Privacy Policy

This Privacy Policy describes how Shasta Tech Systems, a California sole proprietorship doing business as Katsu (“Katsu,” “we,” “us,” or “our”), collects, uses, stores, processes, and discloses information when you use the Katsu website, software platform, hosted website services, artificial intelligence features, and related services (collectively, the “Service”).

Shasta Tech Systems is located at:

405 Redcliff Dr #240 Redding, CA 96002 United States

Privacy inquiries may be sent to:

[email protected]

1. Scope

Katsu is a business software platform intended for business owners, contractors, service providers, and other business users located in the United States.

The Service is intended only for persons who are at least 18 years old.

This Privacy Policy applies to information processed through Katsu and our associated website and services.

2. Information We Collect

Depending on how you use Katsu, we may collect and process the following categories of information.

Account Information

We may collect information such as:

• Name
• Business name
• Email address
• Account credentials
• Account preferences
• Subscription status
• Communications with Katsu support

Customer and Business Records

Users may enter or upload information relating to their own customers, prospects, employees, business contacts, projects, documents, correspondence, appointments, and business operations.

Users are responsible for ensuring that they have the necessary rights and legal authority to provide this information to Katsu.

Documents and Files

Katsu allows users to upload and manage documents and other files, subject to file-type, file-size, storage, and other technical limitations.

Uploaded content may contain information selected by the user.

Website Content

Users may create and manage business website content through Katsu.

This may include:

• Business descriptions
• Images
• Logos
• Service information
• Contact information
• Marketing copy
• Search-engine-optimization content
• AI-generated content

Customers retain ownership of their own content.

Payment Information

Payments are processed through Stripe.

Katsu does not store complete payment-card numbers or card security codes.

Payment information entered into Stripe’s payment systems is handled by Stripe according to Stripe’s own terms and privacy practices.

Katsu may receive payment-related information such as:

• Subscription status
• Payment status
• Billing amount
• Transaction identifiers
• Limited card information such as brand and last digits
• Billing contact information

Technical Information

Our systems may automatically generate standard server and operational information necessary to operate, troubleshoot, and secure the Service.

This may include information such as:

• IP addresses
• Browser information
• Device information
• Request information
• Authentication events
• Server logs
• Error information
• Security-related information

Cookies

Katsu currently uses cookies or similar technologies primarily for authentication, session management, security, and operation of the Service.

Katsu does not currently use behavioral advertising or retargeting cookies.

3. How We Use Information

We may use information to:

• Create and manage Katsu accounts
• Authenticate users
• Provide document-management features
• Manage customer and business records
• Provide hosted website functionality
• Provide SEO and content-management features
• Provide prospecting and business-search functionality
• Allow users to read, prepare, send, organize, and manage email
• Allow users to read and manage calendar events
• Provide AI-assisted features
• Process subscriptions and payments
• Provide customer support
• Diagnose technical problems
• Maintain security
• Prevent fraud or misuse
• Communicate important account, billing, security, and legal information
• Send marketing communications where permitted
• Comply with legal requirements
• Improve the Service using aggregated or de-identified information

4. Artificial Intelligence and OpenAI

Katsu includes artificial intelligence functionality powered in part through OpenAI’s API services.

When you use AI-enabled features, information relevant to the requested task may be transmitted to OpenAI for processing.

Depending on the feature used, this information may include:

• Uploaded documents
• Customer records
• Business records
• Website content
• User instructions
• Other information selected or made available by the user

Katsu uses this information only as necessary to provide user-facing Katsu functionality.

Katsu does not voluntarily enable OpenAI API data-sharing settings that permit customer API inputs and outputs to be used for generalized model training or improvement.

AI outputs may contain errors. Users are responsible for reviewing AI-generated information before relying on, sending, publishing, or acting upon it.

5. How We Share Information

Katsu does not sell personal information.

Katsu does not sell customer data.

Katsu does not operate as a data broker.

Katsu does not share personal information for cross-context behavioral advertising or unrelated advertising purposes.

We may disclose information to service providers that process information on our behalf and only as reasonably necessary to operate the Service.

These categories may include:

Infrastructure Providers

Katsu currently uses infrastructure including Hetzner-hosted systems and Amazon Web Services S3 storage.

AWS S3 storage used by Katsu is encrypted at rest.

Information transmitted between users and Katsu is protected using HTTPS/TLS while in transit.

OpenAI

OpenAI processes information supplied to AI features as described above.

Stripe

Stripe processes payment information and subscription transactions.

Email Delivery Providers

Katsu uses a third-party email-delivery provider to send transactional, service, security, account, and marketing communications.

Legal Requirements

We may disclose information if reasonably necessary to:

• Comply with applicable law
• Respond to a valid subpoena or court order
• Respond to lawful governmental requests
• Protect our legal rights
• Investigate fraud or abuse
• Protect Katsu, its users, or others from security threats or harm

Business Transfers

If Shasta Tech Systems or Katsu is involved in a merger, acquisition, sale, financing, restructuring, bankruptcy, or transfer of all or part of its business or assets, information may be transferred as part of that transaction, subject to applicable law and this Privacy Policy or substantially equivalent privacy protections.

6. Marketing Communications

Katsu may send users promotional or marketing communications.

Users may unsubscribe from marketing communications through the unsubscribe mechanism provided in those messages or by contacting us.

Opting out of marketing communications does not prevent Katsu from sending necessary transactional communications, including:

• Account notices
• Password or security notices
• Billing communications
• Subscription information
• Service announcements
• Legal notices

7. Data Retention

Katsu retains information as reasonably necessary to provide the Service, comply with legal requirements, maintain security, resolve disputes, and enforce agreements.

Users may configure retention periods for certain information.

When configured retention periods expire, applicable information is deleted from active Katsu storage according to those settings.

Some information may remain temporarily in backups until those backups are overwritten or deleted.

Katsu generally maintains backups for approximately 30 days.

Upon a valid account deletion request, Katsu will terminate the account and delete account information from active systems within 30 days, subject to limited exceptions where retention is required for legal, security, fraud-prevention, billing, or dispute-resolution purposes.

Residual copies may remain temporarily in backups until those backups cycle out.

8. Account Deletion

Users may request deletion of their Katsu account by contacting:

[email protected]

Katsu may verify the identity of the requester before completing a deletion request.

Account deletion is generally completed within 30 days.

Katsu does not currently provide a general self-service export of all account data before deletion.

9. Security

Katsu uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards include HTTPS/TLS encryption for information transmitted between users and Katsu.

Certain storage services used by Katsu, including AWS S3 storage, use encryption at rest.

Not all information stored within Katsu’s infrastructure is necessarily encrypted at rest.

No method of electronic transmission or storage can be guaranteed to be completely secure, and Katsu cannot guarantee absolute security.

Users are responsible for protecting their account credentials and promptly informing Katsu if they suspect unauthorized account access.

10. Sensitive Information

Katsu is not intended for storage of highly sensitive regulated information.

Users must not intentionally upload or store information such as:

• Social Security numbers
• Complete payment-card information
• Payment-card security codes
• Online banking credentials
• Highly sensitive financial credentials
• Medical records or protected health information
• Authentication secrets belonging to third parties
• Other similarly sensitive information prohibited by Katsu

If a user chooses to store prohibited information notwithstanding this restriction, the user does so contrary to Katsu policy and remains responsible for that conduct and the information supplied.

11. Customer and Third-Party Data

Katsu customers may enter information concerning their own customers, prospects, employees, contractors, and other third parties.

The Katsu customer is responsible for determining whether it has the lawful authority, notices, consents, and other permissions necessary to collect and provide that information to Katsu.

Katsu processes that information as necessary to provide the Service to its customer.

12. Aggregated and De-Identified Information

Katsu may create and use aggregated or de-identified information for:

• Internal analytics
• Security
• Service reliability
• Product development
• Service improvement
• Capacity planning

We will not attempt to re-identify information that has been properly de-identified except where reasonably necessary to test or verify the effectiveness of de-identification methods or as otherwise permitted by law.

13. California Privacy Rights

California residents may have rights under applicable California privacy laws.

Depending on the law and circumstances applicable to Katsu, these may include rights to:

• Request information about personal information Katsu maintains
• Request correction of inaccurate personal information
• Request deletion of personal information
• Obtain information about categories of personal information collected or disclosed
• Opt out of certain uses where applicable
• Exercise applicable privacy rights without unlawful discrimination

Katsu does not sell personal information or share personal information for cross-context behavioral advertising.

Requests may be sent to:

[email protected]

We may require reasonable verification of identity before responding to a privacy request.

Nothing in this section grants rights that do not otherwise apply under applicable law.

14. Children’s and Minors’ Information

Katsu is intended solely for persons age 18 or older.

Katsu does not knowingly collect personal information from persons under 18.

If we learn that information from a person under 18 has been submitted to Katsu contrary to this policy, we may delete it.

15. Data Processing Locations

Katsu and its service providers primarily process information in the United States.

Information may be processed or stored outside California or in other locations where our service providers maintain infrastructure.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our Service, technology, legal requirements, or data practices.

If changes are material, we may provide notice through the Service, by email, or through another reasonable method.

The effective date appearing at the top of the Privacy Policy indicates when it was most recently updated.

17. Contact

Questions, privacy requests, correction requests, account deletion requests, or other privacy-related inquiries may be sent to:

Shasta Tech Systems / Katsu 405 Redcliff Dr #240 Redding, CA 96002 United States

Email: [email protected]