Skip to content

Privacy Policy

Carlota ("we," "us," or "our") is committed to protecting your personal data and ensuring compliance with global privacy laws, including:

  • General Data Protection Regulation (GDPR) – Europe
  • Lei Geral de Proteção de Dados (LGPD) – Brazil
  • California Consumer Privacy Act (CCPA) – California, USA
  • Latin American Data Protection Laws, including Argentina’s Ley 25.326, Mexico’s Ley Federal de Protección de Datos Personales, and Colombia’s Law 1581 of 2012.

This Privacy Policy explains what data we collect, how we use it, and your rights under these laws. By submitting your information, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with this Privacy Policy, please refrain from using our services or signing up for the waiting list.

Information We Collect

When you sign up for our waiting list or interact with our platform, we may collect the following data:

A. Personal Data Provided by You

  • Identifiers: Name, email address, company/organization (if applicable), and other voluntarily submitted details.
  • Communications: Messages, feedback, or inquiries sent to us.

B. Automatically Collected Data

  • Technical Information: IP address, device type, browser, and usage data.
  • Cookies & Analytics: Data collected via cookies, pixels, or tracking technologies to understand user behavior.

We do not collect sensitive personal data (e.g., financial information, government-issued IDs, or health data) unless explicitly required for legal compliance.

3. Legal Basis for Processing (GDPR, LGPD, and Others)

We process your personal data under the following legal bases:

Consent: When you voluntarily sign up for our waiting list and marketing communications.
Legitimate Interest: To improve services, analyze user engagement, and send relevant updates.
Contractual Necessity: When processing is required for delivering requested services.
Legal Obligation: When required to comply with regulations or government authorities.

4. How We Use Your Information

We process your data for the following purposes:

✔ To manage and administer your sign-up on the waiting list.
✔ To notify you about Carlota’s launch, product updates, and events.
✔ To analyze engagement and improve user experience.
✔ To comply with legal and regulatory obligations.

Carlota does not sell personal data to third parties.

5. International Data Transfers

Carlota operates globally, meaning your data may be processed in countries outside your jurisdiction, including the United States and the European Economic Area (EEA).

  • For EEA users, we comply with GDPR-approved mechanisms, such as Standard Contractual Clauses (SCCs), to ensure lawful data transfers.
  • For Brazilian users, data transfers comply with LGPD requirements under international adequacy agreements.

By using Carlota, you consent to these international data transfers.

6. Your Rights (GDPR, LGPD, CCPA, Latin America)

Depending on your location, you have the following rights over your personal data:

A. GDPR (Europe) & LGPD (Brazil) Rights

  • Right to Access: Request copies of your data.
  • Right to Rectification: Correct inaccurate or incomplete information.
  • Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data.
  • Right to Restrict Processing: Request limited processing under certain conditions.
  • Right to Data Portability: Receive your data in a structured format.
  • Right to Object: Object to processing for direct marketing or legitimate interests.

B. CCPA (California, USA) Rights

  • Right to Know: Request information on data collection, use, and sharing.
  • Right to Delete: Request data deletion (subject to legal exceptions).
  • Right to Opt-Out: Opt out of personal data sale (Carlota does not sell data).
  • Right to Non-Discrimination: No penalties for exercising privacy rights.

C. Latin America Privacy Rights (Argentina, Mexico, Colombia, etc.)

  • Right to Access & Correction: Request a copy or correction of personal data.
  • Right to Cancel & Oppose Processing: Request deletion or restriction of data use.
  • Right to Transparency: Be informed about how your data is handled.

To exercise your rights, contact us at [Insert Contact Email].

7. Data Storage and Security

We implement industry-standard security measures to protect your personal data from unauthorized access, modification, or loss.

🔹 Data is securely stored on servers.
🔹 We use encryption and access controls to prevent data breaches.
🔹 We retain data only as long as necessary for the stated purposes.

If you suspect unauthorized use of your data, contact us immediately

8. Data Sharing & Third Parties

We may share your data only in these limited cases:

With service providers (e.g., email marketing, analytics) under strict confidentiality agreements.
When required by law to comply with legal or regulatory obligations.
In case of a business transfer, such as a merger or acquisition.

Carlota does not sell or share personal data for advertising purposes.

9. Retention of Personal Data

We retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy. If you request deletion, we will securely erase your data unless required to retain it for legal compliance.

10. Updates to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page, and continued use of our services constitutes acceptance of the updated terms.

If significant changes occur, we will notify you via email or a website notice.

11. Contact Information

For privacy-related inquiries or to exercise your rights under GDPR, LGPD, CCPA, or Latin American laws, contact us at:

🌍 https://carlotaio.com/carlotaio

Acknowledgment

By using Carlota and signing up for our waiting list, you confirm that you have read, understood, and agreed to this Privacy Policy.