Privacy Policy
Draft for owner review — not legal advice. Items in [brackets] must be completed or confirmed by the owner before launch.
Last updated: [DATE]
This policy explains what personal data Article Artist (articleartist.com), operated by [OWNER: legal name, address] ("we"), collects and why.
What we collect
- Account data: email, name (optional), hashed password, language, plan and billing status.
- Your content: articles, URLs and text you submit, and the content generated from them; brand kits (colours, fonts, handle, logo) and photos you upload.
- Payments: handled by Stripe. We receive a customer ID, subscription status and amounts — never your full card number.
- Usage and security data: IP address (stored as a one-way hash for rate limits and anonymous trials), browser type, log entries and events such as "generation created" or "referral link copied".
- Share pages: if you make a carousel public, its content and a view counter are stored and shown publicly.
- Referrals: who invited whom and the rewards given.
Cookies
We only use cookies needed to run the service: a session cookie (login), a CSRF security token, your language preference, aa_trial (to attach a free trial to your account later; 30 days) and aa_ref (to credit the friend who invited you; 30 days). We don't use advertising cookies. [OWNER: update if you add analytics or ad pixels.]
Why we use it (legal bases)
To provide the service you asked for (contract); to keep it secure and prevent abuse such as fake accounts (legitimate interest); to send account and billing emails (contract); to send the weekly summary (legitimate interest — you can opt out anytime); and to meet legal obligations such as tax records.
Who we share it with
Service providers that process data for us: our hosting provider [OWNER: e.g. Hostinger]; OpenAI (or another AI provider configured by us) to generate content from the text you submit; Stripe for payments; our email delivery provider [OWNER: SMTP provider]. We don't sell your personal data. Under OpenAI's API terms, data sent through the API isn't used to train their models by default [OWNER: confirm for your provider and settings].
Some providers are located outside your country (for example in the United States); we rely on their contractual safeguards for international transfers.
How long we keep it
Account data and content: while your account is active, and deleted within [30] days after you ask us to delete the account [OWNER: confirm]. Anonymous trial results: [30] days unless claimed. Logs: up to [90] days. Billing records: as long as tax law requires.
Your rights
You can ask to access, correct, export or delete your data, or object to certain uses, by writing to [email protected]. In Argentina, the Agencia de Acceso a la Información Pública is the authority for Law 25.326; in the EU/UK you can complain to your local data protection authority.
Emails
You can turn off the weekly summary with the unsubscribe link in every summary, or in Billing → Email preferences. Account and billing emails are always sent.
Children
The service is not intended for children under 16 [OWNER: confirm age].
Security
Passwords are hashed, connections use HTTPS, and access to data is restricted. No system is perfectly secure; tell us at [email protected] if you find a vulnerability.
Changes
We'll post updates here and notify you of significant changes.