Privacy Policy

The controller of the personal data described here is Artmetria Ltd, a company registered in England and Wales under company number 17513488, whose registered office is at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom, which publishes Artmetria (see the Imprint). Before the company was incorporated in October 2026, Artmetria was published by its founder, Raphaël Nussi, now the company’s director, who was the controller until then.

For anything about your data — a question, a request, a complaint — write to privacy@artmetria.com.

• account and contact data (for example email address);
• authentication and session data;
• subscription and payment metadata (via Stripe);
• what you keep and follow in Eye, what you record in Market, and your readings — with the photograph a reading was made from, kept privately for you alone and never published;
• the questions you ask about a work, and the photographs you send to identify one. A photograph loses its metadata when it arrives — the camera, the time and any GPS location — before it is passed on or kept;
• product usage analytics and event logs;
• technical diagnostics and error telemetry;
• your aesthetic profile: the answers you give to the aesthetic primer and the reading Artmetria draws from them (see below).

What it is. The aesthetic primer is a short visual questionnaire. Your answers, and the reading Artmetria draws from them — a profile name, the contrasts you lean toward, artist directions — make up your aesthetic profile.

Without an account. You can take the primer without signing in. Your answers are then kept under a random identifier stored in a first-party cookie (am_starter_aid, one year), and linked to your account when you sign in. Answers never linked to an account are deleted twelve months after they were given.

What it is used for.

• In Eye, for you: to shape what Eye proposes and to explain why. This is the purpose of the primer, and it needs nothing more from you than taking it.
• Your public result link, if you share it: anyone with the link sees the reading, not your answers and not who you are. You can close the link from your profile at any time.
• Not in Market. Market does not use your aesthetic profile. Should that change, this policy will be updated first, and you can already refuse that use from your profile.
• By our support team, when you ask for help or exercise a right. A profile you have withdrawn is shown to them as withdrawn.

What it is never used for. Your aesthetic profile is never used for trend analysis or statistics about readers, never sold, and never used to infer your wealth, your profession or your capacity to buy.

Your rights over it. From your profile in Eye you can, at any time:

• see what Artmetria holds;
• withdraw your profile — Eye stops reading and showing it, and nothing is deleted;
• erase it entirely;
• take it with you, as a file;
• refuse its use by Market, and close your public result link.

You can also write to privacy@artmetria.com, including about answers given without an account.

Product analytics measure how the site and the products are used, so they can be improved. They run only if you accept analytics in the cookie notice; with « Essential only », no analytics identifier is stored on your device. You can change your choice at any time from the Cookie Policy, linked in every page footer.

• Events may include the page, the action, the referring page, the landing page and campaign (UTM) fields.
• With your consent, first-party identifiers am_aid (13 months) and am_sid (30 minutes) keep events from one visit together.
• A few events needed to run the service — a completed or cancelled payment, a sign-in — are recorded whatever your choice, without an analytics identifier.
• Newsletter analytics may include email_domain only, never a full address.

These providers process personal data on Artmetria's instructions, for the purpose named and no other:

• Vercel — hosting and serving the site;
• Supabase — database, file storage and sign-in;
• Anthropic — its models write Reading Room readings, answer the questions you ask in Eye and help identify a work from a photograph. The photograph or question you send is passed to it for that purpose only. Under its API terms, what Artmetria sends is not used to train its models;
• OpenAI — turns a search you type into a form that can be matched against works. Under its API terms, what is sent is not used to train its models;
• PostHog — product analytics, only with your consent;
• Sentry — error monitoring;
• Stripe — payments and subscriptions; and Link (Sold through Link, LLC, Stripe's affiliate), which sells Market subscriptions as merchant of record and processes your payment, tax and invoicing data as a controller, under its own privacy notice;
• Resend — sending email.

Your Eye data — your profile, what you keep, follow and read — is never used for targeted advertising, by us or by anyone else. We do not sell personal data.

• Your account, Eye, Market, your readings and questions — to provide the service you asked for. Basis: the contract between you and Artmetria (the Terms of Use, and the Terms of Sale for a subscription).
• Your aesthetic profile — to shape what Eye proposes, as described above. Basis: the contract; you can withdraw or erase it at any time.
• Market and Eye together — if you use both, Market's radar may read what you keep and the artists you follow in Eye, in the moment, to order the lots it shows you. Nothing is copied into Market. Basis: the contract.
• Payments and invoices — to take payment and keep accounting records. Basis: the contract, and legal obligations.
• Emails you asked for (newsletter, Signals) — basis: your consent, which every email lets you withdraw. Service emails (sign-in codes, payment confirmations) — basis: the contract.
• Analytics — basis: your consent.
• Security, error monitoring, preventing abuse — basis: Artmetria's legitimate interest in a service that works and is safe.

No decision with legal or similarly significant effect on you is made by automated means alone.

Several providers above are based in the United States, and personal data may be processed there. Where the recipient is certified under the UK Extension to the EU–US Data Privacy Framework, the transfer relies on the UK's adequacy regulations for the United States; otherwise, on the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. For readers in the European Union, the equivalent EU mechanisms apply. You can ask for a copy of the safeguards at privacy@artmetria.com.

• your account and what it holds — readings and their photographs, what you keep and record: for as long as the account exists. When it is deleted, they are deleted;
• primer answers never linked to an account: twelve months (see above);
• payment, subscription and invoice records, and the record of what you agreed to at payment: six years after the end of the financial year they belong to, as UK tax rules require;
• analytics events: at most 25 months;
• error and diagnostic data: a limited period, for security and reliability.

You can ask to access your data, to correct it, to erase it, to restrict or object to its use, and to receive it in a portable form. Where processing rests on your consent, you can withdraw it at any time, without affecting what was done before. Write to privacy@artmetria.com; we answer within one month.

Your profile can also be withdrawn, erased or downloaded from Eye itself, and your account deleted from the app.

If you are unhappy with how your data is handled, tell us first at privacy@artmetria.com. We acknowledge a complaint within 30 days, look into it, keep you informed, and tell you the outcome.

You can also complain to the Information Commissioner's Office, the UK supervisory authority — ico.org.uk/make-a-complaint. If you live in the European Union, you can complain to the authority of your country; in France, the CNIL — www.cnil.fr.

The same rights everywhere. Whatever your country, you can ask us to confirm whether we hold data about you, give you a copy in a portable form, correct it, delete it, restrict or object to its use, and withdraw a consent. It is free, we answer within one month, and using a right never changes how we treat you. If we refuse a request, we say why and how to appeal: reply to our answer and the request is looked at again.

No sale, no targeted advertising. We do not sell or share personal information, as United States state laws define those words, and we do not use it for targeted advertising or for profiling with legal or similar effects. We honour Global Privacy Control: when your browser sends it, optional analytics stay off.

United States. Residents of California, Colorado, Connecticut, Texas, Virginia and the other states with a privacy law have the rights above. If your appeal is refused, you can contact your state's Attorney General. We do not collect sensitive data such as precise location: it is removed from photographs on arrival.

Brazil. Our data protection officer (encarregado) is Raphaël Nussi, privacy@artmetria.com. You have the rights of article 18 of the LGPD and can complain to the ANPD.

Canada and Québec. The person in charge of the protection of personal information is Raphaël Nussi, founder, privacy@artmetria.com.

Your authority. Besides the ICO, you can complain to the data protection authority where you live — for example your EU supervisory authority, the OAIC in Australia, the Office of the Privacy Commissioner in Canada, or the Commission d'accès à l'information in Québec.

Artmetria is for people aged 16 and over, and 18 and over in the United States. It is not directed to children. We do not knowingly collect data from anyone younger; if you believe we have, write to privacy@artmetria.com and it is deleted.

We apply technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction: encrypted connections, access limited to what each role needs, and photographs stored privately.

This policy changes when the products or the law do. The date at the top is the date of the current version; a change that affects how your data is used is announced before it applies.