privacy policy

What we do with your information.

Last updated July 20, 2026. Operated by Commerce Catalyst Ventures Inc.

This page explains what the DTC Operator Diagnostic and the free tools on this site collect, why the product stores it, and how you can export or delete it. Diagnostic inputs and saved reports are private product records. They are not published or used to create a public case study.

What we collect

• The business details you type into the diagnostic: financial figures, customer and channel metrics, structured operating answers, and limited text evidence. Text fields cover business category; cohort or LTV definition; demand and distribution evidence; owner decision rights, priority checkpoints, and founder dependencies; and available credit and commitment flexibility. The diagnostic does not ask for a company name or general notes about your decision or goals.
• The saved report those inputs generate, including the score, evidence, risks, action plan, and owner names you choose to add.
• For paid access, the Stripe transaction references and verified checkout email used to administer access and recovery.
• Non-sensitive client funnel analytics, such as checkout start, stage progress, report view, print, recovery, and rerun actions. These events do not contain raw financial values or founder notes.

How it is used

• To save your draft, generate and reproduce the report on the server, and compare the included rerun under the retained ruleset.
• To verify paid access, provide recovery, export or delete authenticated product data, and operate and improve the product.
• Processing consent is required before a report can be generated. It is separate from marketing consent.
• Purchasing or using the diagnostic does not add you to a marketing list or create an automatic marketing opt-in.

Where it goes

• Commerce Catalyst product systems. Drafts, immutable run inputs and outputs, version information, and owner assignments are stored in a private product database. Paid access is controlled by a secure, product-scoped session rather than a browser-created entitlement.
• Your browser. The product may keep an entitlement-scoped fallback draft on your device if a save is interrupted. Browser storage is not proof of purchase and cannot generate a trusted report.
• Stripe. Stripe processes the US$197 payment. Stripe’s verified checkout email is the identity for that purchase. Commerce Catalyst does not receive or store your full card number.
• Transactional email. Stripe may send a purchase receipt. Commerce Catalyst sends only access-code verification, recovery, report-ready, and rerun reminder messages for this product. Marketing email requires a separate opt-in elsewhere.

Service providers

We use a small set of processors to run the product: Stripe for payment, a private database host for product records, and an email provider for transactional messages. We do not sell your information or share it beyond the providers needed to deliver and secure the diagnostic.

Keeping and removing your data

• Inactive drafts are deleted 90 days after the last activity.
• Generated input snapshots and saved report content are retained for 24 months after the most recent run. Minimal purchase and refund webhook event records are retained for 13 months.
• Expired recovery tokens and sessions are removed on shorter operational schedules. Minimal entitlement and transaction references are retained for seven years for access administration, accounting, and dispute records, without report content.
• While authenticated, you can export current drafts, immutable run inputs and outputs, versions, and owner assignments as JSON.
• Authenticated deletion immediately removes drafts, saved report content, owner assignments, recovery tokens, and active sessions, and anonymizes eligible payment and refund event records. It retains a minimal entitlement and transaction reference, run count, and deletion receipt. Deletion does not restore a consumed rerun, and deleting the baseline removes future comparison.

Contact

Questions about this policy or your data: chris@commercecatalyst.ai.