Privacy Policy

1. Data Controller

The controller of your personal data is Mingle Minds s.r.o., Company ID: 21890749, registered in the Czech Republic ("we", "us", "our"). We are committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and other applicable data protection legislation. This Privacy Policy explains what data we collect, how we use it, and what your rights are.

2. Data We Collect

In connection with providing the Artima AI platform, we collect the following categories of personal data:

• •Account data — name, email address, password (hashed), company name, role, country, and timezone
• •Social media data — profile information, access tokens for publishing, profile pictures, and usernames
• •AI & content data — posts, scheduled content, uploaded media, AI-generated content and images, brand voice settings, and AI prompts
• •Usage data — app interactions, device information, IP address, and analytics data
• •Payment data — payments are processed by Stripe; we store billing address and plan information. Card details are held exclusively by Stripe.
• •Communication data — support tickets, email correspondence

3. AI Data Processing

The Artima AI platform uses third-party artificial intelligence services for content generation. We inform you of the following regarding this processing:

• •Text and prompts are sent to OpenAI and Anthropic for the purpose of content generation.
• •We contractually instruct AI providers NOT to use your data for training their models.
• •Brand voice configuration is stored on our infrastructure and is not shared with AI providers.
• •AI providers receive only the minimum data necessary to process each request.
• •Generated content is stored in your account until you delete it.

4. How We Use Your Data

We process your personal data for the following purposes:

• •Providing and operating the Artima AI platform
• •Managing and publishing content on social media on your behalf
• •Generating content using artificial intelligence based on your instructions
• •Scheduling and automatically publishing posts
• •Providing analytics and content performance insights
• •Communicating about your account, updates, and customer support
• •Fulfilling legal obligations under applicable legislation

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

• •Contract performance — processing necessary for providing the Service, managing your account, and processing payments
• •Legitimate interests — improving our services, analytics, platform security, and fraud prevention
• •Consent — where processing relies on your explicit consent (e.g., marketing communications, optional cookies)
• •Legal obligation — processing required by applicable law, including tax and accounting regulations

6. Third-Party Services

Your data may be shared with the following third parties to the extent necessary for providing the Service:

• •Social media platforms (via Ayrshare) — for publishing content and managing accounts
• •OpenAI and Anthropic — for AI-powered content generation
• •Stripe — for payment processing and subscription management
• •Vercel — for web application hosting and delivery
• •Supabase — for data storage and user authentication
• •Google Analytics — for website traffic and usage analytics

All third-party providers are bound by data processing agreements (DPAs) that ensure an appropriate level of protection for your data.

7. Data Retention

We retain your personal data only for as long as necessary for the given purpose:

• •Account data — for the duration of your account plus 30 days after deletion
• •Content and media — until you delete it or close your account
• •Analytics data — 14 months
• •Payment records — 10 years as required by Czech tax law
• •Communication records — 24 months

8. Your Rights Under GDPR

In accordance with GDPR, you have the following rights regarding your personal data:

• •Right of access — you have the right to obtain information about what data we process about you
• •Right to rectification — you have the right to request correction of inaccurate or incomplete data
• •Right to erasure — you have the right to request deletion of your personal data
• •Right to restriction of processing — you have the right to request restriction of processing of your data
• •Right to data portability — you have the right to receive your data in a structured, machine-readable format
• •Right to object — you have the right to object to processing based on legitimate interests
• •Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
• •Right regarding automated decision-making — you have the right not to be subject to a decision based solely on automated processing

To exercise your rights, contact us at privacy@artima.ai. We will respond to your request within 30 days. If you believe your rights have not been respected, you have the right to lodge a complaint with the Office for Personal Data Protection (UOOU, www.uoou.cz).

9. Data Security

We implement the following technical and organizational measures to protect your personal data:

• •Encryption of data in transit (TLS) and at rest
• •Secure authentication and access management
• •Regular security audits and vulnerability assessments
• •Access controls based on the principle of least privilege
• •Incident response procedures and data breach notification processes

10. International Data Transfers

Your personal data may be transferred and processed outside the European Economic Area (EEA), in particular to US-based AI service providers. For these transfers, we ensure appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission and adequacy decisions where available.

11. Cookies

Our website uses cookies and similar technologies to ensure proper functionality, analytics, and personalization. For detailed information about cookie types, their purposes, and your options, please refer to our Cookie Policy at /cookies.

12. Children's Privacy

The Artima AI platform is not intended for persons under 16 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data without parental or guardian consent, please contact us at privacy@artima.ai and we will promptly delete such data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notification. We recommend that you review this policy regularly. The current version is always available on this page.

14. Contact

For questions regarding the protection of your personal data, please contact us:

• •Mingle Minds s.r.o., Company ID: 21890749
• •Email: privacy@artima.ai
• •Support: support@artima.ai
• •Phone: +420 605 375 252

If you believe your data protection rights have not been respected, you have the right to lodge a complaint with the Office for Personal Data Protection (UOOU, www.uoou.cz).