Artec Labs Inc. Effective Date: June 25, 2026 Last Updated: July 11, 2026

This Privacy Policy explains how Artec Labs Inc., doing business as Artec ("Artec," "we," "us," or "our"), a Delaware corporation, collects, uses, discloses, and protects personal information in connection with the website at artec.app, the Artec web applications, the Artec iOS mobile application, our AI features, and all related services (collectively, the "Services").

This Policy is incorporated into our Terms of Service. By using the Services, you acknowledge the practices described here. If you do not agree, do not use the Services.

This Policy applies both to people who create an account and use the Services, and — for our discovery and marketing-intelligence features — to certain individuals whose publicly available information we process even if they are not Artec users. If you are not a user and want to know what we hold about you or ask us to remove it, see "Marketing intelligence and information about non-users" and "Your privacy rights" below.

Artec Labs Inc. is the controller of the personal information processed through the Services, except where we act as a processor or service provider on behalf of a business customer (for example, when a brand or agency uses the Services to manage its own campaigns and team). This Policy covers the website, web applications, mobile application, and AI and intelligence features. It does not cover third-party services that have their own privacy policies, such as the social platforms you connect or our payment processor.

When you connect a TikTok, Instagram, Facebook, YouTube, or Snapchat account, you authorize us to access certain data through that platform's official API. Depending on the platform and the permissions you grant, this may include your handle and display name, profile and avatar information, follower, subscriber, and video counts, and engagement and performance metrics for your posts. To keep your account connected, we also store access and refresh tokens; these tokens are encrypted at rest. You can disconnect an account or revoke our access at any time (see "Social platform and third-party disclosures").

We receive information from the social platforms you connect (as described above), from our payment processor (such as payout-eligibility and tax-form status), and from the data and AI providers we use to operate and enrich the Services. We may combine this information with the information we already hold about you.

Our discovery and marketing-intelligence features process information about social-media posts, accounts, creators, brands, advertisements, sounds, and trends collected from publicly available sources and from third-party data providers. This may include public handles, display names, bios, profile images, follower counts, post content and captions, engagement metrics, video and audio (including machine-generated transcripts), publicly listed contact links, and information we derive using automated analysis. Some of this information relates to individuals who are not Artec users. See Section 5.

We do not intentionally collect government identifiers, payment card numbers, precise (GPS-level) geolocation, biometric identifiers, or special categories of data, and we ask that you not submit them except where specifically required (for example, tax information you provide directly to our payment processor).

We use personal information to:

Where required by law (for example, in the EEA and UK), we rely on the following legal bases: performance of our contract with you; our legitimate interests in operating, securing, improving, and marketing the Services and in providing our marketing-intelligence features (balanced against your rights); your consent, where we ask for it; and compliance with legal obligations.

The Services use artificial intelligence to generate briefs and content plans, to analyze portfolios, and to score and analyze video and other content (including transcription). To provide these features, we share the relevant content and context with third-party AI service providers. These providers process the content to perform the requested functions, and their processing is governed by their terms and by our agreements with them.

Our scores and analyses are automated estimates and may be inaccurate. We do not use these features to make decisions that produce legal or similarly significant effects about you without a meaningful opportunity for human involvement. You are responsible for reviewing AI outputs before relying on them, as described in our Terms.

A core part of the Services helps brands and agencies understand the creator landscape and their competitors. To do this, we collect and analyze publicly available information about social-media accounts, posts, advertisements, and trends, including information about individuals who are not Artec users.

Sources. We obtain this information from publicly available sources and from third-party data providers — including providers of public social-media data, public advertisement libraries, and public app-store data — as well as the public APIs of social platforms.

What we process. This may include public handles, display names, bios and descriptions, profile images, follower and engagement counts, post and advertisement content, captions, video and audio and machine-generated transcripts, publicly listed contact links, and classifications and insights we generate using automated analysis (such as whether an account appears to produce branded content, the likely format and niche, and similar signals). We refer to discovered, non-authenticated accounts as leads.

How we surface it. Where the Services display a post or content from a social platform, we do so through official platform integrations, with attribution to the creator and a link to (or an embed of) the original post on the source platform, so the content remains hosted by and credited on that platform. We use copies of media only to operate features such as analysis and transcription, not to re-publish content as our own.

Why. We process this information for our legitimate interests (and, where we engage with you, to provide a service you request): to power discovery, competitive intelligence, trend analysis, and creator recommendations for our customers.

Publicly available information. Much of this information is publicly available, and some privacy laws (for example, in California) treat publicly available information as outside the definition of "personal information." Even so, we honor verified requests as described below and apply protections consistent with applicable law, including for individuals in the EEA and UK.

Retention. Raw third-party data payloads are deleted on a rolling basis (currently within 30 days). Normalized records and the insights we derive are retained for as long as they remain useful for the intelligence features, subject to your rights below.

Your choices. If you are featured in these features and would like to access, correct, or remove information we hold about you — whether or not you are an Artec user — contact us at [email protected] and we will respond consistent with applicable law. You can also limit what we can collect by adjusting the visibility settings on your own social-platform accounts.

We share personal information in the following ways:

We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising.

The specific providers we use may change as we add or remove vendors. A current list of subprocessors is available on request at [email protected].

We use a limited set of cookies and similar technologies. Strictly necessary technologies keep you signed in and enable core functionality (for example, a session token). We also use error-monitoring and performance-measurement tools that may set or read limited technical identifiers to keep the Services reliable. We do not use advertising or cross-site tracking cookies.

You can control cookies through your browser settings, although disabling some may affect functionality. Where required by law, we will obtain consent before setting non-essential cookies and provide a means to manage your choices.

We keep personal information for as long as needed to provide the Services and for the purposes described in this Policy, and then retain or dispose of it consistent with our legal, tax, accounting, dispute-resolution, fraud-prevention, and security obligations.

We use technical and organizational measures designed to protect personal information, including encryption in transit (TLS), encryption at rest of stored social-platform access tokens (AES-256-GCM), authentication and access controls, and infrastructure provided by reputable hosting and payment providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for promptly notifying us of any suspected unauthorized access.

Depending on where you live, you may have some or all of the following rights regarding your personal information: to access or obtain a copy of it; to correct it; to delete it; to object to or restrict certain processing; to data portability; and to withdraw consent where processing is based on consent. We will not discriminate against you for exercising these rights.

If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have the right to know and access the personal information we collect, use, and disclose; to correct or delete it; to opt out of the "sale" or "sharing" of personal information and of certain targeted advertising; and to limit the use of sensitive personal information. As noted above, we do not sell personal information and do not share it for cross-context behavioral advertising. The categories of personal information we collect, and the sources, purposes, and recipients, are described in Sections 2, 3, 5, and 6; the categories we collect are summarized in Section 11. The only sensitive personal information we process is your account log-in credentials, which we use solely to provide and secure the Services and not to infer characteristics about you. You may exercise these rights as described below, and you may use an authorized agent where permitted by law.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the rights described above under the GDPR and equivalent laws, including the right to lodge a complaint with your local data-protection authority. The legal bases on which we rely are described in Section 3. Because we operate from the United States, we transfer personal information internationally; where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum).

You can access, correct, or update much of your information directly in your account settings. The mobile app and web app also let you export your data and delete your account. To make any other request, or if you are not a registered user, contact us at [email protected]. We will verify your request as required by law and respond within the timeframes the law provides.

For transparency and to support U.S. state privacy laws, the following table summarizes the categories of personal information we may collect. We collect these from you, your devices, the social platforms and payment processor you connect, and public sources and data providers, and we use and disclose them for the purposes and to the recipients described in Sections 3 and 6.

When you connect a third-party account, your use of that platform remains governed by its own terms and privacy policy, and you can revoke our access at any time.

YouTube. Our use of information from YouTube APIs is subject to the YouTube Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://policies.google.com/privacy). You can revoke our access to your Google and YouTube data through the Google security settings page at https://myaccount.google.com/permissions.

Meta (Facebook and Instagram). You can remove Artec and revoke permissions in your Facebook or Instagram settings, and you can request deletion of data associated with your connection; when we receive a valid deauthorization or data-deletion signal from Meta, we invalidate and remove the stored access tokens for that connection.

TikTok and Snapchat. You can disconnect within the Services and revoke our access in your TikTok or Snapchat account settings, after which we stop refreshing data from that account.

The Services are not directed to, and are not intended for, anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at [email protected] and we will take appropriate steps to delete it.

The Services are operated and hosted in the United States, and your information will be processed in the United States and in other countries where we or our service providers operate, which may have different data-protection laws than your own. Where required, we use appropriate safeguards for international transfers as described in Section 10.2.

We may update this Policy from time to time. If we make material changes, we will post the updated Policy with a new "Last updated" date and, where appropriate, provide additional notice. Your continued use of the Services after the changes take effect constitutes acceptance of the updated Policy.

Questions or requests about this Policy may be directed to: