Privacy Policy

Last Updated: August 2, 2026

This Privacy Policy explains how Unleash IQ Solutions Private Limited, operating the Cactus Market Intelligence platform (“Cactus,” “we,” “our,” or “us”), collects, uses, stores, and protects information when customers and users access our website, platform, applications, and related services.

Our website is www.cactusmi.com. Questions regarding this Privacy Policy may be directed to hello@cactusmi.com.

1. About Cactus Market Intelligence

Cactus Market Intelligence is an AI-powered commercial intelligence platform designed to help consumer packaged goods companies transform customer-owned syndicated, retailer, eCommerce, sales, finance, and operational data into business insights, forecasts, recommendations, and decision support.

Cactus does not sell syndicated market data and does not independently grant customers rights to use third-party datasets. Customers are responsible for ensuring that they have the necessary rights, licenses, and permissions to provide data to the platform.

2. Information We Collect

Account and Contact Information

We may collect information such as:

• Name
• Business email address
• Telephone number
• Company name
• Job title
• User account and authentication information
• Customer support communications

Customer Data

Customers may upload, connect, or otherwise provide data to Cactus, including:

• Syndicated market and consumer data
• Retailer and point-of-sale data
• eCommerce performance data
• Product, SKU, brand, category, channel, and customer data
• Pricing, promotion, distribution, and market-share data
• Sales, finance, cost, margin, trade-spend, inventory, and forecasting data
• Reports, spreadsheets, extracts, database feeds, and other business information

Customer Data remains controlled by the applicable customer and is processed by Cactus only to provide, secure, support, and improve the contracted services.

Website and Technical Information

When users access our website or platform, we may automatically collect:

• IP address
• Browser and device type
• Operating system
• Login and activity records
• Pages or features accessed
• Date, time, and duration of access
• Error, diagnostic, and performance information
• Cookie and similar technology data

3. How We Use Information

We may use information to:

• Provide and operate the Cactus platform
• Authenticate users and manage accounts
• Ingest, harmonize, model, and analyze Customer Data
• Generate dashboards, forecasts, alerts, summaries, and AI-supported insights
• Provide customer support and technical assistance
• Monitor platform performance and reliability
• Detect, investigate, and prevent unauthorized activity
• Maintain audit, security, and system logs
• Improve platform functionality and user experience
• Communicate service, security, and administrative updates
• Comply with contractual, legal, regulatory, and compliance obligations

We do not sell Customer Data or personal information to advertisers or data brokers.

4. AI and Automated Analysis

Cactus may use artificial intelligence, machine learning, statistical models, and automated analytics to process Customer Data and generate:

• Performance summaries
• Market-share explanations
• Competitive movement alerts
• Distribution-gap analysis
• Price and promotion insights
• Forecasts and scenarios
• Recommended business actions
• Natural-language responses and reports

AI-generated content may contain errors, omissions, or incomplete conclusions. Customers remain responsible for reviewing outputs and applying appropriate business judgment before making commercial, financial, operational, or strategic decisions.

Customer Data will not be used to train shared or public artificial intelligence models unless expressly agreed in writing with the customer.

5. Legal Basis for Processing

Depending on the applicable jurisdiction, we process personal information based on:

• Performance of a contract
• Legitimate business interests
• Compliance with legal obligations
• Protection of our systems, customers, and users
• Consent, where required

6. How We Share Information

We may share information with:

Service Providers

We may engage cloud hosting, infrastructure, security, monitoring, communications, analytics, and technical service providers that process information on our behalf.

These providers are required to use information only for the services they provide to us and to maintain appropriate confidentiality and security protections.

Customer-Authorized Users and Partners

Information may be made available to users, administrators, consultants, implementation partners, or other parties authorized by the customer.

Legal and Regulatory Disclosures

We may disclose information when reasonably necessary to:

• Comply with applicable laws, regulations, court orders, or lawful government requests
• Enforce our agreements and policies
• Protect the rights, security, and property of Cactus, our customers, users, or others
• Investigate suspected fraud, misuse, or security incidents
• Support a corporate transaction, subject to appropriate confidentiality protections

7. International Data Processing

Cactus serves customers worldwide. Information may therefore be processed or stored in countries other than the country in which it was originally collected.

Where required, we use contractual, organizational, and technical safeguards designed to protect information transferred internationally.

Customers are responsible for determining whether their use of Cactus complies with data-transfer, data-residency, and sector-specific requirements applicable to them.

8. Data Ownership

As between Cactus and the customer:

• The customer retains ownership of its Customer Data.
• Cactus retains ownership of the platform, software, algorithms, workflows, templates, data models, documentation, and underlying intellectual property.
• Cactus receives only the rights reasonably necessary to process Customer Data for providing the services.

Cactus does not claim ownership of a customer’s underlying syndicated, retailer, commercial, financial, or operational data.

9. Data Retention

We retain information for as long as reasonably necessary to:

• Provide the services
• Maintain customer accounts
• Satisfy contractual commitments
• Meet legal, regulatory, accounting, and security requirements
• Resolve disputes and enforce agreements

Following termination, Customer Data will be deleted or returned in accordance with the applicable customer agreement, subject to legal obligations, backup cycles, security requirements, and agreed retention periods.

10. Data Security

We use administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure.

However, no system, transmission method, or storage environment can be guaranteed to be completely secure. Customers must also maintain appropriate access controls, endpoint security, passwords, user administration, and data-handling practices.

Additional information is available on our Security page.

11. Cookies and Similar Technologies

Our website and platform may use cookies or similar technologies to:

• Maintain user sessions
• Support authentication
• Remember preferences
• Monitor performance
• Understand website usage
• Improve security and functionality

Users may manage certain cookies through their browser settings. Disabling essential cookies may affect platform functionality.

12. Privacy Rights

Depending on the applicable law, individuals may have rights to:

• Request access to personal information
• Request correction of inaccurate information
• Request deletion of certain information
• Object to or restrict certain processing
• Request portability of eligible information
• Withdraw consent where processing relies on consent
• Submit a complaint to an appropriate data protection authority

Requests may be submitted to hello@cactusmi.com. We may need to verify the requester’s identity and authority before completing a request.

Where information is controlled by a Cactus customer, requests should normally be directed to that customer. We will support the customer as required under the applicable agreement and law.

13. Children’s Privacy

Cactus is intended for business and professional use and is not directed to children. We do not knowingly collect personal information from children through the platform.

14. Third-Party Data and Services

The platform may process data originating from third-party data providers, retailers, marketplaces, enterprise applications, and other customer-authorized systems.

Third-party data and services remain subject to their own licenses, agreements, privacy policies, and usage restrictions. Cactus is not responsible for the privacy or data practices of independent third parties.

15. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our services, legal requirements, or data practices.

The revised version will be published on our website with an updated “Last Updated” date. Material changes may also be communicated through the platform or by email.

16. Contact Us

For privacy questions or requests, contact:

Unleash IQ Solutions Private Limited Website: www.cactusmi.com Email: hello@cactusmi.com Jurisdiction: Sri Lanka