← All Policies

Privacy Policy

1. Introduction and Company Identity

Cartanalytics ("Cartlytics," "we," "our," or "us") operates under the Cartlytics brand and is engaged in consumer data enrichment, data product licensing, and related data services. Our products deliver fully enriched DTC buyer profiles, behavioral intelligence, and geographic and demographic data to business clients via Snowflake and related platforms.

This Privacy Policy explains how Cartlytics collects, uses, discloses, retains, and safeguards information in connection with your use of our website, data products, APIs, and related services (collectively, the "Services"). It also describes your rights with respect to your personal information and how to exercise them.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you are using the Services on behalf of an organization, you represent that you have authority to bind that organization to this policy.

For EU/EEA data subjects, please also refer to our GDPR Compliance Policy, which supplements this Privacy Policy with additional rights and disclosures required under the General Data Protection Regulation.

2. Information We Collect

2.1 Personal Data

We may collect the following categories of personal data:

• Contact and identity information: Name, email address, telephone number, job title, and company name, provided when contacting us or entering into a service agreement.
• Billing and payment information: Company billing address and payment method details (processed by third-party payment processors; we do not store full card numbers).
• Communications data: Records of correspondence and any personal information you voluntarily provide when communicating with us.

2.2 Business and Organization Data

Because our Services are primarily B2B, we also collect information about the organizations our clients represent, including company name, industry, website domain, firmographic data, and business contact information of authorized representatives.

2.3 Consumer Data Processed on Behalf of Clients

Cartlytics processes enriched consumer profile data as a data services provider. This data includes purchase behavior, demographic attributes, geographic signals, and behavioral intelligence sourced from e-commerce transactions. This processing is described in our Data Services Privacy Notice.

2.4 Usage and Technical Data

• Device and technical data: Browser type, operating system, device identifiers, and language preferences.
• Log data: Server-side request logs including timestamps, URLs accessed, HTTP status codes, and referring pages.
• IP addresses: Collected automatically; used for security, fraud prevention, and geographic analytics.

2.5 Cookies and Tracking Technologies

We collect data through cookies and similar tracking technologies as described in Section 9 of this policy.

3. How We Use Your Information

• Service delivery: Provisioning and operating our platforms, processing transactions, and fulfilling contractual obligations.
• Product improvement: Analyzing usage patterns and developing new features.
• Security and fraud prevention: Detecting unauthorized access or abuse and enforcing our Terms of Service.
• Communications: Sending account notifications, product updates, and billing communications.
• Legal compliance: Meeting obligations under applicable law and enforcing our agreements.

4. Legal Basis for Processing

• Contractual necessity: Processing required to perform our agreements with clients.
• Legitimate interests: Security, fraud prevention, product improvement, and B2B marketing.
• Consent: Where required by law, for marketing communications and non-essential cookies. Consent may be withdrawn at any time.
• Legal obligation: Processing required to comply with applicable law or legal process.

5. Data Sharing and Disclosure

Cartlytics does not sell personal data collected from website visitors or clients to third parties. We may share information in the following circumstances:

• Service providers: Vetted third-party vendors who process data on our behalf under written data processing agreements.
• Business transfers: In connection with a merger, acquisition, or asset sale, personal data may be transferred to a successor entity.
• Legal requirements: When required by law, subpoena, court order, or to protect the rights, property, or safety of Cartlytics or the public.
• Consent: When you have given explicit consent.

6. Data Retention

• Account data: Retained for the duration of the client relationship and for seven (7) years following account closure.
• Server and API logs: Retained for ninety (90) days, then purged or anonymized.
• Marketing communications data: Retained until you opt out, after which a suppression record is maintained.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, opt out of marketing, restrict or object to processing. To exercise any of these rights, contact us at legal@cartlytics.ai. We will respond within thirty (30) days. We will not discriminate against you for exercising your privacy rights.

8. Security Measures

Cartlytics implements technical and organizational measures to protect personal data, including encryption of data in transit (TLS 1.2 or higher) and at rest, role-based access controls, and incident response procedures aligned with applicable breach notification requirements. No transmission over the internet is completely secure.

9. Cookies and Tracking Technologies

We use essential cookies for session management and security. We may use analytics cookies to understand site usage. You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not impair core Service functionality.

10. Children's Privacy

Our Services are not directed to individuals under the age of thirteen (13), and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to us, please contact us at legal@cartlytics.ai.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy with a revised "Last Updated" date. Your continued use of the Services after the effective date constitutes acceptance of the updated terms.

12. Contact Information

Cartanalytics (Cartlytics)
Email: legal@cartlytics.ai