Effective Date: June 2026
At Artificall, we provide financial information and analysis tools, including the Artificall chatbot, an AI-assisted service covering publicly traded financial instruments such as stocks, ETFs, and mutual funds. We treat your data with the same precision we apply to our software engineering and financial models.
This Privacy Policy outlines how we collect, use, and safeguard your information in compliance with the EU General Data Protection Regulation (GDPR) and United States privacy laws, including the California Consumer Privacy Act (CCPA/CPRA). It covers both the Artificall website and the Artificall chatbot service.
1. Information We Collect
Personal Data Provided by You
- Contact Information: Name and email address when you subscribe to our newsletter or analysis reports.
- Account Information: When you register for the chatbot, we collect the credentials and account data required to create and manage your account. Authentication is handled through a third-party authentication provider (Supabase).
- Chatbot Content: The questions, prompts, and messages you submit to the chatbot, together with the responses generated, are processed to deliver the Service and may be stored to maintain your conversation history.
- Financial Information: All payments are handled via secure, PCI-compliant third-party processors (e.g., Stripe). We do not store your credit card details on our servers.
Data Collected Automatically
- Technical Logs: IP addresses, browser type, and device information to ensure platform security and stability.
- Usage Analytics: Information on how you interact with our website and chatbot to improve our content and Service delivery.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Artificall website and chatbot;
- Authenticate your account and manage your credit (token) balance;
- Process the questions you submit and generate the corresponding responses;
- Process payments and prevent fraud;
- Communicate with you about the Service, including updates and support;
- Maintain the security, integrity, and performance of our platform;
- Comply with our legal and regulatory obligations.
3. Legal Basis for Processing (EEA Users)
For users in the European Union, we process data under the following legal grounds:
- Contract: To create and manage your account, deliver the chatbot service, and process the credits and analyses you purchased.
- Consent: Where you have explicitly opted in to receive our market updates or other communications.
- Legitimate Interests: To maintain the security of our platform, prevent abuse, and optimize our software performance.
- Legal Obligation: To comply with accounting, tax, and other regulatory requirements.
4. Third-Party Services and Sub-Processors
To operate the chatbot and the website, we rely on trusted third-party service providers (sub-processors). When you use the Service, certain data is processed by these providers strictly to deliver the functionality you request:
- AI Model Provider (OpenAI): The questions and prompts you submit to the chatbot are transmitted to OpenAI to generate responses. This may involve transferring data to servers located outside the European Economic Area (in particular, the United States). Such transfers are governed by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses. You should avoid entering sensitive personal data into the chatbot.
- Authentication Provider (Supabase): Manages secure user authentication and account data.
- Market Data Provider (Financial Modeling Prep): Supplies the financial and market data used to build analyses. Your personal questions are not shared with this provider for that purpose.
- Vector Database (Pinecone): Used to store and retrieve the financial knowledge base that powers the analysis. It does not store your account credentials.
- Payment Processor (Stripe): Handles all payment transactions securely. We do not store your full card details.
- Hosting Provider: Our application is hosted on secure infrastructure located in the European Union (EU West region) to support data protection compliance.
- Analytics: Tools such as Google Analytics or similar may be used to measure performance and improve the Service.
Each provider processes data only to the extent necessary to deliver its part of the Service and is bound by its own data protection obligations.
5. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy:
- Account data is retained while your account remains active;
- Chatbot conversation history is retained to provide you continuity of service and may be deleted upon request or when your account is closed;
- Transaction and billing records are retained for the period required by applicable accounting and tax law;
- Technical logs are retained for a limited period for security and diagnostic purposes.
When data is no longer required, it is deleted or anonymized.
6. Your Rights Under US and EU Law
Regardless of your location, we provide high standards of transparency. You have the right to:
- Access & Portability: Request a copy of the data we hold about you.
- Correction & Deletion: Ask us to update or erase your personal information, including your account and conversation history.
- Opt-Out (CCPA): California residents have the right to opt out of the “sale” of their information. Note: Artificall does not sell personal data.
- Restriction & Objection: Object to or restrict certain types of data processing.
- Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us using the details in the “Contact Information” section below.
7. Data Security and Engineering Standards
As an engineering-centric platform, we implement industry-standard security measures:
- Encryption: All data transmitted is protected via SSL/TLS encryption, and session cookies are encrypted.
- Authentication: Access to user routes is protected by secure, token-based authentication.
- Minimalism: We collect only the data necessary to provide our financial analysis and chatbot service.
- Integrity: Regular review of our codebase to prevent vulnerabilities and unauthorized access.
8. Cookies
We use cookies to enhance your experience, keep you authenticated, remember your preferences, and analyze traffic. Essential cookies are required for the chatbot to function (for example, to maintain your authenticated session). You can manage non-essential cookie preferences through your browser settings or our cookie consent tool at any time.
9. Children’s Privacy
The Service is not directed to individuals under the age of majority in their jurisdiction. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can take appropriate action.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be indicated by a revised effective date and will be effective as soon as it is posted. We encourage you to review this policy periodically.
11. Contact Information
For any questions regarding this policy or to exercise your data rights, please contact us:
Website: https://artificall.com/about/
Company:
Name: Monsieur Vivien Schmitt
SIREN: 891 823 163
SIRET: 891 823 163 00011
VAT: FR78891823163
Country: France