Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Name and email address
• Account credentials
• Profile information you choose to publish
• Payment information (processed securely through third-party providers)

2. How We Use Your Information

We use the information we collect to:

• Provide and improve the CatchMeTonight experience
• Operate search, discovery, and profile pages
• Prevent fraud, abuse, and security incidents
• Communicate important updates and support responses

3. Information Sharing

We do not sell your personal information. We may share information with service providers who help operate the platform, or when required by law, or with your consent.

4. Data Security

We implement technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction.

5. Health Data & HIPAA

CatchMeTonight is not a covered entity under HIPAA. However, if you are a healthcare provider or wellness professional who creates, receives, maintains, or transmits protected health information (PHI) through the platform, CatchMeTonight will act as a business associate where required and will sign a Business Associate Agreement (BAA) upon request.

• Business Associate Agreement. A standard BAA is available by contacting hello@catchmetonight.com. Execution is required before any PHI may be uploaded, stored, or processed through the platform.
• Encryption. All data is encrypted at rest (AES-256) and in transit (TLS 1.3).
• Access logs. We maintain audit logs of access to sensitive data, including timestamps, user IDs, and IP addresses.
• Minimum necessary. We limit access to PHI to the minimum necessary to perform the required function.
• Breach notification. If a breach of unsecured PHI occurs, we will notify affected covered entities within 60 days of discovery.

6. Your Rights

You may have rights to access, correct, or delete your information depending on your location.

India — Digital Personal Data Protection (DPDP)

Where India's Digital Personal Data Protection Act, 2023 (DPDP Act) applies, we describe processing in line with this policy and applicable rules. Your counsel should confirm whether CatchMeTonight acts as a data fiduciary for specific flows and document retention and breach handling.

Grievance officer (India): Rishu Kalra. Contact: privacy@coutari.ai · 4 Lorikeet St, Glenwood, NSW - 2768, Australia.

Users in India may contact the grievance channel above to exercise access, correction, erasure, or grievance rights under the DPDP Act, 2023. We acknowledge within 48 hours and issue a substantive response within 30 days per §13.

7. Cookies and Tracking

We may use cookies and similar technologies to operate the site and understand usage. You can adjust cookie settings in your browser.

8. Changes to This Policy

We may update this policy from time to time by posting the revised policy on this page.

9. Contact us

If you have questions about this Privacy Policy, email us at hello@catchmetonight.com. For data-subject rights (access, correction, erasure, withdrawal of consent) or DPDP Act grievances, use our grievance officer channel at privacy@coutari.ai.