Privacy policy

Who we are

This website is operated by Cartorga AG, Hardturmstrasse 161, 8005 Zürich, Switzerland. For company details see the Impressum. For any privacy question, contact hello@cartorga.com.

Analytics and cookies

We use PostHog, a product-analytics tool, to understand how visitors use this site so we can improve it. PostHog is hosted in the European Union (eu.i.posthog.com). No analytics run, and no analytics cookies or local storage are set, until you give consent.

When you accept, PostHog processes usage data such as pages viewed, clicks and navigation, approximate location derived from your IP address, and device and browser information. Session recording is disabled, and we do not use this data to build advertising profiles or sell it to third parties.

Legal basis and your choice

Analytics are processed only on the basis of your consent (GDPR Art. 6(1)(a) and the applicable ePrivacy rules). Consent is optional and the site works fully without it.

You can change or withdraw your consent at any time using the Cookie settings link in the footer. Withdrawing consent stops further processing and clears the analytics identifiers.

Trial requests and the contact form

When you submit the trial request form, we collect the details you enter, such as your name, work email, consultancy, team size, and what you want to use Cartorga for, so we can respond to your request. The legal basis is our legitimate interest in answering enquiries and taking steps at your request before entering a contract (GDPR Art. 6(1)(b) and (f)).

Form submissions are handled by Forminit, our form-processing provider, acting as a processor on our behalf under a data processing agreement. Forminit processes the submission on EU-based infrastructure and does not use it for its own purposes.

We keep trial request details only as long as needed to handle your enquiry and any resulting relationship, then delete them. We use two processors on this site: Forminit for form submissions, and PostHog for analytics, both on EU-based infrastructure and each under a data processing agreement.

Data location and retention

Analytics data is stored and processed on EU-based, ISO-certified infrastructure. No sensitive data is transferred to US cloud infrastructure. Analytics data is retained for up to 12 months, after which it is deleted or aggregated so that it can no longer be linked to an individual.

Your rights

You have the right to access, correct, delete, and object to the processing of your personal data, and to lodge a complaint with a supervisory authority. To exercise these rights, contact hello@cartorga.com. If you are in Switzerland you may contact the Federal Data Protection and Information Commissioner (FDPIC); if you are in the EU, your local data-protection authority.