1.1 When working with KnowYourData s.r.o., email: info@pactus.ai (hereinafter referred to as the “Company”), you entrust us with your personal data. We do everything in our power to maintain that trust. We would like to explain how we handle your personal information.
1.2 The data controller within the meaning of Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”) is the Company.
1.3 Personal data means any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
1.4 The controller has not appointed a Data Protection Officer.
2.1 The Company processes the personal data you submit to us through this website (for example via the contact or waitlist form) or otherwise provide to us, together with the limited technical information automatically collected when you visit the site.
2.2 The following types of personal data may be collected, stored, and used:
Information you submit through forms on this website, including the contact / waitlist form. The fields are: name, email address, company name, job title, and any free-text description of your use case;
Any communication you send us by email or through the website;
Technical information automatically collected when you visit the website, such as your IP address (truncated where possible), browser type and language, referrer and the pages you view. This information is used to understand site usage and to keep the site secure. See Section 9 for details on cookies and analytics;
Any other personal data you choose to provide to the Company.
3.1 Personal data received through our website may be used for the purposes specified in this privacy policy or in relevant sections of the website. We may use your personal data to:
Administer the PactusAI application and related business operations;
Customize the PactusAI application to suit your needs;
Enable the use of services available on the PactusAI platform;
Provide services purchased via our website;
Handle inquiries and complaints submitted by you or concerning you in relation to the website.
3.2 Your personal data will not be shared with third parties for direct marketing purposes without your explicit consent.
4.1 Your personal data may be provided to our employees, officers, insurers, professional advisors, agents, suppliers, or subcontractors as reasonably necessary for the purposes defined in this privacy policy.
4.2 We may disclose your personal data:
To the extent required by law;
In connection with any ongoing or prospective legal or administrative proceedings;
To establish, exercise, or defend our legal rights (including sharing data with others for the purposes of fraud prevention and credit risk reduction);
To a purchaser (or prospective purchaser) of any business or asset we are selling or considering selling; and
To any party where we reasonably believe that a court or competent authority would require such disclosure.
4.3 Except as outlined in this policy, we will not disclose your personal data to third parties.
5.1 The data we collect may be transferred to email or cloud service providers in other EU countries or the United States for the effective operation of our services. These providers are contractually bound to comply with GDPR obligations.
5.2 By using our services, you expressly consent to the transfer of personal data as described in this section.
6.1 Personal data processed for any purpose shall not be kept longer than necessary for that purpose, but no longer than 15 years.
6.2 Notwithstanding the above, we will retain data containing personal information:
To the extent we are required to do so by law;
If we believe the data may be relevant to any ongoing or future legal proceedings; and
To establish, exercise, or defend our legal rights (including fraud prevention and credit risk mitigation).
7.1 We retain your personal data for the duration of our contractual relationship, and typically for an additional ten (10) years after its termination, unless otherwise required by law. You may request deletion or anonymization of your data at any time.
7.2 If any of your personal data changes during your relationship with the Company, such as a change in name, address, email, or phone number, or if you discover we are processing outdated or incorrect data, please notify us as soon as possible using any of the Company’s contact details.
7.3 You may request restricted processing of your personal data if:
You believe we are processing inaccurate data;
The processing is unlawful but you do not wish all data to be deleted;
We no longer need your data for the purposes outlined above, but you wish to retain it for legal claims (e.g., court proceedings);
You find our messages bothersome, even though we assumed they were of interest to you.
7.4 Under the GDPR you also have the right to access the personal data we hold about you, to receive a copy of it in a structured, commonly used machine-readable format (the right to data portability), and to object to processing that is based on our legitimate interest. To exercise any of these rights, contact us at info@pactus.ai.
8.1 We process the personal data described in Section 2 on the following legal bases under Article 6 of the GDPR:
Performance of a contract or pre-contractual measures (Art. 6(1)(b)): for data you submit through the contact / waitlist form, where the purpose is to enable us to respond to your enquiry and, if relevant, to take steps toward concluding a contract.
Legitimate interest (Art. 6(1)(f)): for limited technical logging required to operate and secure the website (Section 2.2, third bullet). Our legitimate interest is keeping the website available and protected against abuse. You can object to this processing at any time.
Consent (Art. 6(1)(a)): for non-essential cookies and analytics, as described in Section 9. You may withdraw consent at any time by clearing the cookie banner choice in your browser and reloading the site.
9.1 This website uses a small number of cookies and analytics services. By default, only strictly necessary technical cookies are set; analytics cookies require your explicit consent through the cookie banner.
9.2 The services in use are:
Cloudflare Web Analytics: privacy-preserving aggregate visitor metrics, without client-side state or cross-site identifiers. Used to understand overall traffic. Data is processed by Cloudflare, Inc. (USA) under the EU–U.S. Data Privacy Framework.
Google Analytics (GA4): visitor statistics. Only loaded if you grant analytics consent. Data is processed by Google LLC (USA) under the EU–U.S. Data Privacy Framework.
PostHog: product analytics for the website. Only loaded if you grant analytics consent. Data is processed in the EU (eu.posthog.com) by PostHog, Inc.
9.3 You can withdraw or change your consent at any time. Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.
10.1 If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
Effective Date: May 23, 2026