This policy explains which personal data ArtInAR processes, why, and what your rights are. It covers the service at artinar.app, the ArtInAR plugin for WordPress and WooCommerce, and the ArtInAR app for Shopify.
Who is responsible
ArtInAR is a service of Roesware, De Stuwdam 69K, Amersfoort, the Netherlands, Chamber of Commerce (KvK) 63316250. For privacy questions or requests, email [email protected].
For the data of our customers (store owners), Roesware is the controller. For the data of visitors to a store's preview pages, the store is the controller and we process that data on the store's behalf.
Store owners who use ArtInAR
What we process
- Store details: the address and name of your store, and the product categories you chose.
- Access to your store: the key or token that WooCommerce or Shopify issues when you approve the connection.
- Product data: product names, photos, dimensions, categories and product IDs. We use these to make the 3D models, and we write the preview link and AR status back to your products.
- Contact details: your email address and name, only if you give them to us.
- Billing details: your plan and payment status. Card and bank details are handled by Stripe; we never see or store them.
- Usage and technical data: log-ins, requests from the plugin or app, and error reports.
Why, and on what basis
We process this data to provide ArtInAR under our agreement with you: to connect your store, convert your artwork, show the previews and bill paid plans. We use your email address to send service messages, such as sign-in links and messages about your plan. We keep invoices because the law requires it, and use technical data to keep the service secure and working (legitimate interest).
Visitors to a preview page
When someone opens the preview of an artwork, through the button, the QR code or a short link, we process:
- their IP address, browser type and the page they came from, to count visits and to show the store how often its previews are opened;
- technical cookies that the page needs to work. We do not set advertising or tracking cookies on preview pages.
The 3D model is shown by the AR viewer built into the phone (AR Quick Look on iPhone and iPad, Scene Viewer on Android). The preview page loads fonts and the 3D viewer software from Google's servers, so Google receives the visitor's IP address.
Visitors to artinar.app
On our home page we use Google Analytics to see how visitors use the site, such as which pages they view and where they come from. Google Analytics uses cookies for this.
Galleries and artists we contact
We sometimes contact art businesses that might benefit from ArtInAR. For that we use business contact details that the business itself publishes on its website, such as the store name, website address and general email address. Sometimes we include a preview of one of their own artworks. We do this on the basis of our legitimate interest in reaching potential business customers. If you do not want to hear from us, reply to the message or email us. We will then not contact you again and delete your details, except for a note that we must not contact you.
Who we share data with
We do not sell personal data. We use the following service providers, who process data for us:
- Hosting: a virtual server in the EU, managed with Laravel Forge;
- Amazon Web Services (S3, Frankfurt): storage of product photos and 3D models;
- Cloudflare: network, security and delivery of artinar.app, and sending of email to businesses we contact;
- Stripe: payments;
- Resend: sending of service email;
- Laravel Nightwatch: monitoring of errors and performance;
- Google: fonts and the 3D viewer on preview pages, and Google Analytics on our home page.
Some of these providers are based in the United States. Where data leaves the European Economic Area, the transfer is covered by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.
How long we keep data
- Store details, product data and 3D models: as long as your store is connected. When you remove a product, its model and visit records are removed with it.
- Visit records of preview pages: as long as the artwork stays in ArtInAR.
- When you ask us to delete your account, we delete your data within 30 days. Invoices and payment records are kept for 7 years, because Dutch tax law requires it.
Your rights
You have the right to access, correct or delete your personal data, to object to its use, to restrict it, and to receive your data in a portable format. Send your request to [email protected]; we reply within a month. If you are a visitor to a store's preview page, you can also contact that store.
If you are not satisfied with how we handle your data, you can file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Security
All traffic to artinar.app is encrypted (HTTPS). Access to stores goes through keys that the store owner approves and can revoke at any time, and only we can access our systems.
Changes
We may update this policy. The date at the top shows when it last changed. We tell customers about important changes in advance.