Cartalyst AI — Website Terms of Use

Last updated:

September 14, 2026

This Privacy Policy explains how Cartalyst AI (“Cartalyst”, “we”, “our”, “us”) collects, uses, stores, and protects personal information when you visit our website at https://cartalyst.ai or use our services.

Cartalyst AI is operated by Afanasiev Robert Olehovych, a registered individual entrepreneur in Ukraine.

  1. Who We Are

Cartalyst AI provides AI-powered software and conversational AI solutions for businesses.

For personal data collected directly through the Cartalyst AI website, the operator of Cartalyst AI acts as the data controller where applicable.

For data processed through services provided to business clients, Cartalyst AI may act as a processor or service provider on behalf of the relevant client, depending on the circumstances and applicable law.

Legal business name: Afanasiev Robert Olehovych
Registered address: Olhiivska Street, building 10, apartment 10, Odesa, Odesa region, 65029, Ukraine
Phone: +380633327560
Email: robert@cartalyst.ai

  1. Information We Collect
    2.1 Website Visitors

When you visit the Site, we may automatically collect information such as:

IP address.
Browser type and version.
Device type and operating system.
Pages viewed.
Time spent on the Site.
Referring websites.
Technical and analytics logs.

This information may be collected through analytics and infrastructure providers and is used to operate, secure, and improve the Site.

2.2 Business Clients and Prospects

When you contact us, enquire about our services, or become a client, we may collect:

Name.
Business email address.
Company name.
Phone number.
Message or enquiry details.
Information necessary to provide and administer our services.
2.3 End-User and Conversation Data

Where Cartalyst AI services are integrated into a client’s website, platform, or other system, we may process information submitted by end users through those services.

The exact categories of information processed depend on the relevant client implementation.

Cartalyst AI does not intentionally require end users to provide unnecessary sensitive personal information.

Data processed on behalf of business clients is used only for providing, maintaining, securing, and improving the contracted service, subject to the applicable agreement with the client.

  1. How We Use Personal Data

We may use personal information to:

Respond to enquiries.
Provide and manage our services.
Communicate with clients and prospective clients.
Operate, maintain, and improve the Site.
Monitor performance and usage.
Detect fraud, security incidents, or misuse.
Comply with legal obligations.
Protect our rights and the rights of users and clients.

We do not sell personal data.

  1. Legal Bases for Processing

Where the GDPR, UK GDPR, or similar laws apply, we may process personal data on one or more of the following legal bases:

Performance of a contract.
Legitimate interests.
Consent.
Compliance with legal obligations.
Protection of legal rights.

The applicable legal basis depends on the type of data and the context in which it is processed.

  1. International Privacy Rights

Depending on your location and applicable law, you may have rights concerning your personal information.

5.1 European Economic Area and United Kingdom

Where the EU GDPR or UK GDPR applies, individuals may have rights including access, rectification, erasure, restriction, objection, and data portability.

5.2 California

Where applicable under California privacy laws, eligible California residents may have rights to request information about personal data collected, request deletion or correction, and exercise other rights provided by applicable law.

Cartalyst AI does not sell personal information.

Requests may be submitted to robert@cartalyst.ai.

  1. Data Sharing

We may share information with service providers that help us operate the Site and services, including providers of:

Cloud infrastructure and hosting.
Analytics.
Communications.
Security.
AI and software infrastructure.

We may also disclose information where required by law, regulation, legal process, or governmental request.

Service providers are permitted to process information only for the purposes for which they are engaged, subject to applicable agreements and legal requirements.

  1. International Data Transfers

Our service providers and infrastructure may process data in countries other than the country in which the user is located.

Where required by applicable law, we use appropriate safeguards for international transfers, which may include contractual safeguards, adequacy mechanisms, or other legally recognised transfer mechanisms.

  1. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, contractual, security, and operational requirements.

Retention periods may vary depending on the nature of the information and the applicable client agreement.

Where a client relationship ends, client-related data will be handled in accordance with the applicable agreement and legal requirements.

  1. Security

We implement reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

However, no online system or data transmission method can guarantee absolute security.

  1. Cookies and Analytics

The Site may use cookies and similar technologies for:

Essential website functionality.
Security.
Analytics.
Performance measurement.

Where required by applicable law, non-essential cookies will only be used after obtaining appropriate consent.

Users can also manage cookies through their browser settings.

  1. Third-Party Links

The Site may contain links to third-party websites or services.

We are not responsible for the privacy, security, or content practices of third-party websites.

  1. Your Rights

Depending on applicable law, you may have the right to:

Request access to your personal data.
Request correction of inaccurate information.
Request deletion of personal data.
Request restriction of processing.
Object to certain processing.
Withdraw consent where processing is based on consent.
Request data portability.
Lodge a complaint with an appropriate supervisory authority.

To exercise applicable rights, contact robert@cartalyst.ai.

We may need to verify your identity before processing certain requests.

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will be published on this page with an updated “Last updated” date.

  1. Contact

For privacy-related questions or requests:

Cartalyst AI
Legal business name: Afanasiev Robert Olehovych
Legal status: Registered individual entrepreneur in Ukraine
Registered address: Olhiivska Street, building 10, apartment 10, Odesa, Odesa region, 65029, Ukraine
Phone: +380633327560
Email: robert@cartalyst.ai
Website: https://cartalyst.ai