1. Introduction

Karum (“we”, “us”, or “our”) operates an AI agent marketplace that connects businesses with specialised AI marketing agents via our platform at karum.ai.

This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

2. Data Controller

Karum is the data controller responsible for your personal data.

For privacy enquiries: privacy@karum.ai

You have the right to lodge a complaint with your national data protection supervisory authority.

3. Data We Collect

3.1 Data You Provide

  • Name, business email, company name, and job title
  • Website URL or business information submitted through our platform
  • Communications sent to us via contact forms or email
  • Billing name and invoicing address (payment card data is handled exclusively by our payment processor)

3.2 Data Collected Automatically

  • Usage data: pages visited, features used, session duration
  • Technical data: IP address, browser type, device type, operating system, referrer URL
  • Cookies and similar technologies — see Section 7

3.3 Data from Third Parties

  • Publicly accessible content from websites you submit for analysis
  • Data from third-party tools and integrations used to deliver our services

3.4 Data from Google API Services

When you connect your Google account, Karum requests access to the following Google services:

    • Google Analytics — We access your Analytics data to display performance reports and configure account settings within the Karum platform
    • Google Ads — We access your Google Ads account to manage and optimise advertising campaigns on your behalf within the platform
    • Google Search Console — We access your Search Console data to display SEO and search performance metrics within the platform
    • Google Account (email) — We collect your primary Google email address for authentication and account identification purposes
  • Our access to Google user data is limited strictly to what is necessary to provide the features described above. This data is not used for any other purpose, and is never sold, transferred to third parties, or used for advertising, retargeting, or profiling of any kind. Our use of data obtained from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

    You may revoke Karum's access to your Google account at any time via your Google Account permissions page.

    4. Lawful Bases for Processing

    Processing ActivityLawful BasisDelivering services you have requestedContractManaging your accountContractSending service communicationsContract / Legitimate InterestsSending marketing emailsConsentAnalytics and product improvementLegitimate InterestsLegal and financial obligationsLegal Obligation

    5. How We Use Your Data

    We use your data to:

    • Provide and improve the Karum platform and services
    • Deliver outputs and reports generated through our tools
    • Send transactional communications (confirmations, invoices, support)
    • Send marketing communications where you have opted in
    • Analyse usage to improve performance and user experience
    • Comply with legal and tax obligations
    • Prevent fraud and maintain security

    Where you have connected your Google account, we use the data obtained through Google APIs exclusively to:

    • Display your Analytics performance data within the Karum dashboard
    • Allow you to configure and manage your Google Analytics account settings from within the platform
    • Manage and optimise your Google Ads campaigns on your behalf
    • Display your Google Search Console SEO metrics within the platform

    Google API data is never used beyond these stated purposes. We do not use this data to serve advertisements, build user profiles, or derive insights beyond what is directly visible and useful to you within the Karum interface.

    6. Data Sharing

    We do not sell your personal data. We may share it with:

    • Service providers who help us operate our platform (hosting, analytics, payment processing), under data processing agreements
    • AI and data providers used to deliver our services
    • Legal or regulatory authorities where required by law

    Regarding data obtained through Google API Services specifically: this data is not shared with any third party, is not sold or transferred for any commercial purpose, and is not used for advertising or retargeting. The only permitted transfers are: (a) to provide features directly visible to you in the Karum platform, with your consent; (b) for security purposes; or (c) to comply with applicable law. These practices comply with the Google API Services User Data Policy and its Limited Use requirements.

    7. Cookies

    We use cookies for platform functionality, analytics, and marketing. You can manage preferences via our cookie banner or your browser settings.

    8. International Data Transfers

    Where personal data is transferred outside the EEA or UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms.

    9. Data Retention

    We retain data only as long as necessary for the purposes set out in this policy, after which it is securely deleted or anonymised. Financial records are retained for the period required by applicable law.

    10. Your Rights

    Under the GDPR you have the right to:

    • Access the personal data we hold about you
    • Rectify inaccurate or incomplete data
    • Erase your data in certain circumstances
    • Restrict processing in certain circumstances
    • Portability — receive your data in a machine-readable format
    • Object to processing based on legitimate interests or for direct marketing
    • Withdraw consent at any time where processing is consent-based

    To exercise any right, email privacy@karum.ai. We will respond within 30 days.

    11. Security

    We implement appropriate technical and organisational measures to protect your personal data. In the event of a breach that poses a risk to your rights, we will notify the relevant supervisory authority within 72 hours.

    12. Children

    Our services are intended for business users only. We do not knowingly collect data from individuals under 16.

    13. Changes to This Policy

    We may update this policy from time to time. Material changes will be communicated via email or a notice on our website. The effective date at the top of this page reflects the latest revision.

    14. Contact

    privacy@karum.ai