Privacy Policy · Katara

Katara AI Inc.

Last updated: July 2026

1. Who we are

Katara AI Inc. ("Katara," "we," "us," or "our") is a Delaware corporation building compliance-native infrastructure for organisations deploying AI in regulated environments.

This Privacy Policy explains how we collect, use, and protect personal data in connection with our website at katara.ai and our general business communications — for example, when you contact us, request information about our products, or apply to one of our programmes.

For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR, and similar data protection laws, Katara AI Inc. is the data controller for the personal data described in this policy.

This policy covers personal data we handle as a controller — primarily website visitors and people who contact us. When we process personal data on behalf of a customer as part of our products or services, we act as a data processor, and that processing is governed by our agreement with that customer rather than by this policy. See Section 10.

Contact: privacy@katara.ai

2. What personal data we collect

Information you give us directly. When you submit our contact form or email us, we collect the information you provide — typically your name, email address, organisation, and the content of your message.

Analytics data. With your consent, we use Google Analytics to understand how visitors use our website. This collects technical information such as an anonymised IP address, browser and device type, pages visited, referring URL, and on-site interactions, through cookies and similar technologies. Analytics cookies are not set until you consent. See Section 6.

Server logs. Our hosting provider keeps basic technical logs, such as IP address and browser type, to keep the site secure and to deliver it to you.

We do not intentionally collect special category data (such as health, biometric, or political data) through our website. Please do not include such data in your messages to us.

3. How we use your personal data

We use your personal data to:

respond to your enquiries and correspond with you;
assess and follow up on programme applications;
send you information you have requested or that relates to a prior enquiry;
operate, secure, and deliver our website; and
understand how our website is used, so we can improve it.

Our legal bases for this processing are our legitimate interests in operating and growing our business, steps taken at your request before entering into a contract, your consent (for analytics cookies), and compliance with legal obligations.

We do not sell your personal data, and we do not use the personal data described in this policy to train AI models.

We share personal data only as needed to run our business, with providers who are bound to protect it. These include our website hosting provider, our analytics provider (Google), our email and communication tools, and our cloud infrastructure provider. We may also share data with professional advisers where reasonably necessary, or with authorities where required by law or to protect our rights.

We do not disclose your personal data to third parties for their own marketing purposes.

5. International data transfers

Katara AI Inc. is based in the United States, and some of our providers process data in the United States. Where we transfer personal data outside the European Economic Area or the United Kingdom, we rely on appropriate safeguards recognised under applicable law, such as the EU-U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses. You can request more information about these safeguards by contacting us.

6. Cookies and analytics

Our website uses two kinds of cookies:

Essential cookies, which are necessary for the site to work and to remember your cookie choices.
Analytics cookies (Google Analytics), which help us understand how the site is used. These are optional and are only set after you give consent.

You can accept or decline analytics cookies when you first visit, change your choice at any time through the cookie settings on the site, and manage cookies through your browser. Declining analytics cookies does not affect the core functionality of the site.

7. How long we keep your personal data

We keep personal data only for as long as necessary for the purposes described in this policy, and then delete or anonymise it. Enquiry and application data is generally kept for up to 24 months from our last contact with you. Analytics data is retained according to our analytics configuration, and server logs are kept briefly for security and operational purposes. Where the law requires us to retain certain records, we keep them for the required period.

8. Your rights

Depending on your location, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we rely on it. To exercise any of these rights, contact us at privacy@katara.ai. We will respond within the timeframe required by law.

You also have the right to complain to a supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD); in the UK, the Information Commissioner's Office (ICO); or your local authority in the EEA.

9. How we protect your personal data

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we work to protect your data and review our safeguards over time.

10. Personal data in the Katara platform

When an organisation uses Katara's products and provides data that contains personal information, that organisation is the data controller for that data, and Katara acts as a data processor on its behalf. Our handling of that data is governed by our agreement with that customer, not by this website Privacy Policy. If your data has been provided to Katara by one of our customers and you wish to exercise your rights, please contact that organisation directly.

11. Children

Our website and services are directed at businesses and professionals, not children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above.

13. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at privacy@katara.ai.