Privacy policy

Last updated: March 25, 2026

1. Data controller

The data controller is Alvaro Crespo Martinez (Artevix), based in Spain.

Data Protection Officer contact: privacy@artevix.com

2. Data we collect

We collect the following personal data:

Identification data: name, email, phone number (provided when subscribing or making a booking)
Billing data: processed directly by Stripe. Artevix does not store credit card data
Browsing data: IP address, browser type, pages visited (via Google Analytics)
Business data: business name, address, hours, services (provided by the client or extracted from public sources)
Cookies: see our Cookie Policy for more details

3. Purpose of processing

We use data for the following purposes:

Service delivery (legal basis: contract performance)
Payment processing and billing (legal basis: contract performance)
Service-related communications: booking confirmations, status notifications (legal basis: contract performance)
Service improvement and anonymized usage analysis (legal basis: legitimate interest)

4. Data recipients

Data may be shared with the following third-party processors:

Supabase (database): servers in the EU. Privacy policy at supabase.com/privacy
Stripe (payments): PCI-DSS Level 1 certified. Privacy policy at stripe.com/privacy
Vercel (web hosting): Privacy policy at vercel.com/legal/privacy-policy

5. International transfers

Some of our providers may process data outside the European Economic Area. In all cases, appropriate safeguards are applied in accordance with Article 46 of the GDPR, including the European Commission's standard contractual clauses.

6. User rights

Right of access: request a copy of your personal data
Right of rectification: correct inaccurate or incomplete data
Right of erasure: request deletion of your data ('right to be forgotten')
Right of portability: receive your data in a structured, machine-readable format
Right to object: object to the processing of your data in certain circumstances

To exercise these rights, contact privacy@artevix.com. We will respond within a maximum of 30 days. You may also file a complaint with the Spanish Data Protection Agency (aepd.es).

7. Data retention

Personal data is retained for the duration of the contractual relationship and, once it ends, for the legally established periods. Billing data is retained for 5 years in accordance with Spanish tax regulations.

8. Security

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit (TLS) and at rest, role-based access control, and regular security audits.

In the event of a security breach affecting personal data, we will notify the competent supervisory authority within 72 hours and affected individuals without undue delay.