Privacy Policy

Last updated: January 27th, 2026

1. Introduction and Scope

Quartalyst (`Quartalyst`, `we`, `our`, or `us`) is committed to protecting your privacy and handling personal data transparently and responsibly.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you access or use our investor relations management platform, including dashboards, CRM features, messaging, analytics, call recordings, and public project pages (collectively, the `Platform`).

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Who This Policy Applies To

This Privacy Policy applies to the following categories of individuals (`Data Subjects`):

Account holders – individuals or representatives of projects, funds, or investors who create accounts on the Platform.
Third-party contacts – individuals whose personal data is uploaded, created, or managed by account holders through CRM or similar features.
Public website visitors – individuals who visit public project pages hosted on the Platform, where only limited technical data may be processed.

3. Personal Data We Process

Depending on how the Platform is used, we may process the following categories of personal data:

3.1 Account and Profile Data

Full name
Email address
Job title
Employer or organisation
Login credentials and authentication data

3.2 CRM and Relationship Data

Contact details of third-party contacts
Notes, relationship history, and call summaries
Uploaded documents and files

3.3 Communications and Meetings

Meeting metadata (date, participants, duration)
Call recordings
Call transcripts
AI-generated summaries and responses derived from transcripts

3.4 Usage and Technical Data

IP address
Device and browser information
Log files and timestamps
Interaction data within the Platform

3.5 Public Website Data

For public project pages, personal data published by account holders (such as names or bios) may be processed and made publicly accessible, including via search engines.

Quartalyst does not intentionally collect special category data (such as health, biometric, or government-issued identifiers), but such data may be uploaded by users at their discretion.

4. How We Collect Personal Data

We collect personal data through:

Direct interactions, when users create accounts, upload data, or communicate with us.
Automated means, such as logs and system-generated usage data.
Third-party integrations, where users connect external services (e.g. email or calendar providers).
User-generated content, including CRM entries, uploaded files, and public project pages.

5. How We Use Personal Data

We process personal data to:

Provide, operate, and improve the Platform
Enable CRM, analytics, messaging, and investor relations functionality
Record, transcribe, summarise, and analyse calls at the user`s request
Facilitate calendar and email integrations
Maintain security, prevent abuse, and monitor performance
Comply with legal obligations and enforce our agreements

6. Legal Bases for Processing

Under UK GDPR and GDPR, we rely on the following legal bases:

Performance of a contract, where processing is necessary to provide the Platform
Legitimate interests, such as improving services, ensuring security, and supporting business operations
Consent, where required (for example, certain integrations)
Legal obligations, where processing is required by law

7. Third-Party Data and User Responsibilities

Account holders may upload or manage personal data relating to third parties (such as investors or contacts).

In such cases:

Account holders confirm that they have a lawful basis to provide that data to Quartalyst.
Quartalyst acts as a processor on behalf of the account holder.
Quartalyst is not responsible for the legality or accuracy of third-party data uploaded by users.

8. Call Recordings, Transcripts, and AI Processing

The Platform allows users to record calls and generate transcripts, summaries, and responses using artificial intelligence tools.

Call recordings and transcripts are processed at the direction of account holders.
Account holders are responsible for notifying call participants that recording and transcription may occur.
AI-generated outputs are automated and may be inaccurate or incomplete.
Quartalyst does not use call recordings or transcripts to train AI models.
Recordings and transcripts are stored until deleted by the user or upon account termination.

9. Public Project Pages

Public project pages are created and controlled by account holders and may be accessible to anyone, including via search engines.

Account holders act as data controllers for content published on public pages.
Quartalyst acts as a hosting and technical service provider.
Quartalyst is not responsible for personal data published by users on public pages.

10. Integrations with Google and Microsoft

If users choose to connect their Google or Microsoft account, Quartalyst may access and process certain data from those services strictly to provide Platform functionality in accordance with user authorisation, including:

Calendar data, limited to calendars explicitly selected by the user, for scheduling, meeting management, and availability features.
Email sending capabilities, enabling emails to be sent on the user`s behalf when explicitly initiated by the user.
Contact information, where enabled by the user, to synchronise contacts into the Platform.
Basic account information, such as name, email address, and profile information, for authentication and account association purposes.

Quartalyst:

Accesses only the minimum data necessary to provide the requested features enabled by the user.
Does not read email content unless required to perform an explicit user-initiated action.
Does not use Google or Microsoft data for advertising, analytics, or training of artificial intelligence models.
Processes such data in accordance with user instructions and applicable data protection laws.

Users may revoke access to Google or Microsoft integrations at any time through their account settings.

11. Data Sharing

We may share personal data with:

Service providers supporting infrastructure, communications, error logging, and analytics (e.g. hosting, email delivery, logging services)
Professional advisors or authorities where required by law
Third parties in connection with corporate transactions (e.g. merger or acquisition)

We do not sell personal data.

12. International Data Transfers

Personal data may be processed outside the UK or EEA, including in the United States. Where this occurs, we rely on appropriate safeguards, such as standard contractual clauses, to protect personal data.

13. Data Retention

Personal data is retained until:

It is deleted by the user, or
The relevant account is terminated,

unless a longer retention period is required by law.

This applies equally to CRM data, recordings, transcripts, and uploaded documents.

14. Security Measures

Quartalyst implements appropriate technical and organisational measures to protect personal data, including access controls, encryption where appropriate, and secure infrastructure.

Access to personal data is limited to authorised personnel with a legitimate business need.

15. Your Rights

Depending on your location, you may have the right to:

Access your personal data
Correct inaccurate or incomplete data
Request deletion of personal data
Object to or restrict certain processing
Withdraw consent where processing is based on consent

Requests can be made by contacting us at hi@quartalyst.com.

16. Children

The Platform is not intended for individuals under the age of 18, and we do not knowingly collect personal data from children.

17. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on the Platform and become effective upon publication.

18. Governing Law

This Privacy Policy is governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

19. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact:

Quartalyst Privacy Officer

Email: hi@quartalyst.com