Privacy Policy

Who we are

Art & Algorithms is operated by IDLE Creative Ltd, registered in England and Wales (company no. 13883446). Registered office: Suite 3, 2nd Floor, Didsbury House, 748–754 Wilmslow Road, Manchester M20 2DW. We are the data controller for your personal data.

Contact: hello@artandalgorithms.ai

What we collect

Account information. When you create an account, we collect your email address and a hashed password. We don't collect your name, address, or phone number unless you provide it voluntarily.

Payment information. Subscriptions are processed by Stripe. We do not store your card number, expiry date, or CVV. Stripe handles all payment data under their own privacy policy.

Usage data. We track which articles you've read (stored locally in your browser) and your subscription status. We do not use third-party analytics or tracking pixels.

How we use your data

We use your data to:

• Provide and manage your account and subscription (legal basis: performance of our contract with you)
• Send transactional emails — sign-in links, password resets, subscription confirmations (legal basis: performance of our contract with you)
• Respond to support requests (legal basis: legitimate interests — resolving your issues)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Third-party services

We use the following services to operate Art & Algorithms:

• Supabase — authentication and user profiles
• Stripe — subscription billing and payment processing
• Vercel — hosting and content delivery

Each of these services has their own privacy policy. We only share the minimum data necessary for them to function.

International data transfers

Some of our service providers process data outside the UK, including in the United States. Where this happens, transfers are protected by appropriate safeguards such as Standard Contractual Clauses approved by the UK government.

Cookies

We use essential cookies only — specifically, an authentication session cookie that keeps you signed in. We do not use advertising cookies, tracking cookies, or cookie-based analytics.

Data retention

We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. We may retain anonymised, aggregated data (e.g. total subscriber counts) indefinitely.

Stripe retains payment records as required by financial regulations.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data correctly

To exercise any of these rights, email hello@artandalgorithms.ai. We will respond within 30 days.

Complaints

If you are unhappy with how we have handled your data, please contact us first at hello@artandalgorithms.ai. We will acknowledge your complaint within 30 days and investigate without undue delay. If you remain unsatisfied, you can escalate to the ICO at ico.org.uk.

Children

Art & Algorithms is not directed at children under 16. We do not knowingly collect data from anyone under 16.

Changes

We may update this policy. Material changes will be communicated by email. The "last updated" date at the top of this page will always reflect the most recent version.

Contact

For privacy questions or data requests, email hello@artandalgorithms.ai.