Who we are
CharpstAR AB (org. nr 559094-7395) is a Swedish company providing 3D and WebAR services for e-commerce. We are the data controller for the personal data described in this policy.
This policy covers our websites at charpstar.se, charpstar.com and charpstar.co, the forms and demo requests on those sites, and the CharpstAR connector described in its own section below.
It does not cover the websites of our clients. If you view a 3D or AR model that we produced while shopping on a retailer's site, that retailer is the controller for whatever they collect about your visit.
Information we collect
Information you give us
When you request a demo or contact us through this website, we ask for your name, your role, your email address, your business name, your country and your phone number. If you email us or reply to one of our emails, we also hold whatever you choose to put in that message.
We ask for these details so a person on our team can respond to you about our services. You do not need an account to browse this website.
Information collected automatically
When you visit our website, we and the providers listed under Analytics, session recording and advertising may collect your IP address, approximate location derived from it, browser and device type, operating system, referring page, the pages you view, and how you move through and interact with those pages.
Server logs
Our hosting provider keeps standard technical request logs, including IP address and timestamp, for security, debugging and reliability. These are short-lived and are not used to build profiles.
How we use your information
We use the information described above to:
- respond to demo requests, quotes and other enquiries;
- provide, operate, secure and troubleshoot our websites and services;
- understand which pages and content are useful, so we can improve them;
- measure whether our advertising and campaigns are reaching the right audience;
- send you information about our services where you have asked for it or where we are otherwise permitted to; and
- meet our legal and accounting obligations.
We do not sell your personal data, and we do not use it to make automated decisions that produce legal or similarly significant effects for you.
Legal bases for processing
Under the GDPR we must have a legal basis for each purpose. Ours are:
- Legitimate interests— responding to your enquiry, keeping our site secure and available, and understanding in general terms how our site is used. We balance these against your rights and do not process more than we need.
- Consent— non-essential analytics, session recording and advertising technologies, where consent is required. You can withdraw consent at any time; see Cookies and similar technologies.
- Performance of a contract— where you are a client, processing needed to deliver the services we have agreed.
- Legal obligation— where we must keep records, for example for accounting purposes.
Analytics, session recording and advertising
We would rather be specific here than vague. Our website currently loads the following third-party technologies:
- Google Tag Manager— a container that loads the tags listed below.
- Google Analytics— aggregate statistics about visits, pages and traffic sources.
- Google Ads conversion tracking— records that a demo request was submitted, so we can measure campaign performance.
- Smartlook— session recording and heatmaps, hosted in the EU region. This can capture your clicks, scrolling, mouse movement and navigation on our pages, so we can see where our site is confusing or broken.
- LinkedIn Insight Tag— measures the performance of our LinkedIn campaigns and supports audience reporting.
Each of these providers acts under its own privacy terms as well as our instructions. You can opt out of Google Analytics across all sites using Google's browser add-on, and you can manage LinkedIn advertising preferences in your LinkedIn account settings.
International transfers
Some of our providers are established outside the EU/EEA or process data there. Where that happens we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses, together with additional safeguards where appropriate. Contact us for details of the safeguards that apply to a particular transfer.
How long we keep your information
We keep personal data only as long as we need it for the purpose we collected it:
- Enquiries and demo requests— for as long as we are in contact with you about our services, and for a reasonable period afterwards so we have context if you come back to us.
- Client records— for the duration of the agreement and for as long as accounting and statutory obligations require.
- Analytics and session recordings— for the limited retention period offered by each provider.
- Server logs— short-lived, as set by our hosting provider.
How we protect your information
We use encryption in transit, access controls and reputable infrastructure providers, and we limit access to personal data to the people who need it to do their job. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take these obligations seriously and review them as our systems change.
Your rights
If you are in the EU/EEA, you have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent at any time where processing is based on consent. Withdrawing consent does not affect processing carried out before you withdrew it.
To exercise any of these rights, email us at support@charpstar.com. We will respond within one month. We may need to verify your identity first.
You also have the right to lodge a complaint with a supervisory authority. In Sweden this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se. You may also complain to the authority where you live.
Children's privacy
Our website and services are directed at businesses, not at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
CharpstAR Connector Privacy Policy
This section applies specifically to the CharpstAR connector. Last updated: August 19, 2026.
The CharpstAR connector ("the Connector") lets AI assistants (such as Claude and ChatGPT) search CharpstAR's public product showcase and retrieve links to 3D and augmented-reality product views.
What the Connector does not do
- It does not require an account and has no login.
- It does not collect, store, or process any personal data.
- It does not use cookies or tracking technologies.
- It is read-only: it cannot create, modify, or delete any data.
What the Connector processes
Search queries sent by your AI assistant are used solely to look up products in our catalog and are processed transiently. We do not link queries to any individual, and we do not sell or share any data with third parties.
The catalog
All products available through the Connector are publicly published, client-approved 3D models. Product pages linked in results belong to the respective retailers.
Standard web logs
Our hosting provider (Vercel) keeps standard, short-lived technical request logs (IP address, timestamp) for security and reliability. These are not used for profiling.
Contact
Questions about this policy: support@charpstar.com
Changes to this policy
We may update this policy as our services and the tools we use change. When we do, we will update the date at the top of this page. If a change materially affects how we handle your personal data, we will take reasonable steps to tell you.
Contact us
For any question about this policy or about how we handle your personal data:
- Email: support@charpstar.com
- Web: Contact us
- CharpstAR AB, org. nr 559094-7395, Sweden