Carpathian Privacy Policy

Version 1.1Effective September 1, 2026
This policy applies to all Carpathian services and is incorporated into our Terms of Service.

The Carpathian website and all related services are products of Carpathian, LLC (“Carpathian,” “we,” or “us”). We take your privacy very seriously. How we handle information we learn about you depends upon what you do when using the website located at www.carpathian.ai (“Site”) or the various technology solutions and services offered through the Site (collectively, the “Services”). We strive to ensure that all choices you (“you,” “user,” or “users”) make while using our Services are as transparent as possible, and we hold the security of your personal information as a top priority. This policy (“Privacy Policy”) covers personally identifiable information and other data that you provide us through your use of our Services or websites. Any information provided outside of these terms is not covered by this Privacy Policy. This document explains what information is collected, how that information is used and shared, how the information is protected, and how you can control your privacy while using our Services. We reserve the right to update this Privacy Policy at any time and will post updates on our website.

Information Carpathian Collects

In administering the Services, Carpathian may collect both Personal Information and non-Personal Information. Personal Information is data that can be directly or indirectly linked back to you (“Personal Information”). Non-Personal Information is data that, on its own, does not identify an individual.

Information Affirmatively Provided By Users

You may provide Personal Information such as your name, email address, username, mailing address, phone number, profile photos, and billing information when you register for or use our Services.

Information Automatically Collected

Like many modern websites, we also collect information automatically as you navigate our Services. This may include details from your browser or mobile device such as the time and date of your access, your IP address, device information, cookies, and the pages you view. This data helps us analyze trends, manage our Services, track navigation, deliver relevant content, and gather aggregate demographic information. Note that while cookies can uniquely identify your device, they are not directly linked to Personal Information unless you voluntarily provide it.

Cookies: Cookies are small data files that may be stored on your device and typically contain an anonymous unique identifier. They do not personally identify you but help us enhance security, customize content, store login details, and improve the overall functionality of our Services. You can manage your cookie preferences through your browser settings; however, disabling cookies may affect your experience.

Third Party Analytics: We use third-party analytics providers (such as Google Analytics) to understand how our Services are used. These providers may use cookies to collect information such as how frequently users visit our Site, which pages they view, and what sites they visited before ours. The data collected is used solely to improve our Services.

Information You Submit to the AI Services

When you use Carpathian AI chat, assistants, or image generation, we store the prompts and files you submit and the text and images the models return, along with the IP address and browser information of the request. This applies whether you are signed in or using the AI services as a visitor without an account. Message content and image prompts are encrypted at rest. Do not submit anything to the AI services that you would not want stored, including passwords, payment card numbers, or personal information about other people that you are not permitted to share.

How We Use Your Data

The information you provide helps us to:

  • Create and manage your Carpathian account
  • Contact you for customer service and support
  • Communicate important changes or updates to our Services
  • Send administrative notices, offers, and communications we believe may be of interest
  • Operate, improve, and maintain our products and services, including analyzing user behavior
  • Monitor web traffic and manage site navigation
  • Implement spam protection measures
  • Review content submitted to and produced by the AI services for compliance with our Acceptable Use Policy
  • Develop, train, evaluate, and improve our AI models using prompts, conversations, and generated content, as described in Section 21 of the Terms of Service. We do not train models on your account Personal Information, meaning your name, email address, phone number, mailing address, billing details, or account records
  • Detect, investigate, and prevent abuse, fraud, and security incidents

How We Review AI Content

Prompts, uploaded files, conversations, and generated content are subject to review for compliance with our Acceptable Use Policy. That review may be automated, may be carried out by authorized Carpathian personnel, or both. Requests made through the AI API and proxy pass through automated screening at the time of the request, and a screened request may be blocked before a model is called. Stored prompts and conversations may also be examined afterward, including on a routine schedule rather than in response to a report, and including content submitted by visitors who are not signed in.

We review this content to keep the Services lawful and available, to investigate suspected violations, and to protect users and third parties. Personnel access is limited to staff whose role requires it.

Under Section 21 of the Terms of Service we may also use prompts, conversations, and generated content to operate and secure the Services and to develop, train, evaluate, and improve our models. We do not train models on your account Personal Information, meaning your name, email address, phone number, mailing address, billing details, or account records. We do not sell, rent, or license prompts, conversations, or generated content to third parties, and we do not use them to target advertising. Disclosure to a service provider acting on our behalf, disclosure required by law or by lawful request, disclosure to protect rights or safety, and reporting under the Acceptable Use Policy are not sales.

Where content indicates a violation, we may retain it, remove it, restrict or terminate the account, and disclose it to law enforcement or to the National Center for Missing and Exploited Children as described in the Acceptable Use Policy. Reporting of child sexual abuse material is mandatory and is not subject to your consent or to a deletion request.

Conversations and images you delete are removed from your account view and from our active systems. Records kept for security or investigative purposes may survive that deletion, and copies may persist in backups for a limited period.

How We May Share Your Information

Sharing of Personal Information

Carpathian does not sell, rent, or distribute your Personal Information to third parties, except as needed to provide our Services. We may share your information in the following cases:

  • With Your Consent: We may share your information when you give explicit permission, or as inferred from your use of our Services.
  • Service Providers and Contractors: We may disclose information to trusted service providers or contractors who assist us in areas such as processing payments, maintaining the Site, or facilitating communications. These partners are required to protect your Personal Information in a manner consistent with this Privacy Policy.
  • By Law or to Protect Rights: We may disclose your information when necessary to comply with legal obligations, enforce our Terms of Service, protect our rights, or respond to lawful requests from public authorities.
  • Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of the transaction, provided the recipient agrees to adhere to this Privacy Policy.

Sharing of Non-Personal Information and Aggregate Data

We may share non-Personal Information and aggregated data with third parties for purposes such as research and reporting. This data does not identify individual users.

How We Protect Your Data

All information submitted to Carpathian is stored on our secure servers, and we use industry-standard security measures, including SSL encryption where appropriate, to protect your data. However, no system is completely impenetrable. We cannot guarantee absolute security and you transmit information at your own risk.

By using our Services or providing Personal Information, you consent to receive electronic communications regarding security, privacy, and administrative matters. Should a data breach occur, we will notify you via email with details about the breach, your risk exposure, and recommendations for further action.

How You Can Control Your Information

You have the ability to review, update, change, or delete your Personal Information through your account settings or by contacting us directly at info@carpathian.ai. Additionally, you may opt out of receiving promotional emails by clicking the “unsubscribe” link in any communication from us. Please note that some administrative or service-related messages may still be sent regardless of your preferences.

We may retain certain data as required by law or for legitimate business purposes, even if you request its deletion. It may not be possible to remove all traces of your information from our backup systems.

Links

Our Services may contain links to external websites. Carpathian is not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Our Policy Toward Children

Our Services are not directed toward individuals under the age of 13. We do not knowingly collect Personal Information from anyone under this age. If you become aware that a child under 13 has provided Personal Information to us, please contact us immediately so that we can take appropriate action.

Consent to Transfer

Carpathian's systems are based and operated in the United States. By using our Services, you consent to the transfer of your data to the United States. If you are accessing our Services from outside the United States, please be aware that the data protection laws in your country may not be as comprehensive as those in the United States.

Changes and Updates

We may update this Privacy Policy from time to time. We encourage you to check this page periodically for the latest information on our privacy practices. If we make material changes, we will notify you by posting the updated Privacy Policy on our Site and, if appropriate, via email.

Contact Us

We welcome your questions and feedback regarding this Privacy Policy. If you have any concerns, please contact us:

Last updated Aug 28, 2026Version 1.1