Privacy Policy

This Privacy Policy covers two very different categories of information:

• Site and account information — the ordinary information Katmai collects the way any small software vendor does: names and emails of people who email us, install our Application, or manage a Snowflake Marketplace listing; the contents of support requests sent to support@katmaicapital.org; and Usage Information Snowflake provides to us as the listing provider (see Section 3).
• Customer Financial Data — the trial balances, journals, and consolidated results that live and are processed entirely inside a customer’s own Snowflake account, because our Applications are Snowflake Native Applications. Katmai does not collect, receive, or store this data. This policy does not govern Customer Financial Data. It is addressed instead by the Data Processing Addendum between Katmai and the customer, because the customer — not Katmai — holds and controls it.

If you are an individual whose information might appear inside a customer’s own financial records (for example, as a name on a journal-entry line), your rights regarding that data are governed by that customer’s own privacy program, not this policy — please contact that organization directly.

Katmai, LLC provides Snowflake Native Applications for financial close, consolidation, and related enterprise workflows. This policy explains what personal information we collect directly, why, and what rights you have.

Contact: support@katmaicapital.org

We do not operate website analytics or tracking cookies on katmaicapital.org, and we do not knowingly collect special categories of personal data (health, biometric, or similar) through our website or support channels.

• To respond to inquiries and provide support.
• To operate the Marketplace listing relationship (installation support, billing questions, entitlement issues).
• To communicate about product updates, security advisories, or changes to our legal documents.
• To maintain the security of the Application and our own systems.
• To comply with legal obligations.

Where the GDPR applies, our legal bases are:

• Contract — processing necessary to provide the Application or respond to your request under an agreement with you or your employer.
• Legitimate interests — responding to inquiries, maintaining security, and improving the product, where not overridden by your rights.
• Legal obligation — where processing is required by law.

We do not sell or share personal information for cross-context behavioral advertising. We may share personal information with:

• Snowflake, Inc., to the extent necessary to operate our Marketplace listing (Snowflake independently controls the account-level identifiers and billing information it manages as the platform operator).
• Service providers who help us operate our business (for example, email and productivity tooling).
• As required by law, or to protect Katmai's or others' rights, property, or safety.
• In connection with a merger, acquisition, or sale of assets, subject to this policy's continued application to the information involved.

We do not share Customer Financial Data with anyone. There is no sub-processor list for that data because Katmai does not receive it — see Section 1 and the Data Processing Addendum.

• Support communications: retained for up to 3 years after your last contact with us, to maintain a support history and resolve recurring issues.
• Billing and account records: retained for up to 7 years, to meet tax and accounting requirements.
• Diagnostic information you share with us (logs, event-sharing data): retained for up to 90 days, consistent with the Application's own in-account telemetry retention.

We may retain information longer where required by law or to resolve a dispute.

If the GDPR applies to you (EEA/UK): you have the right to access, correct, delete, restrict, or port your personal information, and to object to certain processing. Contact support@katmaicapital.org to exercise these rights. You also have the right to lodge a complaint with your local data protection supervisory authority.

If the CCPA/CPRA applies to you (California): you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, so the opt-out right is not currently applicable in practice, but you may still submit a request. We will not discriminate against you for exercising these rights.

To exercise any right, email support@katmaicapital.org. We will respond within the time required by applicable law.

Personal information described in this policy (contact and support information — not Customer Financial Data) may be processed in the United States. Where we process personal information from individuals in the EEA or UK, we rely on the EU Standard Contractual Clauses or the UK International Data Transfer Addendum as required.

Our Applications and website are not directed to children under 16, and we do not knowingly collect personal information from them.

We apply reasonable administrative, technical, and organizational measures to protect the personal information we hold directly. For the security posture applicable to Customer Financial Data — which, per Section 1, we do not hold — see our public architecture documentation at katmaicapital.org/docs/security/close-consolidation and the Data Processing Addendum.

We will post updates here and update the “Last updated” date. Material changes will also be communicated by email to known account contacts where practicable.

Last updated: October 1, 2026

Katmai, LLC
support@katmaicapital.org