Privacy Policy

Privacy Policy (English)

Ben Aharonson, operating Artie22("we", "us", "our"), is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR), the Israeli Privacy Protection Law (as amended), and other applicable data protection laws. This Privacy Policy explains what data we collect, why we collect it, and your rights regarding that data.

1. Data Controller

The data controller responsible for your personal data is Ben Aharonson, Kibbutz Naan, Israel. For questions about data processing or to exercise your rights, contact us at: archie.support@autotailorai.com.

Where the Service surfaces data about people who message, comment on, review, or otherwise interact with your connected business accounts, you (not us) act as the data controller for that data, and we process it on your behalf. Your own privacy notice to those individuals is your responsibility.

2. Data We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Profile avatar (if uploaded)
• Authentication credentials (managed securely via Supabase)

2.2 Content, Prompts, and Brand Data

When you use our service, we process:

• Creative prompts, briefs, and brand assets you submit
• AI-generated content, ad creative, and copy
• Project, campaign, and business configuration data

2.3 Connected Account and Business Data

When you connect a social media, advertising, messaging, or business account (via our connector processor, Zernio), we access and process, to the extent you authorize:

• Access tokens for the connected accounts (never your platform password)
• Posts, comments, direct messages, and reviews on those accounts
• Advertising account data, campaign performance, and conversion data
• Leads and contacts synced to your connected CRM
• WhatsApp messages exchanged with the Service

2.4 Payment Data

Purchases are handled by our payment processor. We do not store full card numbers; we retain purchase, plan, and billing history needed for invoicing and support.

2.5 Usage Data

We automatically collect:

• Pages visited and features used
• Timestamps of actions
• Browser type and device information
• IP address

2.6 Notification Preferences

If you configure email or WhatsApp notifications, we store the preferences and contact details you provide.

3. Legal Basis for Processing

We process your personal data under the following legal bases (GDPR Article 6):

• Contract performance — Providing the Artie22 service, including account management, content generation, campaign execution, and project management.
• Legitimate interest — Analytics and service improvement, fraud prevention, and platform security.
• Consent — Optional notifications, marketing communications, and cookies beyond essential ones. You may withdraw consent at any time.

4. How We Use Your Data

• Providing and operating the Artie22 service
• Processing your prompts through AI providers to generate creative content
• Publishing and managing content and ad campaigns you approve, on your connected accounts
• Sending notifications about workflow, campaign, and billing status
• Improving our service quality and user experience
• Ensuring security and preventing abuse

5. Third-Party Processors

We share data with the following third-party processors, each bound by data processing agreements:

6. Data Retention

• Account data — Retained while your account is active. Deleted within 30 days of account deletion request.
• Content and projects — Retained while your account is active. You may delete individual projects at any time.
• Connected-account data — Retained while the account remains connected, and deleted or anonymized within 30 days of disconnection, except where retention is needed for billing, legal, or dispute-resolution purposes.
• Usage logs — Retained for up to 12 months for analytics and security purposes.
• AI processing traces — Prompts and outputs are retained in our tracing system (Langfuse) for quality monitoring and debugging for up to 12 months, then deleted or anonymized.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access (Article 15) — Request a copy of all personal data we hold about you.
• Right to rectification (Article 16) — Request correction of inaccurate or incomplete data.
• Right to erasure(Article 17) — Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing (Article 18) — Request that we limit how we use your data.
• Right to data portability (Article 20) — Receive your data in a structured, machine-readable format.
• Right to object (Article 21) — Object to processing based on legitimate interest.
• Right to withdraw consent (Article 7) — Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, email us at archie.support@autotailorai.com. We will respond within 30 days.

8. Cookies

We use the following types of cookies:

• Essential cookies — Required for authentication and core functionality. These cannot be disabled.
• Analytics cookies — Help us understand how the service is used. You may opt out via your browser settings or our cookie preferences.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA) and outside Israel. When this occurs, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.

11. Children's Privacy

Artie22 is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it promptly.

12. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu. In Israel, complaints may be directed to the Privacy Protection Authority (הרשות להגנת הפרטיות).

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice in the application. Continued use of the service after changes constitutes acceptance of the updated policy.

Disclaimer: Nothing in this content constitutes professional legal advice. We recommend consulting an attorney to verify suitability for your business.