Privacy policy

1. Who processes the data

The data controller is Kartio. For any request relating to personal data you can write to privacy@kartio.ai: we answer at that address and from that address we handle access and deletion requests.

2. Which data this site collects

The kartio.ai website collects the data you enter in the contact form: the email address, the type of business you indicate and, if you write it, the message. If you use the site assistant, in chat or by voice, we also process the conversation messages and the voice transcripts to reply to you: they are kept for 90 days, the audio is never stored and the IP address is stored only as a hash. Do not enter health data, credentials or payment data in the conversation. We do not ask for payment data, we do not use advertising tracking tools and we do not profile page visitors.

3. Why we process it

We use what you write to us only to reply to you and to carry on the commercial conversation you started. We do not pass the address to third parties and we do not use it for unsolicited advertising.

4. On what basis

The processing is based on your consent, which you give by submitting the form, and on the performance of pre-contractual measures requested by you. You can withdraw consent at any time by writing to privacy@kartio.ai.

5. For how long

We keep the message and the address for the time needed to reply and to manage any commercial relationship that arises from it. Conversations with the site assistant are kept for 90 days. If you ask us to delete them, we remove them without delay.

6. Who else sees it

To run this site we rely on two categories of suppliers: those who host the web pages and those who deliver the email we use to reply to you. They act as data processors, on our behalf and according to our instructions. Nobody else receives your data, and we do not sell it to anyone.

7. Data processed inside the product

This notice concerns the kartio.ai website. The processing of data that takes place inside the assistant installed on a store is governed by the contract and the data processing agreement signed with that store, which includes the full list of the suppliers involved. If you are a customer of a store that uses Kartio, your point of contact is the store itself.

8. Artificial intelligence and training

We do not train our own models on customer content. From the artificial intelligence suppliers we require configurations that exclude training and general improvement; the status of this exclusion is documented in the register delivered before signature. Voice is treated as personal but not biometric data: no speaker identification, no voiceprint, no cloning.

9. Data not to send

Special categories of data (Art. 9 GDPR), judicial data (Art. 10), identity documents, payment data or access credentials must not be sent through the assistant. If they are entered spontaneously they can be deleted or anonymised on request.

10. Transfers outside the European Union

Some suppliers may process data outside the European Economic Area. Every transfer takes place only with a safeguard under Articles 44-49 GDPR, normally the standard contractual clauses, and after a transfer impact assessment. The actual location of every supplier is in the register delivered before signing.

11. Your rights

You can ask at any time, by writing to privacy@kartio.ai:

• access to the data concerning you, with a copy
• rectification of inaccurate or incomplete data
• erasure, within the limits provided by law
• restriction of or objection to the processing
• portability to another controller
• withdrawal of consent, without prejudice to the processing already carried out

We reply within one month as required by the GDPR. If you believe the processing violates the law you can contact your national data protection authority.

12. Minors

The service is not designed to address minors and does not knowingly collect their data. If you believe a minor has sent us personal data, write to us: we will remove it without delay.

13. Cookies

This site does not use profiling cookies or advertising analytics tools. Details are in the cookie policy.