimate grounds.
Retention of Data. IOG will retain your Personal Data only for as long as is necessary for the purposes set out in this Platform Privacy Policy. Specifically:
IP addresses and anonymized logs are kept for 30 days, except IP addresses collected to block users from sanctioned jurisdictions will be kept for ten years in accordance with the United States’ Office of Foreign Assets Control requirements.
Email addresses and cookie data will be kept until you withdraw your consent (which may impact certain features of the Platform or your ability to access the Platform.
Additionally, IOG may retain and use your Personal Data for longer periods of time to the extent necessary to comply with our legal obligations (for example, if IOG is required to retain your Personal Data to comply with applicable laws), resolve disputes and enforce legal agreements and policies.
Transfer Of Data. Your information, including Personal Data, may be transferred to – and maintained on – computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction.
IOG will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Platform Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your Personal Data and other information.
Disclosure Of Data. IOG may disclose your Personal Data in good faith belief that such disclosure is necessary to:
To comply with a legal obligation
To protect and defend the rights or property of IOG
To prevent or investigate possible wrongdoing in connection with the Platform
To protect the personal safety of users of the Platform or the public
To protect against legal liability
Except as required by law or as described herein, IOG does not sell, rent or share your Personal Data with third parties for their own purposes. Disclosure of Personal Data Within The EU
Insofar as we employ the services of service providers to implement or fulfill any tasks on our behalf (such as cloud hosting providers or analytics services), the contractual relations will be regulated in writing according to the provisions of the European General Data Protection Regulation (EU-GDPR) and the Federal Data Protection Act (new BDSG). These providers receive anonymized or aggregated data only and are contractually obligated to protect your Personal Data.
Disclosure of Personal Data Outside of The EU
Insofar as you have selected and consented to this in the form, your data will be disclosed to our offices within the network of affiliated companies outside of the European economic area for the processing of your enquiry. These offices are legally obligated to abide by the EU-GDPR. Furthermore, between the legally autonomous companies in the network of affiliated companies, written agreements exist for the processing of data on commission, based on standardized contract stipulations.
Security Of Data. We use reasonable technical and organizational methods to safeguard your Personal Data. However, please note that these security measures are not a guarantee that your Personal Data may not be accessed, disclosed, altered or destroyed by breach of such measures.
Whilst we will use all reasonable efforts to safeguard your information, you acknowledge that data transmissions over the internet cannot be guaranteed to be 100% secure and for this reason, we cannot guarantee the security or integrity of any Personal Data that is transferred from you or to you via the internet and as such, any information you transfer to IOG is done at your own risk.
Where we have given you (or where you have chosen) a password which enables you to access the Platform or certain parts of the Platform, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
If we learn of a security system breach, we may attempt to notify you electronically so that you can take appropriate protective steps. If you provided your email address to us, then you agree that we can communicate with you electronically regarding security, privacy and administrative issues relating to your use of the Platform. We may post a notice on the Platform if a security breach occurs. Depending on where you live, you may have a legal right to receive notice of a security breach in writing.
Rights Under General Data Protection Regulation (GDPR). If you are a citizen or resident of a member country of the European Union (EU) or the European Economic Area (EEA), you have certain data protection rights. IOG aims to take reasonable steps to allow you to correct, amend, delete or limit the use of your Personal Data.
If you wish to be informed what Personal Data IOG holds about you and if you want it to be removed from our systems, please contact us by submitting a request here or by writing to [email protected].
In certain circumstances, you have the following data protection rights:
The right to access. You have the right to request information concerning the Personal Data we hold.
The right of rectification. You have the right to have your Personal Data rectified if that information is inaccurate or incomplete.
The right to object. You have the right to object to your Personal Data being used for a particular purpose and you can exercise these rights, for example, via an unsubscribe link at the bottom of any email.
The right of restriction. You have the right to request that IOG restrict the processing of your Personal Data.
The right to data portability. You have the right to be provided with a copy of the Personal Data in a structured, machine readable and commonly used format.
The right to withdraw consent. You also have the right to withdraw your consent at any time where IOG relied on your consent to process your Personal Data.
The right to data deletion. You have the right to ask us to delete your data, though we may need to keep some for legal reasons.
Please note that IOG may ask you to verify your identity before responding to such requests.
You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the EU or EEA.
California Residents. If you are a California resident, you have certain rights with respect to your Personal Data pursuant to the California Consumer Privacy Act of 2018 (“CCPA”). This section applies to you.
We are required to inform you of: (a) what categories of information we collect about you, including during the preceding 12 months; (b) the purposes for which we use your Personal Data, including during the preceding 12 months; and (c) the purposes for which we share your Personal Data, including during the preceding 12 months. You have the right to: (i) request a copy of the Personal Data; (ii) request that we delete your Personal Data; and (iii) opt out of the sale of your Personal Data. You can limit the use of tracking technologies, such as cookies, by following instructions outlined in our Cookie Policy, by submitting a request here or by writing to [email protected]. These rights are subject to limitations as described in the CCPA.
We will not discriminate against any consumer for exercising their CCPA rights. If you would like to exercise any of these rights, please submit a request here or by writing to [email protected].
Service Providers & Newsletter.
IOG may employ third-party companies and individuals to facilitate the Platform, to provide the Platform on our behalf, to perform website-related services or to assist us in analyzing how the Platform is used ("Service Providers"). These Service Providers have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Newsletter
If you would like to receive our newsletter, we require a valid email address and your consent to receive this newsletter. No additional data is collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.
You can revoke consent to the storage and use of your email address and other Personal Data (if any) for sending the newsletter at any time, e.g., through the "unsubscribe" link in the newsletter, by submitting a request here or by writing to [email protected]. The data processed before we receive your request may still be legally processed. Data we have stored for other purposes (e.g., email addresses for Platform functionality) remain unaffected.
Links To Other Products. The Platform may contain links to other products that are not operated by IOG. If you click on a third-party link, you will be directed to that third party's site. You’re advised to review the privacy policy of each non-Platform site you decide to visit. IOG has no control over and assumes no responsibility for the content, privacy policies or practices of any third-party product or service.
Changes To This Platform Privacy Policy. IOG may update this Platform Privacy Policy from time to time. Such changes will be posted on this page. The effective date of such changes will be as of the "Last updated" date at the top of this Platform Privacy Policy. You are advised to review this Platform Privacy Policy periodically for any changes. Changes to this Platform Privacy Policy are effective when they are posted on this page.
Data Privacy Contact. You can reach our data protection officer by submitting a request here or by writing to [email protected].
Contact by E-mail or Contact Form. When you contact us by e-mail or through a contact form, we store the Personal Data you provide (e.g., your email address, possibly your name and telephone number) so we can answer your questions. Insofar as our contact form requests information that is not required for contacting you, we have marked those fields as optional. The information requested by us serves to substantiate your inquiry and improve the handling of your request. Your message may be linked to various actions taken by you on the Platform. Information collected will be used to provide you with support relating to your inquiry and to better understand your feedback. A statement of this information is expressly provided on a voluntary basis and with your consent. As far as this concerns information about communication channels (such as e-mail address or telephone number), you also agree that we may, where appropriate, contact you via this communication channel to answer your request.
Last updated