Privacy Policy
Last updated on October 11, 2026
This privacy notice for Art2App Ltd ('Art2App', 'Company', 'we', 'us', or 'our'), describes how and why we might collect, store, use, and/or share ("process") your information when you use our website https://www.art2app.com (the "Site"), our mobile applications, and related services (collectively, the "Services"). Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, contact us at contact@art2app.com. This document applies to all Art2App solutions, such as Art2App Collection Manager and Art2App Artist Studio.
Summary of Key Points
This summary provides key points from our privacy notice, but you can find more details below.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on your interaction with Art2App and the Services, your choices, and the features you use. Learn more about personal information you disclose.
Do we access sensitive personal information? No. Financial data or private documents you upload are stored encrypted and used only to provide the Services. We do not access the contents of documents you upload except where necessary to provide the Services or where required by law.
Do we receive information from third parties? Yes, from analytics providers and payment processors. Learn more about information from other sources.
How do we process your information? To provide/improve Services, communicate with you, ensure security, and comply with law. Learn more about how we process your information.
When do we share personal information? We may share personal information with trusted service providers, for legal compliance, and in connection with business transfers. Where we process personal data on behalf of customers, additional information about subprocessors and related safeguards is set out in our Data Processing Agreement. Learn more about when we share your information.
What are your rights? Access, correction, deletion, objection rights depending on your location. Learn more about your privacy rights.
How long do we keep your data? During active subscription + 30 days post-cancellation. Learn more about data retention.
1. What Information Do We Collect?
Personal Information You Provide
In Short: We collect personal information you voluntarily provide.
We collect:
- Account Data: name, email address, password when you register
- Payment Data: billing details processed by Revolut (we don't store full card numbers)
- Communications: support requests, feedback, survey responses
- Collection Data: Collection information you upload (stored encrypted; used to provide the Services and as described in section 2)
Sensitive Information: We do not access special category personal data (racial/ethnic origin, political opinions, religious beliefs, health, biometrics, criminal background). Documents you upload remain encrypted and are not available to other customers; we access them only where necessary to provide the Services or where required by law.
Information Automatically Collected
In Short: Some information is collected automatically.
We collect:
- Device information (IP address, browser type, OS, screen resolution)
- Usage data (pages visited, time spent, features used)
- Cookies and tracking technologies (see Section 4)
This data maintains Service quality, security, and operation.
2. How Do We Process Your Information?
In Short: We process data for legitimate business purposes under applicable law.
Processing Purposes & Lawful Basis:
| Purpose | Examples | Lawful Basis |
|---|---|---|
| Service Delivery | Account management, payments, feature access | Contract performance |
| AI assistance | Suggestions and image enhancement you request | Contract performance (Art. 6(1)(b)) |
| Improving our services and AI | Anonymised data; content you choose to contribute | Legitimate interests (anonymisation) / Consent (contributed content) |
| Communications | Billing, security alerts, support | Contract/Legitimate interests |
| Security | Prevent fraud, unauthorized access | Legitimate interests |
| Service Improvement | Analytics (pseudonymized data only) | Legitimate interests |
| Legal Compliance | Tax records, regulatory requests | Legal obligation |
| Marketing | Newsletter (opt-out available) | Consent/Legitimate interests |
Where we process personal data on behalf of customers as a processor, the corresponding contractual processing terms are described in our Data Processing Agreement.
Where we use content you have chosen to contribute to improve our own AI features, we do so only with your consent, through a setting that you can switch off at any time. Before any use we remove direct identifiers of individuals and any contact, payment or financial data. We will never use your artworks or other content to train models that create or imitate art; our AI is limited to helping you manage your data.
3. When Do We Share Your Information?
In Short: Only with trusted service providers and when legally required.
-
Service Providers: We may share personal information with trusted providers who support the operation of our Services, such as payment processing providers, cloud hosting and infrastructure providers, notification delivery providers for optional app notifications, and website analytics providers. Where Art2App processes personal data on behalf of customers, further details about relevant subprocessors and associated safeguards are provided in our Data Processing Agreement. This includes providers of the optional AI features you choose to use, such as Amazon Web Services.
-
Business Transfers: During mergers, acquisitions, or asset sales
-
Legal Requirements: Court orders, regulatory requests, law enforcement
4. Cookies & Tracking Technologies
We use:
- Google Analytics: Website usage analytics (pseudonymized). Privacy Policy
- Microsoft Clarity: User behavior heatmaps (sensitive data auto-masked). Privacy Policy
Manage cookies via browser settings. Essential cookies required for site functionality cannot be rejected.
5. International Data Transfers
Servers are primarily located in the United Kingdom. In some cases, specific services may be provided from the EEA or other jurisdictions where appropriate for service availability or functionality. Where personal data is transferred internationally, we apply appropriate safeguards as required by applicable law. Additional information is available in our Data Processing Agreement where it applies. AI image enhancement, which only runs when you choose to use it, may be processed in the United States, with appropriate safeguards.
6. Data Retention
Retention Periods:
- Active accounts: Duration of subscription
- Canceled accounts: 30 days (account recovery), then permanent deletion
- Free trial: 3 months post-trial if not upgraded
- Legal holds: As required by law (typically 8 years for accounting records)
- AI requests: content you submit to an AI feature is used to produce the result you requested and is not kept by Art2App other than in the records you choose to save; we only keep usage records (date and type of feature).
7. Children's Privacy
Our Services are not directed to children under 18. By using the Services, you represent that you are at least 18 years old or that you are the parent or legal guardian of such minor and consent to such minor's use of the Services. If you become aware of any data we may have collected from children under 18 years of age, please contact us at contact@art2app.com.
8. Your Privacy Rights
Global Rights
- Access, correct, delete your personal data
- Withdraw consent (doesn't affect prior processing)
- Object to processing for direct marketing
EEA/UK Rights (GDPR/UK GDPR)
Access, rectification, erasure, restriction, data portability, object. Contact supervisory authority if unsatisfied.
California Rights (CCPA/CPRA)
Right to know, delete, opt-out of sale/sharing. No sales occur. Submit verifiable requests to contact@art2app.com.
Exercise Rights: Email contact@art2app.com with account email. Response within 45 days (extendable 45 days).
9. Do-Not-Track
Browsers may send DNT signals. We do not currently respond but honor cookie preferences.
10. California Privacy Rights
California residents: Annual "Shine the Light" request rights. Under 18: Request removal of public posts. Email contact@art2app.com.
11. Updates to This Notice
We may update this Privacy Notice from time to time. The “Last updated” date indicates when it was most recently revised. Where required by law, we will notify you of material changes.
12. Contact Us
Art2App Ltd
12 Barker Close
Richmond TW9 4ET
United Kingdom
Email: contact@art2app.com
13. Data Subject Requests
Submit access/correction/deletion requests to contact@art2app.com. Provide account email and request details. Free of charge (unless manifestly unfounded).