Privacy Policy

We collect personal data in the following ways:

• Information you give us.When you complete a contact or “book a demo” form, we collect the details you provide — typically your name, email address, phone number, role, company name and any message.
• Technical and usage data. When you visit our website, we may automatically collect standard information such as your IP address, browser and device type, and the pages you view, through server logs and similar technologies.
• Cookies.See the “Cookies” section below.

We do not intentionally collect special categories of personal data (such as health or biometric data), and we ask that you do not submit such data to us.

We use personal data for the following purposes and on the following legal bases under the GDPR:

• To respond to enquiries and arrange demos— on the basis of our legitimate interest in answering you, or to take steps at your request before entering into a contract.
• To provide, operate and improve our services— to perform a contract with you or your organisation, and on the basis of our legitimate interest in running and improving our business.
• To send service-related communications— to perform our contract; and, where we send marketing communications, on the basis of consent or legitimate interest as permitted by law (you can opt out at any time).
• To comply with legal obligations and to protect our rights, property and security.

We do not sell your personal data. We share it only with trusted service providers who process data on our behalf (as processors), under contracts that require them to protect it. These currently include:

• Resend— to deliver the emails generated when you submit a contact or demo form.
• Vercel— for website hosting and infrastructure.
• Upstash (Vercel KV)— for short-lived, automatically-expiring storage of 3D layout configurations used by the augmented-reality “view in your space” feature. These entries do not normally contain personal data.

We may also disclose personal data where required by law, to enforce our terms, or in connection with a corporate transaction such as a merger or acquisition.

Some of our service providers may process data outside the EU/EEA. Where that happens, we rely on appropriate safeguards recognised under the GDPR, such as the European Commission’s Standard Contractual Clauses, to ensure your data remains protected.

We keep personal data only for as long as necessary for the purposes set out above, or as required to comply with legal obligations, resolve disputes and enforce our agreements. Enquiry and demo-request details are retained for as long as needed to follow up and, where relevant, manage the resulting business relationship. Augmented-reality layout configurations are transient and expire automatically.

Subject to the conditions in the GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected and incomplete data completed;
• have your data erased (the “right to be forgotten”);
• restrict or object to our processing;
• receive your data in a portable format; and
• withdraw any consent you have given, at any time.

To exercise any of these rights, contact us at hello@charpstar.co. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or your local supervisory authority.

Our website uses cookies and similar technologies that are necessary for the site to function and, where applicable, to understand how the site is used so we can improve it. You can control or delete cookies through your browser settings; blocking some cookies may affect how the site works.

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. No method of transmission or storage is completely secure, but we work to safeguard your data and to review our measures regularly.

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. The “Last updated” date above shows when it was last revised, and we encourage you to review it periodically.

For any questions about this Privacy Policy or how we handle your personal data, contact us at hello@charpstar.co or by post at CharpstAR AB, Cylindervägen 12, Cylindertornet, 131 52 Stockholm, Sweden.