Privacy

Artistivo is operated by Artistivo GmbH (the “Controller”). When you use artistivo.com, the Controller decides how your personal data is processed.

Questions about this policy or your data? Email privacy@artistivo.com.

Account data: email address, display name, username, and password hash (managed by AWS Cognito; we never see plaintext passwords).

Profile content: anything you choose to publish — bio, location, avatar, artworks, albums, events.

Usage data: pages viewed, search queries, and interaction events that help us understand what works. Aggregated and de-identified where possible.

Technical data: IP address, browser type, device class — used for security, fraud prevention, and basic analytics.

To deliver the platform, authenticate you, surface relevant artists and works, send transactional notifications (e.g. password reset, event invites you opted into), and improve the product. We do not sell your personal data.

Legal bases under GDPR: contract (delivering the service), consent (analytics, marketing email), and legitimate interest (security, abuse prevention).

We use a small number of strictly-necessary cookies for authentication and session persistence. Analytics and marketing cookies require your explicit consent via our cookie banner (powered by CCM19).

You can revisit your choices any time via Cookie Settings in the footer.

Service providers (data processors) that help us run Artistivo: AWS (hosting, eu-central-1 region), AWS Cognito (authentication), Stripe (payments — only if you subscribe), Amazon SES (transactional email), and CCM19 (cookie consent).

All processors are contracted under GDPR-compliant Data Processing Agreements. Data remains in the EU unless explicitly stated otherwise.

You can at any time:

• access a copy of your personal data
• correct or update inaccurate information
• delete your account and all associated content
• export your content in a machine-readable format
• withdraw consent for any opt-in processing
• lodge a complaint with your supervisory authority

Most of the above is self-service from Account Settings. For everything else, write to privacy@artistivo.com and we’ll respond within 30 days.

Account data is kept while your account is active. After deletion, we retain anonymised usage logs for up to 12 months for security and analytics, then irreversibly delete them. Backups roll over within 30 days.

If we make material changes, we’ll notify you by email and update the “Last updated” date above. Continued use after the effective date means you accept the revised policy.