Privacy Policy

1. Who is responsible for your data

Cravto, LLC is the controller of the personal data described in this Policy. We decide why and how your data is processed, and we are responsible for protecting it.

If you work for one of our clients or partners, we may receive your personal data from your employer as part of an engagement. In that case, our use of your data is also governed by our agreement with your employer.

2. What data we collect

We collect only the data we need for the purposes described in this Policy.

• Contact requests. When you use the Let’s talk form, we collect your name, work email, company, the stage you select, and your message.

• Job applications. When you email us to apply, we collect your résumé and anything else you choose to send, such as links to your work.

• Client and partner work. When we work together, we collect business contact details and the information needed to deliver the engagement.

• Site usage. When you visit the Site, we may collect technical data such as your IP address, browser, device, the pages you view, and the page that referred you.

We don’t ask for special categories of personal data, such as health, biometric, or political information. Please don’t include them in messages or applications.

3. How we use your data

• To reply to you. We use your message and contact details to respond and discuss a potential engagement. Basis: your consent and our legitimate interest in answering business inquiries.

• To hire. We use your application to assess your fit for a role and run our hiring process. Basis: your consent, given when you send your application.

• To deliver our Services. We use client and partner data to deliver and manage engagements. Basis: the performance of our contract.

• To run the Site. We use usage data to keep the Site secure and understand how it’s used. Basis: our legitimate interest in running a secure, working Site.

• To send updates. We send occasional news about Cravto only if you ask for it. Basis: your consent, which you can withdraw at any time.

• To meet legal obligations. We process data when the law requires it, or to protect our rights. Basis: legal requirements.

We don’t sell personal data, and we don’t use it to make automated decisions that have legal or similarly significant effects on you.

4. Cookies

Cookies are small text files a website stores in your browser. We use cookies the Site needs to work, and we may use analytics cookies to understand how visitors use it.

Most browsers accept cookies by default. You can block or delete them in your browser settings. If you block cookies the Site needs, some features may not work as expected.

5. Who we share data with

We share personal data only when needed, and only with:

• Service providers who help us run the Site and our business, such as hosting, email, and analytics providers. They may use your data only to provide their services to us.

• Professional advisers, including our legal, financial, and accounting advisers.

• Our ventures, when you ask us to introduce you, or when your inquiry is about a specific venture.

• Public authorities, when the law requires it.

• A buyer or successor, if Cravto is involved in a merger, acquisition, or reorganization.

We may also share data when it’s necessary to prevent fraud, protect the security of the Site, or protect the rights and safety of Cravto, our clients, or others.

6. International transfers

Some of our service providers are located outside the Republic of Armenia. When we transfer personal data abroad, we do so in line with Armenian law: to countries that provide an adequate level of protection, with appropriate safeguards in place, or with your consent.

7. How we protect your data

We use technical and organizational measures to protect personal data against loss, misuse, and unauthorized access. Access is limited to people who need it, and they are bound by confidentiality. No system is completely secure, so we can’t guarantee absolute security.

If a data breach affects your personal data, we’ll notify you and the relevant authority where the law requires it.

8. How long we keep your data

We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires.

• Contact requests are kept while we’re in conversation and for up to 24 months after, unless we start working together.

• Job applications are kept during the hiring process and for up to 12 months after, so we can contact you about future roles, unless you ask us to delete them sooner.

• Client and partner data is kept for the length of the engagement and as long as needed to meet legal and accounting obligations.

9. Your rights

Under the Law of the Republic of Armenia on Protection of Personal Data, you have the right to:

• Be informed about whether and how we process your personal data.

• Access your personal data and receive a copy.

• Correct data that is inaccurate or incomplete.

• Block or delete your data when it’s no longer needed or was processed unlawfully.

• Withdraw your consent at any time. This doesn’t affect processing that took place before.

• Object to processing based on our legitimate interests.

• Complain to the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia.

To exercise your rights, contact us using the details below. We may need to verify your identity first, and we’ll respond within the time the law requires.

10. Children

The Site and our Services are not intended for anyone under 16, and we don’t knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we’ll delete it.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we’ll change the “Last updated” date at the top of this page. If the changes are significant, we’ll make that clear on the Site.

12. Contact us

For questions or requests about this Policy or your personal data, contact: