How Ditto handles data.

Effective date: September 24, 2026

Ditto is an internal AI assistant, available only by invitation. It is not offered as a consumer service and never asks for passwords to Google, Facebook, Instagram or any other account.

Who we are

Ditto is operated by CatchBack ("we"), which is responsible for the information described in this policy. Questions about this policy can be sent to support@catchback.com.

Information we process

• Advertising account data: account, campaign, ad set, ad, creative, audience configuration, budget, delivery, conversion and performance information for advertising accounts we have authorized.
• Facebook and Instagram business data: Page and professional-account identifiers, usernames, post and media identifiers, permalinks, captions, timestamps, and engagement or advertising metrics available through Meta's APIs.
• Google user data (only if you connect your Google account): your email address and Google account identifier; your calendar list, calendar events and free/busy times; Gmail messages, threads and drafts that Ditto reads or writes to fulfil your request; and Google Drive, Docs and Sheets files you ask Ditto to find or read.
• Assistant content: your messages to Ditto (text and, in the desktop app, voice), Ditto's replies, and the notes, reminders and briefing preferences you create.
• Operator activity: approval decisions, audit records, and associated Slack user, channel or conversation identifiers.
• Operational records: authentication metadata, device pairing records, timestamps, errors, security events and configuration needed to operate the service.

How we use information

We use this information only to provide the features you ask for: answering your questions, producing reports, preparing and (after the required confirmation) carrying out actions, delivering your reminders and briefing, keeping an audit trail, securing the service, and complying with legal obligations. Google user data is used only to provide and improve the user-facing features described here for the person who connected the account.

Google user data and Limited Use

Ditto's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Google user data is used only to provide the assistant features you request, in your own private conversation with Ditto.
• We do not sell Google user data, use it for advertising, or use it to determine credit-worthiness or for lending.
• We do not use Google user data to develop, improve or train generalized AI or machine learning models.
• To answer your request, the relevant data is sent to Anthropic, the AI model provider that generates Ditto's replies, under terms that do not permit it to train models on that data. Voice in the desktop app is processed by ElevenLabs for transcription and speech.
• People do not read your Google user data unless you ask us to (for example for support), it is necessary for security or abuse investigation, or it is required by law.

How information is shared

Ditto does not sell personal information. Information is disclosed only as needed to operate the service, carry out an action you requested, comply with law, or protect the service. Service providers include Anthropic, ElevenLabs, Slack, Cloudflare, Google, Meta and TikTok when their respective integrations are used. Their handling of information is governed by their own terms and privacy policies.

Storage and security

Google sign-in tokens are encrypted at rest and stored only on our servers, never on your device. Ditto keeps your conversation history, including content it retrieved to answer you, so it can continue the conversation. We use access controls that limit each person's assistant features to their own private conversation, audited actions, confirmation before anything is sent on your behalf, and encryption in transit. No security measure can guarantee absolute security.

Retention

We keep information only as long as it is reasonably needed to provide Ditto, maintain security and accountability, resolve disputes or meet legal obligations. When you disconnect a Google account, Ditto revokes its access and deletes the stored sign-in immediately.

Your choices and deletion

• Disconnect a Google account at any time in the Ditto app (Settings, Connected accounts) or at myaccount.google.com/permissions.
• Revoke Ditto's Meta access in Meta's business settings.
• To request access to, correction of or deletion of your Ditto data, follow our data deletion instructions or email support@catchback.com.

Children

Ditto is an internal business tool and is not directed to children.

Changes to this policy

We may update this policy as Ditto or its integrations change. The effective date above will be updated when a revised policy is published.