Privacy Policy

Effective: June 13, 2026 · Publisher: KATAVON LLC, a US limited liability company ("KATAVON", "we", "us", "our").

This Privacy Policy describes how we collect, use, share, retain, and protect information when you use the Beyond The Sale customer relationship management (CRM) platform (the "Service") through our website (beyondthesale.io), our mobile app, our APIs, and any related integrations.

1. Information we collect

1.1 Information you provide

• Account information: name, email address, phone number, password (stored as a salted hash), profile photo, company information, time zone, language preference.
• CRM content you enter: contacts, leads, prospects, clients, deals, tasks, notes, projects, sessions, custom fields, and any other data you choose to store in the platform.
• Messaging: emails you compose through the platform, in-app chat messages, SMS messages sent through our Twilio integration, DMs through ManyChat / HelpScout if connected.
• File uploads: contracts, documents, images, presentations, and any other files you upload.
• Payment information: billing details for your KATAVON subscription. Card numbers are processed exclusively by Stripe; KATAVON never receives or stores raw payment card data.

1.2 Information collected automatically

• Usage data: pages viewed, features used, in-app interactions, session timestamps. Collected on our own servers; we do not use third-party analytics, advertising SDKs, or trackers.
• Device + connection metadata: IP address, browser type, operating system, device identifiers, time zone. Used for security, fraud prevention, and platform compatibility.
• Crash + performance diagnostics: error logs and performance traces from the mobile app, not linked to identifying data.
• Push notification subscription endpoints: when you opt in to push notifications, your browser/device provides a Web Push subscription endpoint (or APNS/FCM token on native). We store this only to send notifications you have subscribed to.

1.3 Information from integrations

• Fathom (fathom.video): if you connect your Fathom account, we receive meeting recordings, transcripts, AI summaries, action items, and attendee emails for meetings you record. Audio content is processed by Fathom; we receive the resulting text artifacts. Coverage of Fathom's own privacy practices is at fathom.video/privacy.
• Whop.com: if you connect your Whop company, we receive membership events, payment events, refund/dispute events, and waitlist entries. Payment card details remain with Whop and its payment processors; KATAVON receives only metadata (amount, status, member identity).
• Google (Gmail + Calendar + Meet OAuth): we access only the data needed for calendar sync, email sending, and meeting scheduling, in accordance with the Google API Services User Data Policy, including Limited Use requirements. OAuth tokens are encrypted at rest using AES-256-CBC.
• Stripe, Twilio, Slack, Cal.com, HelpScout, ManyChat, Formbricks: if you connect any of these, we receive the data necessary to perform the integration (payment events, SMS delivery receipts, channel messages, booking events, support tickets, form submissions, etc.).

2. How we use your information

• Provide and operate the Service (account management, CRM functionality, integrations).
• Send transactional emails and push notifications you have subscribed to (meeting reminders, payment alerts, task deadlines, etc.).
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal, tax, and accounting obligations (including US Internal Revenue Code, state sales tax, and SOC 2 audit requirements where applicable).
• Improve the Service through aggregated, de-identified usage analysis. We do not profile individual users for advertising.

3. How we share your information

KATAVON does not sell your personal information and does not share it with third parties for advertising or cross-app tracking. We share information only as follows:

• Service providers acting on our behalf: cloud hosting (Elestio), database, email delivery, SMS delivery (Twilio), payment processing (Stripe), AI model providers (Anthropic, OpenAI) for specific in-app AI features you trigger.
• Integrations you explicitly connect: when you connect Fathom, Whop, Google, Stripe, etc., data flows to and from those services per your authorization.
• Legal compliance: in response to valid legal process, lawful government requests, or to protect rights, property, or safety.
• Business transfer: in connection with a merger, acquisition, or asset sale, with continuing protection of your data.

4. Data storage, security, and residency

Data is stored on US-based infrastructure. We use TLS 1.2+ for data in transit. Tokens and sensitive credentials are encrypted at rest using AES-256-CBC. Passwords are hashed with bcrypt. We follow industry-standard security practices and continually improve them.

5. Data retention

We retain personal information for as long as your account is active. When you delete your account (see §6), your account record is anonymised within 24 hours and permanently deleted within 30 days, with the following exceptions retained anonymised for the period required by law:

• Audit logs and accounting records (commission invoices, payment ledgers): retained for the period required by US Internal Revenue Code (typically 7 years).
• Backups: rolling 90-day retention before purge.
• Information required for ongoing legal proceedings, if any.

6. Your choices and rights — account deletion

You have the right to access, correct, export, or delete your personal information at any time:

• In-app account deletion: open the mobile app or web app → Settings → Delete Account. Your account is immediately anonymised and scheduled for permanent deletion within 30 days.
• Web-based account deletion (no login required): beyondthesale.io/account-deletion — enter your account email and we will send a confirmation link.
• Data export: request a copy of your CRM data via the in-app export tools or by contacting us.
• Revoke integrations: disconnect Fathom, Whop, Google, etc. at any time from the Integrations settings page.

7. California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect about you, the right to delete it, the right to correct it, the right to limit use of sensitive personal information, and the right not to be discriminated against for exercising your rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, contact us at the email below.

8. European Union residents (GDPR)

If you are in the EU/EEA/UK, you have the rights of access, rectification, erasure, restriction of processing, data portability, and objection under the GDPR. The legal basis for our processing is your consent (where applicable), contractual necessity (to provide the Service), or our legitimate interests (to secure and improve the Service). To exercise your rights or to lodge a complaint with your supervisory authority, contact us at the email below.

9. Children

The Service is intended for use by adult business operators. We do not knowingly collect personal information from individuals under 18 years of age. If you believe we have collected information from a minor, contact us and we will delete it.

10. Push notifications

If you enable push notifications, your device will receive notifications about events you subscribe to (messages, meetings, payments, NPS responses, tasks). You can revoke this at any time in Settings → Notifications in the app, or by changing your browser/OS notification permissions. Push subscriptions are deleted from our database when you revoke them.

11. International data transfers

KATAVON LLC operates from the United States. By using the Service from outside the US, you understand and consent to the transfer of your data to the US for processing.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new "Effective" date. Material changes will be communicated by in-app notice or email.

13. Contact

Questions, requests, or complaints? Contact KATAVON LLC at support@beyondthesale.io.

Back to Home · Terms of Service · Delete my account