Last Updated: Sep 18, 2026
This Privacy Notice describes how Cato Digital, Inc. (“Cato,” “we,” “us,” or “our”) collects, uses, and shares personal information through cato.digital, the Cato Admin Console, the Cato Support Portal, and Cato infrastructure Services that reference this Privacy Notice (collectively, the “Covered Services”).
This Privacy Notice applies to personal information Cato collects for its own business purposes in connection with the Covered Services. It does not apply to Customer Content submitted, stored, transmitted, or processed through the Services, which is governed by the Cato Service Terms and applicable Privacy and Security Terms.
This Privacy Notice does not apply to other Cato websites, products, or services unless they expressly reference this Privacy Notice.
Capitalized terms not defined in this Privacy Notice have the meanings given in the Cato Service Terms.
We may collect personal information in the following ways.
1.1. Information You Provide. We collect information you provide directly to us, including information provided when you:
(a) create or administer an account;
(b) purchase or use the Covered Services;
(c) provide billing or payment information;
(d) contact sales, support, or other Cato personnel;
(e) submit forms, requests, feedback, or other communications; or
(f) otherwise interact with Cato.
This information may include your name, email address, telephone number, organization, job or account role, billing information, account information, and the contents of communications you send to us.
1.2. Information Collected Automatically. When you access or use the Covered Services, we may automatically collect technical and usage information such as:
(a) Internet Protocol addresses;
(b) browser, device, and operating-system information;
(c) dates and times of access;
(d) pages, features, or services accessed;
(e) diagnostic, usage, performance, and error information; and
(f) information stored through cookies or similar technologies that are necessary to operate, secure, or provide requested functionality through the Covered Services.
1.3. Information from Other Sources. We may receive personal information from third parties such as authorized partners, service providers, business contacts, or publicly available sources where relevant to our relationship with you or your organization.
We may use personal information to:
(a) create, administer, secure, and support accounts;
(b) provide, operate, maintain, and improve the Covered Services;
(c) process purchases, payments, billing, and related transactions;
(d) provide technical, customer, sales, and administrative support;
(e) communicate with you about your Account, the Covered Services, requests, or relationship with Cato;
(f) detect, investigate, prevent, and respond to fraud, abuse, security threats, technical problems, and violations of applicable terms;
(g) analyze the operation, use, reliability, and performance of the Covered Services;
(h) comply with legal obligations and enforce Cato’s agreements and rights; and
(i) protect Cato, our customers, users, and others.
We may aggregate or de-identify information and use the resulting information for analytics, service improvement, security, operational, or other legitimate business purposes.
We may share personal information:
3.1. Service Providers. With vendors, contractors, and service providers that perform services for Cato, such as hosting, payment processing, communications, analytics, customer support, or security.
3.2. Account Administrators and Authorized Partners. With administrators of the Account through which you access the Covered Services and, where applicable, partners or resellers authorized to administer or support that Account.
3.3. Legal and Safety Purposes. Where we reasonably believe disclosure is necessary to comply with applicable law or legal process; enforce applicable agreements; detect, investigate, or prevent fraud, abuse, security threats, or technical issues; or protect the rights, property, or safety of Cato, our customers, users, or others.
3.4. Business Transactions. In connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction or evaluation of such a transaction.
3.5. With Your Direction or Consent. Where you direct us to disclose information or otherwise consent to the disclosure.
Cato does not sell personal information or share personal information for cross-context behavioral advertising as those terms are defined under applicable California law.
Cato uses cookies and similar technologies to operate, secure, and provide functionality through the Covered Services and to understand their use, reliability, and performance. These technologies may be used for purposes such as authentication, session management, security, fraud prevention, remembering settings, and analytics.
Cato does not use cookies or similar technologies for targeted or cross-context behavioral advertising.
If you have access to an Account, you may be able to view or update certain Account Information through the Admin Console.
You may also be able to manage certain communications through available account or communication settings. Transactional, security, legal, billing, or service-related communications may still be sent where necessary.
Cato maintains administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, or disclosure.
No method of transmission or storage is completely secure, and Cato cannot guarantee absolute security.
We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to provide the Covered Services, maintain business and financial records, resolve disputes, enforce agreements, comply with legal obligations, protect the security and integrity of the Covered Services, and protect Cato’s legitimate interests.
We may retain account ownership, administrative, billing, transaction, security, support, and audit records after an Account is closed or an individual’s access to an Account ends where reasonably necessary for those purposes.
Retention periods may vary depending on the type of information and the purpose for which it is used.
Cato Digital, Inc. is located in the United States. Personal information may be processed or stored in the United States or other locations where Cato or its service providers operate, subject to applicable law.
Depending on applicable law and where you reside, you may have rights regarding personal information Cato maintains about you, including rights to request access to, correction of, deletion of, or a copy of personal information, or to exercise other privacy rights or choices available under applicable law.
Privacy rights may be subject to exceptions and limitations under applicable law. For example, Cato may retain personal information where reasonably necessary to provide the Covered Services, complete transactions, fulfill or enforce contractual obligations, maintain business, financial, security, or audit records, comply with legal obligations, prevent or investigate fraud or security incidents, or establish, exercise, or defend legal claims.
Cato will respond to privacy requests, including any available right to appeal a decision, as required by applicable law. To submit a privacy request, use the privacy contact method identified in Section 13 (Contact Us). We may need to verify your identity before completing certain requests.
A privacy request does not by itself close an Account, terminate a Service or Commitment, or otherwise terminate Customer’s contractual or payment obligations.
If your personal information is processed by Cato on behalf of an organization that uses Cato Services as Customer Content, you should direct your request to that organization.
The Covered Services are intended for business and professional users and are not directed to children.
The Covered Services may contain links to or integrations with third-party websites, products, or services. Cato is not responsible for the privacy practices of third parties, and their handling of personal information is governed by their own privacy notices and terms.
We may update this Privacy Notice from time to time. We will post the revised Privacy Notice and update the “Last Updated” date when changes are made.
Where required by applicable law, we will provide additional notice of material changes.
Questions or requests concerning this Privacy Notice or Cato’s privacy practices may be submitted through the Contact Us form available on the Cato Support site (https://cato.digital/support/).
