PRIVACY

POLICY

Last Reviewed: April, 2026

INTRODUCTION

Marta is an AI-powered assistant designed to help users better understand and manage their finances through a combination of a website, personal account, and Telegram bot. Like any AI-based product, Marta relies on data to function effectively, provide relevant responses, and improve over time.

We take the protection of personal information seriously and are committed to handling it responsibly and transparently. This Privacy Policy explains what information we collect, how and why we use it, and what rights you have in relation to your personal data.

By using the Service, you acknowledge that your information may be processed as described in this Privacy Policy. If you do not agree with these practices, you should discontinue use of the Service.

For the purposes of this Privacy Policy, Kyten, Inc. ("we", "us", or "our") acts as the operator responsible for processing personal information. Kyten, Inc. is a company incorporated in the State of Delaware, United States, with its registered address at 74 E Glenwood Ave Unit #5861, Smyrna, DE 19977. This means we determine how and why your data is used and are responsible for ensuring its protection.

Please note that a significant part of the Service is provided through an AI-powered Telegram bot. Interactions with the bot are not handled by a human by default. Information you provide in conversations may be processed to generate responses, improve functionality, and support the operation of the Service. In certain cases, access to human support may be provided through a dedicated support channel.

If you have any questions about this Privacy Policy or how your data is processed, you can contact us at hello@meetmarta.io or via our support chat: https://t.me/MartaAI_Support.

HOW AND WHY WE COLLECT INFORMATION

When you use the Service, including the website, your personal account, and the Telegram bot, certain information is either provided by you or collected automatically as part of the normal operation of the Service.

This information is used to ensure that the Service functions as intended, to provide you with access to its features, to improve performance and user experience, and to maintain security and stability. Some data is also necessary for processing subscriptions, handling support requests, and communicating with you regarding your account or the Service.

We do not sell, rent, or otherwise monetize your personal information. Personal data is only shared where it is necessary to operate the Service or comply with legal obligations.

The Service is not designed to collect sensitive categories of personal data such as information about health, political views, religious beliefs, or similar. Users are encouraged not to provide such information when interacting with the Service, including through the AI-powered Telegram bot. We limit the collection of personal data to what is necessary for the purposes described in this Privacy Policy and do not collect information that is not relevant to the operation of the Service.

This Privacy Policy should be read together with our Terms of Use and Cookies Policy, which describe additional aspects of how the Service operates.

OTHER RELEVANT POLICIES AND TERMS

This Privacy Notice should be read alongside:
• Marta Terms of Use
• Marta Cookie Policy

WHAT INFORMATION WE COLLECT

Information you provide directly

When using Marta, you may provide certain personal information as part of creating and using your account or interacting with the Telegram bot.

This may include basic contact details such as your name, email address, phone number, and Telegram username. In addition, you may choose to provide profile-related information such as a profile photo or other details within your account.

When interacting with the AI assistant, any information you submit as part of messages may be processed in order to generate responses and provide the requested functionality. Such information is used only within the scope of the Service.

All information provided by you should be accurate and up to date.

Payment-related information

If you purchase a subscription, we receive limited information necessary to confirm and manage the transaction. This may include the amount, date, status of the payment, and a transaction identifier, as well as contact details associated with the payment.

We do not collect or store full payment card details. Payment information is processed directly by third-party payment providers in accordance with their own policies.

Information collected automatically

When you access and use the website, certain technical information is collected automatically. This may include your IP address, browser type, device characteristics, operating system, and information about how you interact with the website.

Such information is used to ensure the proper functioning of the Service, to analyze usage patterns, to improve performance, and to detect and prevent misuse or technical issues.

AI AND DATA PROCESSING

The Service uses artificial intelligence technologies to process the information you provide and generate responses.

When you interact with the Service, including through the Telegram bot, the content of your messages, files, or other inputs may be processed in order to provide functionality, generate outputs, and improve the performance of the Service.

We do not use your personal data to train external artificial intelligence models.

These processes are automated and based on machine learning models. As a result, the outputs generated by the Service may not always be accurate, complete, or tailored to your specific situation.

The Service is designed to assist you but does not replace professional advice. You are responsible for how you use the Service and for any decisions you make based on its outputs.

Certain features of the Service may involve automated processing, including the generation of financial insights, categorization of transactions, and recommendations. Such outputs are provided for informational purposes only and do not take into account your full personal or financial circumstances.

No legally binding or similarly significant decisions are made solely based on automated processing.

USE OF TELEGRAM PLATFORM

Part of the Service is delivered through a Telegram bot. Telegram is a third-party platform, and your use of Telegram is governed by its own terms and privacy practices.

When you interact with the Service via Telegram, you voluntarily provide information by sending messages, files, or other content. This information is processed solely to provide the functionality of the Service.

We do not control how Telegram processes your data outside of your interaction with the Service. For more information, please refer to Telegram's Privacy Policy.

You are responsible for the information you choose to share when using the Service and should avoid providing sensitive personal data unless necessary.

Please note that messages sent through Telegram are transmitted via Telegram's infrastructure and may be subject to Telegram's own data handling and security practices.

LEGAL BASIS FOR PROCESSING

We process your personal information only when it is necessary and when we have a valid legal basis to do so under applicable law. This may include situations where you have given consent, where processing is required to provide you with the Service, to comply with legal obligations, to protect your rights, or to support our legitimate business interests.

Under applicable data protection laws, including the General Data Protection Regulation (GDPR), we are required to explain the legal grounds on which we process your personal data. Depending on how you use the Service, we may rely on the following legal bases:

Consent. We may process your information where you have given us permission to do so for a specific purpose, such as receiving communications from us. You can withdraw your consent at any time.

Performance of a contract. We may process your personal information where it is necessary to provide the Service to you, including creating and maintaining your account or responding to your requests before entering into a contract.

Legal obligations. We may process your information where necessary to comply with applicable laws or legal requirements, including responding to lawful requests from authorities or protecting our legal rights.

Legitimate interests. We may process your information where it is reasonably necessary for our legitimate interests, such as improving the Service, ensuring security, preventing fraud, and maintaining system performance, provided that these interests do not override your rights.

INFORMATION RECEIVED FROM THIRD PARTIES

In general, we do not collect personal information about you from third-party sources.

However, in limited cases, we may receive certain information from service providers where this is necessary to operate the Service. For example, when you make a payment, we may receive confirmation details from the payment provider, such as transaction status, amount, and associated identifiers.

We do not independently obtain personal data such as financial accounts, employment data, or other external datasets from third parties.

INTERNATIONAL DATA TRANSFERS

Your personal information may be processed and stored in countries other than the country in which you are located, including the United States, where our company and certain service providers operate.

These transfers may occur when we use third-party services for hosting, analytics, payment processing, or other operational purposes necessary to provide the Service.

Where personal data is transferred outside of the European Economic Area (EEA) or the United Kingdom, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws. These safeguards may include the use of standard contractual clauses approved by the European Commission or other legally recognized transfer mechanisms.

SHARING OF PERSONAL INFORMATION

We do not sell your personal information and do not disclose it to third parties for independent use. Personal information may be shared only where it is necessary for the operation of the Service, the provision of functionality, or compliance with legal obligations.

We may share data with the following categories of service providers. Each of these providers operates under its own terms and privacy policies, which can be found on their respective websites.

Telegram provides the messaging platform through which a significant part of the Service is delivered. When you interact with the Service via Telegram, certain information such as your messages, username, and identifiers may be transmitted through Telegram's infrastructure and processed in order to enable communication and functionality of the Service.

Stripe provides payment processing services for subscriptions and other paid features. This may involve the processing of contact details, billing information, payment data, transaction identifiers, and payment status in order to complete and manage payments.

Communication service providers, including services such as Twilio or equivalent messaging infrastructure, may provide us with text message, authentication, notification, and email delivery services. This may involve the processing of your phone number, email address, and message delivery data so that we can send you login codes, service notifications, and other communications related to the Service.

Cloud infrastructure and hosting providers, including services such as Heroku and Amazon Web Services (AWS), or equivalent providers, may provide us with data hosting, storage, and infrastructure services. This may involve the processing of account information, transaction records, usage data, and conversation history in order to operate, maintain, secure, and scale the Service.

Google services, including Google Drive and Google Sheets integrations, may be used to provide functionality such as spreadsheet synchronization and storage of analytics created on your behalf. This may involve the processing of your email address, financial records, analytics, and account-related data where necessary to create, update, and maintain documents connected to your use of the Service.

OpenAI provides us with certain artificial intelligence, chat, and natural language processing functionality. This may involve the processing of messages, uploaded files, financial records, and other inputs you provide through the Service in order to generate responses, extract information, and deliver AI-powered features.

Google Gemini provides certain artificial intelligence and data processing functionality. This may involve the processing of messages, uploaded files, financial records, and other inputs you provide through the Service in order to support AI-generated responses, analysis, and automation within the Service.

Meta provides us with advertising, analytics, and audience measurement tools, including technologies such as the Meta Pixel, custom audience tools, and related advertising services. This may involve the processing of device information, website interaction data, event data, and certain identifiers for the purposes of measuring ad performance, building audiences, and improving marketing effectiveness.

We may also disclose personal information where required to do so by law, regulation, or legal process, or where such disclosure is necessary to protect our rights, enforce our terms, prevent fraud, or ensure the safety of users and the Service.

In the event of a business transaction, such as a merger, acquisition, restructuring, or sale of assets, personal information may be transferred as part of that transaction. In such cases, appropriate safeguards will be applied to ensure the continued protection of your data.

Where personal information is transferred outside of your jurisdiction, including outside of the European Economic Area, we take steps to ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal information only for as long as it is necessary to fulfill the purposes described in this Privacy Policy, including providing the Service, maintaining your account, and complying with applicable legal obligations.

In most cases, personal information is retained for the duration of your use of the Service. When you stop using the Service or request deletion of your account, your personal information will be deleted or anonymized within a reasonable period, unless we are required or permitted to retain certain data for legal, security, or fraud prevention purposes.

In some situations, it may not be technically possible to immediately delete all data, for example where it is stored in backup systems. In such cases, the data is securely stored and isolated from further use until deletion becomes possible.

Where third-party service providers are involved in processing certain types of data, such providers may retain information in accordance with their own retention policies and legal obligations.

SECURITY OF YOUR PERSONAL INFORMATION

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, loss, misuse, or disclosure.

These measures include, among other things, data encryption, secure data transmission, access controls, and internal policies designed to ensure that personal data is processed in a secure and confidential manner.

We work with trusted third-party service providers who are required to maintain appropriate security standards and safeguards when processing personal data on our behalf.

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure. As a result, we cannot guarantee absolute security of your data.

DATA BREACH NOTIFICATION

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority as required by applicable law.

Where required, we will also notify affected users without undue delay and provide information about the nature of the breach, the likely consequences, and the measures taken to address it.

We maintain internal procedures to detect, investigate, and respond to potential data breaches.

CHILDREN'S ONLINE PRIVACY PROTECTION ACT

When it comes to the collection of personal information from children under the age of 13, the Children's Online Privacy Protection Act (COPPA) places parents in control. The Federal Trade Commission, the United States' consumer protection authority, enforces the COPPA Rule, which defines how operators of online services must protect the privacy and safety of children.

We do not specifically market the Service to children under the age of 13.

YOUR PRIVACY RIGHTS

Depending on your location and applicable data protection laws, you may have certain rights in relation to your personal information.

You have the right to:
• request access to the personal data we hold about you and obtain information about how and why it is being processed;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data where there is no valid reason for us to continue processing it (subject to legal and regulatory limitations);
• request restriction of processing in certain situations, including where you contest the accuracy of your data or object to its use;
• object to processing based on legitimate interests, including for service improvement, analytics, or similar purposes;
• object to the use of your personal data for direct marketing at any time;
• withdraw your consent at any time where processing is based on consent (this will not affect processing carried out before withdrawal);
• receive your personal data in a structured, commonly used, and machine-readable format and, where technically feasible, request its transfer to another provider;
• lodge a complaint with a competent data protection authority if you believe your personal data has been processed unlawfully.

To exercise any of your rights, you can contact us at hello@meetmarta.io or via our support chat: https://t.me/MartaAI_Support. We will review and respond to your request within a reasonable timeframe in accordance with applicable law.

We may request additional information from you in order to verify your identity before processing your request. This is a security measure designed to ensure that personal data is not disclosed to unauthorized individuals.

In some cases, we may also ask for clarification or additional details regarding your request in order to process it more efficiently and provide an accurate response.

ACCOUNT INFORMATION

You may review, update, or request deletion of your account information at any time.

In most cases, you can manage your information directly through your account settings within the Service. If you need assistance, you may also contact us using the contact details provided in this Privacy Policy.

If you request to delete your account, we will deactivate or remove your account and personal information from our active systems within a reasonable period. At the same time, certain information may be retained where necessary, for example to prevent fraud, resolve disputes, comply with legal obligations, or enforce our terms.

If you have any questions regarding your account or your privacy rights, you can contact us at hello@meetmarta.io or through our support chat: https://t.me/MartaAI_Support.

HOW WE USE YOUR INFORMATION

We use personal information to operate, maintain, and improve the Service, as well as to provide you with a consistent and personalized experience.

Your information may be used to enable core functionality of the Service, including access to your account, interaction with the AI assistant, and use of the Telegram bot. It is also used to communicate with you, including sending service-related notifications, updates, and important information about your account or the Service.

In addition, personal information may be used to improve the performance and usability of the Service. This includes analyzing how users interact with the website and features, identifying technical issues, and developing new functionality.

We may also use data for security purposes, such as verifying accounts, preventing fraud, and detecting misuse of the Service.

Where permitted by law and where a valid legal basis exists, your information may be used for marketing and product analytics, including measuring engagement and understanding how users interact with the Service. This helps us improve our product and make informed decisions about its development.

If you delete your account, your personal information will be removed or anonymized, except where retention is required for legal, security, or legitimate business purposes. Anonymous or aggregated data that does not identify you may continue to be used for analytical purposes.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in the Service, legal requirements, or our data processing practices.

When we make updates, we will revise the "Last updated" date at the top of this Privacy Policy. In the case of material changes, we may also provide additional notice, for example by posting a notice within the Service or, where appropriate, by contacting you directly.

You are encouraged to review this Privacy Policy periodically to stay informed about how your information is processed.

Continued use of the Service after updates become effective means that the updated version of this Privacy Policy applies to your further use of the Service.

INFORMATION ABOUT OUR USE OF COOKIES

Cookies are small data files that are stored on your device when you visit or use the Service. They allow the Service to recognize your device, remember your preferences, and improve your overall experience.

We use cookies and similar technologies for several purposes, including ensuring the proper functioning of the Service, maintaining security, analyzing how the Service is used, and improving performance and usability. In some cases, cookies may also be used to support analytics and measure the effectiveness of features.

You can control or disable cookies through your browser or device settings. However, please note that disabling cookies may affect the availability or functionality of certain parts of the Service.

For more detailed information about how we use cookies and similar technologies, please refer to our separate Cookies Policy available on the Service.

CONTACT INFORMATION

If you have any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal information, you may contact us at:

Kyten, Inc.
74 E Glenwood Ave Unit #5861
Smyrna, DE 19977
United States

Email: hello@meetmarta.io
Support: https://t.me/MartaAI_Support

FINAL PROVISIONS

This Privacy Policy applies to all components of the Marta Service, including the website, personal account, and Telegram bot.

If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions will continue to apply in full force.

We process personal data in accordance with applicable data protection laws, including, where applicable, the General Data Protection Regulation (GDPR) and other relevant legislation.