Privacy policy
Controller
The controller of your personal data is HEXART Sp. z o.o., al. Zwycięstwa 96/98, 81-451 Gdynia, Poland. For anything about your data, write to biuro@hexart.pl.
What data and what for
- The contact form and meeting booking: name, e-mail, phone, company, the message and the answers from the form. We process them to reply to the enquiry and hold the meeting (Article 6(1)(b) and (f) GDPR). We keep them for a year after the contact.
- The KaratVue phone line (58 500 40 64): your phone number, the recording and transcript of the call, the note from the call and the details you give during it. The line is answered by an AI assistant with a synthetic voice. Purposes, legal bases, recipients and retention periods: Privacy notice for the phone line. We keep the recording for 180 days, the transcript and the note for a year after the last contact.
- The Karatvue customer account: company details for invoices, e-mail, the history of top-ups and usage, the identifiers of the devices the licence was activated on. Basis: the agreement (Article 6(1)(b)) and tax obligations (Article 6(1)(c)). We keep them for the term of the agreement and 5 years after it ends, as accounting law requires.
- AI model calls: the content of the requests to the models (product descriptions, reference images) passes through our server so that we can bill the call. We do not store the content of the requests or the generated images; we store the model's name, the cost and the time of the call.
- The admin panel and logs: we keep IP addresses and security events for 90 days to protect the service (Article 6(1)(f)).
- Cloud backup (optional): we keep the files from the Customer's Karatvue folder in Backblaze B2 under the Customer's account identifier, only at their request and for as long as the option is active.
Who we entrust data to
- OpenRouter, Inc. and the AI model providers (Google among them): running the model calls;
- Stripe, Inc.: card payments; Stripe is a separate controller of payment data;
- Resend, Inc.: transactional e-mail;
- Google Ireland Limited: the calendar and Google Meet for meetings;
- Backblaze, Inc.: backups, only for Customers with the option on;
- Eleven Labs Inc.: the voice assistant, speech recognition and speech synthesis on the phone line;
- Spikon Sp. z o.o.: telephony and text messages;
- Anthropic and OpenAI: the sales team's assistant, which suggests next steps from the notes of calls and enquiries;
- Hostinger International Ltd.: the server the service runs on.
Some of the providers are based in the USA. Data is transferred on the basis of standard contractual clauses or an adequacy decision (Data Privacy Framework).
Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection, and the right to lodge a complaint with the President of the Personal Data Protection Office (UODO). A request sent to biuro@hexart.pl is enough.
Cookies
The karatvue.com website uses no cookies for tracking or analytics. The admin panel uses one session cookie, needed to log in.
Changes
We announce material changes to this policy on this page and by e-mail to the Customers they concern.