Privacy Policy

1. Data Controller

A11STUDIO ("we", "us", "our") is the data controller responsible for your personal data. Our full identification and address are in the Legal Notice. For any privacy-related inquiries, contact us at <email/>.

2. Information We Collect

We collect different categories of information depending on how you use the platform:

• Account information — basic profile details you provide when registering and setting up your account, such as your name, email, and any optional profile content you choose to add
• Location data — if you choose to add an address to your profile, we store the information necessary to display your location publicly
• Content you create — media files, portfolios, services, projects, and any associated descriptions or metadata you provide through the platform
• Business data — if you use client and project management features, we store the relevant contact and project information you enter
• Messages — when visitors contact an artist through the platform, we collect the information included in the contact form
• Security data — technical information related to sign-in activity and device identification, used to protect your account

3. Payment Data

Subscription payments are processed entirely by third-party providers. We store only the references necessary to manage your subscription and billing history. We do not store credit card numbers, bank account details, or other raw payment credentials — these are handled by the payment processor under their own privacy policies.

4. AI Processing

A11STUDIO uses artificial intelligence to power features such as content suggestions and automated content moderation. We track usage to manage your AI credit allocation. AI processing is performed by third-party providers, and only the minimum data necessary is sent for processing.

Every upload is checked automatically before it is published. Content flagged as breaking our policies is blocked and can add a strike to your account, and repeated strikes lead to a temporary or permanent ban. You can ask a person to review any of these decisions by writing to <email/>.

5. How We Use Your Data

• Providing and operating the portfolio platform
• Authenticating your identity and securing your account
• Processing subscription payments and managing billing
• Delivering AI-assisted features
• Enforcing content policies through automated moderation
• Sending transactional emails and notifications
• Displaying your public artist profile and content
• Delivering contact form messages between visitors and artists
• Measuring how the platform is used through aggregated statistics (only with your consent)

Legal bases: we process your account, portfolio, billing and contact data to perform our contract with you (GDPR art. 6.1.b); invoices to comply with tax law (art. 6.1.c); security logs, fraud prevention, automated moderation and service emails on our legitimate interest in a safe, working platform (art. 6.1.f); and analytics only with your consent (art. 6.1.a).

6. Data Sharing

We do not sell your personal data. We share data only with the following third-party services as necessary to operate the platform:

• Stripe & PayPal — for payment processing and subscription management
• OpenAI — for content generation and media moderation
• Resend — for transactional emails (verification, password recovery, notifications)
• Cloud hosting and storage providers — to run the platform and store your files
• Google Analytics (Google Ireland Limited) — for aggregated usage statistics, only if you accept analytics cookies. The legal basis is your consent, which you can withdraw at any time from “Cookie settings” in the footer

Some of these providers (OpenAI, Resend, Google) are based in the United States. Those transfers rely on the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

7. Data Retention

We retain your personal data for as long as your account is active. Security logs are kept for up to 30 days, and invoices and payment records for the periods required by tax and commercial law (up to 6 years). Contact-form messages are kept until the recipient deletes them or their account is deleted, and content reports for as long as needed to handle them and defend any related claim. When you delete your account, it is hidden immediately and permanently deleted 15 days later (the grace period lets you change your mind), together with your media and associated content, except payment records we must keep by law. A deactivated account keeps its data, hidden from the public, until you reactivate or delete it.

8. Your Rights

You have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your personal data
• Data portability — receive your data in a structured, machine-readable format
• Restriction — request that we limit processing of your data
• Objection — object to processing based on legitimate interests
• Withdraw consent — where we rely on your consent (analytics cookies), you can withdraw it at any time

To exercise any of these rights, contact us at <email/>. We answer within one month. You can also delete your account yourself in Settings.

If you think we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or the authority of your country.

9. Security

We implement industry-standard security measures to protect your data, including encryption, secure authentication, and access controls. While no system is completely immune to breaches, we take reasonable steps to safeguard your information.

10. Cookies

We use cookies for essential platform functionality and, only if you accept them, for analytics. For full details, see our Cookie Policy.

11. Changes to This Policy

We may update this policy from time to time. Changes are posted on this page with an updated revision date, and we will tell you about material changes by email or in the app before they apply.

12. Contact

For questions or concerns about this privacy policy or your personal data, contact us at <email/>.