Effective Date: 18 February 2026

Last Updated: 18 February 2026

Who We Are

Catapult Labs Limited (trading as "Catapult") is the provider of an AI assistant that unifies work context across third party technologies for search, drafting, brainstorming and decision making. We respect your privacy and are committed to protecting your Personal Data when you visit our Website, downloading our App and using our products and Services (as defined below) as set out in this privacy policy (“Policy”).

By visiting https://www.catapult.xyz/, downloading our App, using our Services and/or engaging with us you accept and consent to the practices described in this Policy, as amended from time to time by updating this page. Any queries related to this Policy should be directed to help@catapultlabs.xyz or 241 Southwark Bridge Road, London, England, SE1 6FP.

Catapult is the Controller for Account Data and other direct user data, and acts as Processor for Workspace Data processed on your instructions. Where Catapult acts as a Processor of Workspace Data, the customer remains the Controller of that Workspace Data and is responsible for determining the purposes and means of processing such data.

Defined Terms

Unless defined in this Policy, defined terms shall have the meaning given to them in the Data Protection Legislation.

"Account Data" means Personal Data relating to the creation and administration of a Catapult user account, including authentication details and permissions.

"App" means the app made available by Catapult in connection with the Website and Services.

"Aggregated Data" has the meaning given in the Collected Information section.

"Catapult", "we", "our" or "us" means Catapult Labs Limited (trading as "Catapult").

"Controller", "Processor", "Personal Data", "Processing" and "Supervisory Authority" have the meanings given in Data Protection Legislation.

"Data Protection Legislation" means all applicable data protection and privacy legislation, including but not limited to the UK General Data Protection Regulation (“UK GDPR”), UK Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and, where applicable, the EU General Data Protection Regulation (EU GDPR) (together “Data Protection Legislation”).

"Services" means the services made available by Catapult from time to time including the Website and App (as defined and further described in the Terms (www.catapult.xyz/terms).

"Website" means the website available at www.catapult.xyz.

"Workspace Data" means data made available to Catapult from third-party services connected by a customer, as described in this Policy.