Last updated: 25 October 2026
This Privacy Policy explains how Karatry (“Karatry,” “we,” “us,” or “our”) collects, uses, and shares personal data when you visit karatry.com (the “Site”) or use the Karatry application at app.karatry.com (the “Service”). Karatry is operated by Karatry LLC, a New York limited liability company, at 418 Broadway, Ste N, Albany, NY 12207, United States. If you have questions, contact us at hello [at] karatry [dot] com.
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service), legitimate interests (to secure and improve our products), consent (for analytics and advertising cookies, which you can withdraw at any time), and legal obligation.
On the Site we use Google Analytics 4 (Google LLC) to measure traffic: which pages are visited, how visitors found us, and whether a visit led to a sign-up. Google sets cookies and receives data such as your IP address, device and browser details, the pages you view and the page that referred you. When you create an account, our server tells Google Analytics once that a sign-up happened, under the same choice as the Site; that message carries the visitor and session IDs Google Analytics keeps in its cookies (a random number and the times of your first visit and of this one), or new ones when there are none, and whether you signed up by email, from Claude or from ChatGPT, nothing else. The app loads no analytics or advertising code in your browser. Our tag denies Google every advertising signal and switches off Google signals and ad personalization, so Google does not use this data to show you ads.
Outside the United States, including the EEA, the UK and Switzerland, no analytics cookies are set until you accept them in our consent banner. In the United States, analytics runs by default; you can turn it off anytime with Cookie settings at the bottom of every page. We tell the two apart by the country of your internet connection, read from your IP address and not stored; if it can't be read, we ask. Wherever you are, a Global Privacy Control signal from your browser keeps analytics off unless you turn it on yourself.
We don't use advertising cookies or pixels today. If we add them (for example Google Ads or the Meta Pixel from Meta Platforms, Inc.), they will be set only after you accept them, wherever you are. Learn more in our Cookie Policy.
We do not sell your personal data. We share it only with:
The business records you put into Karatry may include personal data about your own customers, suppliers, and contacts. For that data you are the controller and Karatry acts as a processor on your behalf: we process it only to provide the Service and on your instructions. You are responsible for having a lawful basis to enter it and for answering your own customers' privacy requests; we will help you where we reasonably can. For your own account data — your name, work email, and billing details — Karatry is the controller.
If you connect your own Stripe account, payments from your customers settle directly into that account, and Stripe acts as an independent controller of the payment data it processes for you, under its own privacy policy and your agreement with Stripe. Full card numbers and similar payment credentials are handled by Stripe and never reach Karatry's systems; we receive only limited metadata such as payment status, amounts, and payout records so your Karatry records stay in sync.
Karatry's AI features — for example the assistant, reading documents and photos you upload, drafting product descriptions and summaries, and the scheduled insights and suggestions — work by sending the relevant data to an AI model provider: your question or instruction, the workspace records the feature needs to answer it, and any document or photo you ask it to read. Unless your workspace uses its own key, this is Anthropic, acting as Karatry's service provider. Photo editing (such as background removal) sends the photo and the editing instruction to OpenAI, also as Karatry's service provider, unless your workspace uses its own OpenAI or OpenAI-compatible key.
To let the assistant search its saved notes (AI memory) by meaning, Karatry sends the text of those notes, and of what is being searched for, to an embedding provider, and stores the numeric result. This is Voyage AI, acting as Karatry's service provider, for every workspace, including one that uses its own OpenAI key. Only if Karatry has no Voyage AI key set up, and your workspace uses its own OpenAI key, does this text go to OpenAI instead, using your key.
Karatry keeps your assistant conversations and saved AI notes, along with records of AI usage, with your workspace's data, as described in section 7. Saved AI notes can be deleted on the assistant's AI Memory page.
An admin can add your workspace's own key for a provider such as OpenAI, Google, or an OpenAI-compatible service. Karatry then sends that provider the data for the features it runs, using your key, and that provider handles it under your workspace's own agreement with it, not under our contracts. If a saved key cannot be read, AI features either pause or run on Karatry's own Anthropic key until the key is entered again.
An admin of your workspace can choose to connect an outside AI app, such as Claude or ChatGPT, to Karatry. A connected app can read your workspace's data through Karatry's connector — customers, orders, stock, invoices, and the other records its lookups cover — and can file suggestions (proposals) that change nothing until an admin approves them in Karatry.
Data a connected app reads goes to that app and its provider (for Claude, Anthropic; for ChatGPT, OpenAI). That provider handles it under your agreement with it and its own privacy terms, not under this Policy, and Karatry does not control what the app does with it.
Karatry records the lookups and proposals a connected app makes through its tools in your workspace's audit log: for each one, the tool it used, the details it asked for (with secrets removed), the time, and the outcome. These records are kept with your workspace's data as described in section 7.
Karatry also keeps a record of each connection: the name the app gave itself, the address it returns to, which admin approved it, when it was last used and, if it was disconnected, when. Its access tokens are stored only in scrambled (hashed) form. The record stays in your workspace's history after an app is disconnected and is kept with your workspace's data as described in section 7.
An admin can pause every connected app at once by switching the AI helper off in Settings → Connected apps, or disconnect one app for good there. You can also remove the app on the app's side, for example in Claude's connector settings or ChatGPT's plugin settings.
We may process data in countries other than yours, including the United States. Where required, we use appropriate safeguards such as the EU Standard Contractual Clauses for such transfers.
We keep account and business data for as long as your workspace is active and as needed to provide the Service, then delete or anonymise it within a reasonable period, unless a longer period is required by law. You can export or request deletion of your data at any time. Google Analytics keeps Site analytics data for up to 14 months, and its cookies last up to 2 years (see our Cookie Policy).
Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. If you are in California, you may have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of “sale” or “sharing” of personal information (we do not sell personal data or share it for cross-context behavioural advertising). To exercise any right, email hello [at] karatry [dot] com. You may also lodge a complaint with your local data-protection authority.
The business data you put into Karatry belongs to you. You can export your customers, inventory, styles, sales orders and invoices to CSV at any time, along with reports like AR aging and memo exposure, and request deletion when you close your account. See our Security page for how we protect it.
Karatry is a business tool and is not directed to children under 16. We do not knowingly collect data from children.
We may update this Policy from time to time. We will post the new version here and update the “Last updated” date. Material changes will be communicated where appropriate.
Questions or requests: hello [at] karatry [dot] com, or Karatry LLC, 418 Broadway, Ste N, Albany, NY 12207, United States. Governing law: the State of New York.