Privacy Policy
Last updated: April 9, 2026
1. Introduction
iArt AI ("we", "us", or "our") operates iArt.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.iart.ai) and use our application (app.iart.ai).
2. Information We Collect
2.1 Information You Provide
- Account information: email address, name, and password when you register
- Payment information: billing details processed through our payment provider (Airwallex). We do not store your full payment card details.
- User content: text prompts, images, audio, and other files you upload to create motion graphics
- Communications: messages you send to us via email or support channels
2.2 Information Collected Automatically
- Usage data: pages visited, features used, actions taken within the application
- Device information: browser type, operating system, screen resolution
- Log data: IP address, access times, referring URLs
3. Cookies and Tracking Technologies
We use the following cookies and tracking technologies:
| Technology | Purpose | Type |
|---|---|---|
| Supabase Auth | Authentication session management | Essential (required for login) |
| Vercel Analytics | Anonymous page view statistics | Analytics (no cookie, privacy-friendly) |
| Google Analytics 4 | Website traffic analysis and SEO measurement | Analytics |
| Mixpanel | Product usage analytics and conversion funnels | Analytics |
4. How We Use Your Information
- To provide, maintain, and improve the Service
- To process your transactions and manage your subscription
- To send service-related communications (account verification, password resets)
- To analyze usage patterns and optimize the user experience
- To detect, prevent, and address technical issues and abuse
- To comply with legal obligations
5. How We Share Your Information
We do not sell your personal information. We may share your information with:
- Service providers: hosting (Vercel), database (Supabase, MongoDB Atlas), payment processing (Airwallex), email delivery, and analytics providers listed above
- Legal requirements: when required by law, court order, or governmental request
- Business transfers: in connection with a merger, acquisition, or sale of assets
6. Data Retention
We retain your account information as long as your account is active. User-created content is retained until you delete it or your account is terminated. Analytics data is retained according to each provider's retention policy (typically 12-24 months). You may request deletion of your data at any time.
7. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), secure authentication, and access controls. However, no method of electronic transmission or storage is 100% secure.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Object to or restrict processing of your data
- Data portability (receive your data in a structured format)
- Withdraw consent for non-essential data processing at any time
To exercise these rights, contact us at contact@iart.ai.
9. International Data Transfers
Your data may be processed in countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place for such transfers.
10. Children's Privacy
The Service is not intended for children under 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.
12. Contact
For questions or concerns about this Privacy Policy, contact us at contact@iart.ai.