Privacy Policy

Artmetria acts as the data controller for core platform operations. For privacy requests, contact privacy@artmetria.com.

• account and contact data (for example email address);
• authentication and session data;
• subscription and payment metadata (via Stripe);
• product usage analytics and event logs;
• technical diagnostics and error telemetry.

Analytics is used to understand product usage and improve the service. Some analytics may rely on first-party identifiers and session cookies.

• Internal event tracking may include page path, event context, referrer, landing_path, and UTM attribution fields.
• We may use first-party anonymous and session identifiers such as am_aid and am_sid to keep event continuity.
• Newsletter analytics may include email_domain only. We do not send full email addresses in analytics payloads for that purpose.

We use selected processors to operate the platform, including:

• Supabase for database and authentication services;
• PostHog for product analytics (subject to your analytics preference);
• Sentry for error monitoring and application reliability;
• Stripe for payments and subscription checkout;
• Resend for transactional or newsletter email delivery;
• AI providers (including OpenAI when relevant) for AI-powered features.

We process personal data to provide the service, secure the platform, support users, operate subscriptions, send requested communications, improve product quality, and comply with legal obligations.

Depending on the context, processing is based on contract performance, legitimate interests, consent (for optional analytics where applicable), and legal obligations.

We may share data with trusted processors that help us run the platform. We use contractual and technical safeguards appropriate to the service context.

Some of these providers are located outside the European Union, including the United States. Where personal data is transferred outside the EU, we rely on appropriate legal safeguards such as Standard Contractual Clauses or equivalent mechanisms.

We do not sell personal data.

We retain personal data only as long as necessary for the purposes described in this policy. Retention periods depend on the type of data and the reason it is processed:

• account and contact data: kept for the duration of the account, then deleted or anonymised after closure;
• subscription and payment metadata: kept for the period required by applicable accounting and tax obligations;
• analytics and event logs: kept for a limited period, then aggregated or deleted;
• error and diagnostic telemetry: kept for a limited period for security and reliability purposes.

We may retain data for longer where necessary to meet legal, security, and compliance obligations.

You can contact us to request access, correction, or deletion of your personal data. Depending on applicable law, you may also request restriction, objection, or portability.

You also have the right to lodge a complaint with a data protection supervisory authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés), www.cnil.fr.

Send privacy requests to privacy@artmetria.com.

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.

We may update this policy to reflect legal, operational, or product changes. The latest published version applies.