Privacy Policy

Artiroom (“we,” “us,” or “our”) is an AI creative studio operated from Colombia and available at www.artiroom.com. We act as the data controller for the personal data described in this policy. For any privacy question or request, contact privacy@artiroom.com.

• Account data — your email address and authentication identifiers, managed by our identity provider, Clerk.
• Content you provide — the prompts, text, photos, and reference images you upload, and the images, animations, and videos you generate.
• Usage and credit records — the actions you take, credits consumed and refunded, plan and subscription status.
• Payment metadata — billing and subscription information processed by Lemon Squeezy. We do not store full card numbers.
• Diagnostics and feedback — error reports, performance data, and any feedback you send us.

• to provide, operate, and secure the service;
• to generate your outputs by transmitting your inputs to the AI providers that power each feature;
• to process payments, credits, and subscriptions;
• to diagnose problems, prevent abuse, and improve the product; and
• to communicate with you about your account, transactions, and support requests.

Our legal bases include performance of our contract with you, your consent (where required), our legitimate interests in operating and securing the service, and compliance with legal obligations.

We rely on the following service providers to operate Artiroom. Each receives only the data needed for its function and is bound to use it solely on our behalf:

• Clerk — authentication and account management (email, login identifiers, sessions).
• Supabase — primary database storing your profile, projects, and usage records.
• Cloudflare R2 — object storage for generated images, videos, and uploaded reference media.
• Google (Gemini & Veo) — AI image generation, scene planning, and video generation.
• fal.ai — AI image-to-video generation.
• Replicate — additional AI model access.
• Lemon Squeezy — merchant of record for payments, subscriptions, and tax handling.
• Firecrawl — extracts listing photos from property URLs you submit to the real-estate tools.
• Resend — delivery of transactional and feedback emails.
• Sentry — error monitoring and performance diagnostics (a sampled portion of sessions), with tokens, authorization headers, and cookies redacted.
• Google Analytics & Ahrefs Web Analytics — aggregate website usage and traffic measurement.

We may also disclose data when required by law, to enforce our terms, or in connection with a business transfer.

We use a small number of cookies and similar technologies for authentication, analytics (Google Analytics and Ahrefs), and error diagnostics (Sentry, including limited session replay sampling). If you arrive through an affiliate link, Lemon Squeezy sets a tracking cookie that lasts up to 60 days to attribute referrals. You can control cookies through your browser settings; disabling some cookies may affect functionality such as staying signed in.

We retain your data for as long as your account is active and as needed to provide the service. You can delete your account from your settings or request deletion by emailing privacy@artiroom.com. We will delete or anonymize your personal data following a verified request, except where we must retain certain records for legal, accounting, or fraud-prevention purposes.

We use industry-standard measures — including encryption in transit, access controls, and scoped service credentials — to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Artiroom is operated from Colombia and uses providers located in various countries, including the United States and the European Union. When we transfer personal data across borders, we rely on appropriate safeguards such as standard contractual clauses and the providers’ own compliance frameworks.

European Union / EEA & UK (GDPR)

You have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.

California (CCPA/CPRA)

You have the right to know what personal information we collect, to request its deletion or correction, and to opt out of the “sale” or sharing of personal information. We do not sell or share your personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.

Colombia (Ley 1581 — Habeas Data)

You have the right to know, update, and rectify your personal data, to request proof of the authorization granted, to be informed of how your data is used, to revoke authorization, and to access your data free of charge.

To exercise any of these rights, contact privacy@artiroom.com. We will respond within the timeframes required by applicable law.

Artiroom is not directed to children. You must be at least 18 years old to use the service, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us so we can remove it.

We may update this policy from time to time; material changes will be reflected by updating the “Last updated” date above. Questions or requests can be sent to privacy@artiroom.com.