Privacy policy

How Artivale uses personal data and supports your rights.

Version 1.2 · 2026-10-07

Service operator

Legal name: Sole proprietor Egor Bykov
Address: 35 Mashtotsi Street, Arinj, Armenia
Country of registration: Armenia
Contact email: hello@artivale.one

1. Data

Data may include email, names, profile photo, language, theme, currency, activity description, pricing settings, inventory and order records, events, participants, files and prompts. Plan information, terms acceptance, consent records and request data necessary for security may also be processed. Do not upload sensitive categories without a lawful basis.

2. Purposes and legal grounds

Data supports registration, email verification, requested features, file storage, calculations, support, security and legal obligations. Grounds depend on the purpose: contract performance, legal obligations or separate consent where required. Consent to public disclosure is distinct from ordinary processing consent.

3. Providers and transfers

Purchases through Paddle are handled by Paddle as an independent Merchant of Record under its privacy policy: https://www.paddle.com/legal/privacy. Artivale stores transaction and subscription identifiers, payment status, access periods and refund records; full card details are handled by Paddle, not stored by Artivale. Requested AI features send data through OpenRouter to providers serving supported Google Gemini models. AI column mapping sends destination fields and column headings, not spreadsheet rows. Content generation can send your instruction, idea or draft, activity description, up to ten recent product titles and up to two earlier AI exchanges. Developing an idea can also send your product description and up to three selected photographs. Photos are resized and stripped of metadata and are not retained as uploaded files by Artivale; this does not determine external providers’ retention. Saved drafts, instructions and generated answers remain in your workspace history. Do not submit third-party personal data without a lawful basis. Hosting, storage and email providers support account operation; contact the operator for information about their processing locations and safeguards for international transfers.

4. Retention and security

Workspace records and stored files are retained to provide your account and requested features. You may request deletion using the operator contact below. Payment, security and consent records may be retained where necessary for legal obligations and disputes. Deletion from active storage and removal from backups are separate processes; contact the operator for the applicable retention and backup removal schedule. No immediate removal from all backups or external AI systems is promised. Access controls and authentication protect access; absolute security cannot be guaranteed.

5. Rights and requests

Where applicable, you may request access, correction, deletion, restriction or portability, object to processing and withdraw consent. Contact the operator; identity checks may protect your account. Requests are answered within applicable legal time limits. You may complain to the competent supervisory authority.

6. Browser settings

The service stores tokens and preferences necessary for login, language and theme. This policy does not grant permission for advertising or optional analytics technologies; those require separate disclosure and user choice where required.

7. Optional analytics

When enabled, the international edition uses PostHog (EU or US region configured on the server); the Russian edition uses Yandex Metrica. Analytics starts only after a separate user choice. Refusing does not restrict the service; the choice can be changed in Analytics settings. We collect section visits, traffic sources and campaign tags, interface actions, activity category, plan and confirmed payments. The provider may process IP addresses and device information for statistics and approximate geography. Browser identifiers and a pseudonymous account identifier link visits. Session recordings, form contents, post text, conversations and customer records are not included in analytics events. Accepting this policy does not enable analytics. Statistics retention is configured in the provider project; contact the operator for these settings, processing and deletion information.