ARTLAS Privacy Policy

Last updated: November 21, 2025

Welcome to ARTLAS. Your privacy is critically important to us.
This Privacy Policy explains how ARTLAS (“ARTLAS”, “we”, “us” or “our”) collects, uses, shares, and protects your personal information when you use our websites, mobile or web applications, and other online services that link to this Privacy Policy (collectively, the “Services”).

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy.
We do not sell your personal data to third parties.

1. Scope

This Privacy Policy applies to:

visitors to our website;
users of the ARTLAS app and web app, including Free Trial users and paid pass holders; and
anyone who otherwise interacts with us in connection with the Services (for example, by contacting our support team).

If you do not agree with this Policy, please do not use the Services.

2. Information We Collect

We collect information in three main ways: (a) information you provide, (b) information collected automatically, and (c) information from third parties.

2.1 Information You Provide to Us

This includes:

Account & Contact Information

Name, email address, profile photo, and any other details you choose to provide when you create an account, sign up for a newsletter, or contact us.

Content and Interactions in the Services

Queries and messages you send to our AI companion (for example, chat with “Metti AI”),
Snap Art scans and related inputs,
notes, favorites, or other content you choose to save in the app.

Payment & Purchase Information

When you purchase an Unlimited Pass or other paid product, we receive information about the transaction such as:

purchase date and time,
product type and duration (e.g., 1-Day, 7-Day, or 1-Month pass),
price and currency,
limited payment-related identifiers (for example, Stripe customer ID, payment intent ID, or an Apple/Google transaction ID).

We do not store full credit or debit card numbers or CVV codes on our servers. Payment card information is handled by our third-party payment processors (see Section 4).

2.2 Information Collected Automatically

When you use the Services, we may automatically collect certain information, such as:

Device information (e.g., device type, operating system, browser type);
Log information (e.g., IP address, access times, pages viewed, app screens, referring URLs);
Usage information (e.g., features you use, interactions with Snap Art, AI chat activity volumes, clicks, and navigation flows);
Approximate location information, derived from your IP address or device settings, where permitted by your device settings and applicable law.

We may use cookies, local storage, and similar technologies to collect some of this information (see Section 7.3).

2.3 Information From Third Parties

We may receive information about you from:

Payment platforms and app stores, such as Stripe, Apple, and Google, in connection with your purchases, payment status, and subscription eligibility;
Analytics and measurement providers, which help us understand how users discover and use the Services;
Museums and cultural institutions, when ARTLAS is offered in collaboration with them, in ways that are consistent with this Policy and any institutional agreements.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide and maintain the Services

Operating our apps and website, processing your registration, and enabling core features such as Snap Art, AI chat, museum guides, audio guides, and maps.

To process purchases and manage access

Handling payments, issuing passes, validating your access to paid features, performing accounting and billing, and preventing fraudulent transactions.

To personalize and improve the experience

Tailoring content and recommendations to your context and interests, including adapting explanations and tours to your curiosity, background, and knowledge level;
Understanding how different features are used so we can improve usability and design.

To operate and improve our AI models and Services

Using interactions (for example, queries, scans, and feedback) to operate, debug, and improve the AI systems that power ARTLAS, always in line with our commitment to responsible AI and, where applicable, our agreements with museum partners.

To communicate with you

Sending you service-related messages (e.g., transactional emails, pass confirmations, security alerts, updates about changes to our terms and policies);
Responding to your questions and support requests.

For analytics and service quality

Monitoring usage, troubleshooting issues, generating aggregate statistics, conducting research, and improving performance and reliability.

For legal, safety, and security purposes

Detecting, investigating, and preventing activities that may violate our Terms of Service or be fraudulent or illegal;
Protecting the rights, property, or safety of ARTLAS, our users, partners, or the public.

For marketing and outreach

With your consent or where permitted by law, providing you with news, updates, special offers, or information about events and features that may interest you. You can opt out of marketing communications at any time by following the unsubscribe instructions in those communications or by contacting us.

We do not sell your personal information.

We only share your personal information in the situations described below:

4.1 Service Providers and Partners

We share information with trusted third parties who perform services on our behalf, such as:

Payment processing (e.g., Stripe, Apple Pay, Google Pay);
Hosting and infrastructure;
Analytics and measurement;
Customer support and communications (e.g., email service providers);
Error monitoring and security.

These service providers are permitted to use your information only to perform services for us and are required to protect your information.

In particular, we use third-party payment processors, including Stripe, Apple Pay, and Google Pay, to process payments securely. These processors may collect and process your payment information directly, in accordance with their own privacy policies. We do not store full payment card numbers or CVV codes on our servers.

4.2 Museums and Cultural Institutions

Where ARTLAS is used in collaboration with a museum or cultural institution, we may share aggregated or de-identified information (for example, anonymized usage trends) so they can understand how visitors are using ARTLAS. We do not share personally identifiable information with these partners unless:

it is necessary for a specific joint feature or service,
you have been clearly informed and, where required, given a choice, or
we are legally required to do so.

4.3 Legal Requirements and Protection

We may disclose your information if we believe in good faith that such disclosure is reasonably necessary to:

comply with any applicable law, regulation, legal process, or governmental request;
protect the rights, property, or safety of ARTLAS, our users, or the public;
enforce our Terms of Service or investigate potential violations;
detect, prevent, or otherwise address fraud, security, or technical issues.

4.4 Business Transfers

If ARTLAS is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction, in accordance with applicable law and this Privacy Policy.

We may share your information with third parties when you give us your consent or when you direct us to do so.
We do not share personal information with third parties for their own direct marketing purposes without your explicit consent.

5. Data Retention

We retain personal information for as long as reasonably necessary to:

provide the Services to you;
fulfill the purposes described in this Privacy Policy;
comply with our legal, tax, and accounting obligations;
resolve disputes; and
enforce our agreements.

For example, we may keep transaction records and related data for the period required by applicable tax and accounting laws, which may be a number of years. When we no longer need to retain your personal information, we will take reasonable steps to delete, anonymize, or aggregate it.

You may request deletion of certain information as described in Section 7 below.

6. International Data Transfers

ARTLAS operates globally and may process your information in countries other than the one where you live. These countries may have data protection laws that differ from those in your jurisdiction.

Where required by law, we implement appropriate safeguards (for example, contractual protections) to help ensure that your personal information remains adequately protected when it is transferred internationally.

7. Your Choices and Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information.

7.1 Access, Correction, and Deletion

You may have the right to:

access the personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of your personal information where there is no good reason for us to continue processing it (subject to legal retention obligations).

You can often update some of your information directly in your account settings. For other requests, please contact us at info@artlas.app.

7.2 Marketing Communications

You can opt out of receiving marketing emails from us at any time by:

clicking the “unsubscribe” link in the email, or
contacting us at info@artlas.app.

Please note that we may still send you non-marketing communications, such as service-related or transactional messages.

7.3 Cookies and Similar Technologies

We and our service providers may use cookies, local storage, and similar technologies to:

remember your preferences,
keep you logged in,
analyze usage and performance, and
improve the Services.

You can typically configure your browser or device to refuse cookies or alert you when cookies are being sent. However, some parts of the Services may not function properly if you disable cookies.

8. Security of Your Information

We use administrative, technical, and physical security measures designed to protect your personal information, including:

encryption in transit (such as HTTPS);
access controls and authentication;
regular monitoring for potential vulnerabilities.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

If you believe that your account or information is no longer secure, please contact us immediately at info@artlas.app.

9. Children’s Privacy

Our Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16.

If you are a parent or guardian and believe that we have collected information from a child in violation of this Policy, please contact us at info@artlas.app. We will take steps to delete such information as required by applicable law.

10. Third-Party Links and Services

The Services may contain links to third-party websites, apps, or services that are not controlled by ARTLAS (for example, museum websites, ticketing platforms, or external resources). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you interact with.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated Policy on this page and revise the “Last updated” date at the top.

If we make material changes, we will provide additional notice where required by law (for example, through the Services or by email), giving you an opportunity to review the changes before they become effective.

Your continued use of the Services after the updated Privacy Policy becomes effective will signify your acceptance of the changes.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: info@artlas.app