Privacy Policy

Last updated 2026-05-11 · effective 2026-05-11

Draft. The principles here reflect how we plan to operate, but specific retention windows, legal-mechanism citations, and timing commitments will be finalized by counsel before launch.

1. What we collect

We collect the minimum data needed to operate ArtistAlly:

Data	When	Why
Email	Signup	Account login + critical alerts
Profile content	You enter it	Public display + AI matching
Search queries	You search	Improve match quality, abuse detection
IP & user-agent	Every request	Security, rate limiting, ad serving
Ad interactions	You see/click ads	Google AdSense billing & analytics

2. How we use it

We use your data to operate the Service: authenticate you, match patrons with creators, prevent abuse, and serve ads that pay for AI costs. We never sell your data.

3. Third parties we share with

Supabase: database hosting + authentication
OpenAI: embedding generation (anonymized query text)
Anthropic: search rerank (anonymized query + candidate creator metadata)
Cloudflare: DNS, Turnstile bot check, NSFW image classification
Google AdSense: ad serving + analytics
Railway: application hosting

4. Cookies & tracking

We use first-party cookies for session authentication and CSRF tokens. Google AdSense uses third-party cookies for ad personalization unless you opt out via the consent banner.

5. Your rights

We recognize the privacy rights granted by applicable law in your jurisdiction. To exercise any of them, contact us through the contact form or use Dashboard → Account settings to delete your account directly.

6. Data retention & deletion

You can delete your account at any time from Dashboard → Account settings. When you do, we remove your data from our active systems. Database backups follow our infrastructure provider's retention policy.

7. Children

ArtistAlly is not directed at users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will investigate and reserve the right to delete the account.

8. International data transfers

Your data may be stored or processed in the United States. Mechanisms for lawful transfers from the EEA/UK/Switzerland will be detailed in the final policy reviewed by counsel.

9. Changes

We may update this policy. We will notify registered users of material changes by email before they take effect.

10. Contact

Privacy questions: send a message via the contact formand pick “Account / billing” as the subject.