Privacy Policy | Artlist

Privacy Policy

Contents

Grounds for Data Collection

You are not legally required to provide us with your “Personal Data” (meaning any information which may potentially allow your identification with reasonable means), but without it we might not be able to provide you with the full range of, or the best experience while using our website(s), mobile application(s) or any other affiliated service (together, the “Services”).
Processing of Personal Data is necessary for the performance of our contractual obligations towards you, for provision and operation of our Services, to protect our legitimate interests and for compliance with legal and regulatory obligations to which we are subject.

What type of data we collect?

Personal Data
In the course of using the Service, we may ask you to provide us with certain Personal Data to provide and improve the Service, to contact or identify you, to enable you to access certain parts of the Service, and as otherwise indicated in this Policy. We collect the following Personal Data about you:

Representatives of enterprise users – When you use our business solution within an enterprise framework, we may gather the information detailed above about you personally, as a representative of that enterprise party, and this Privacy Policy also applies to such information collected about you although you are not Artlist’s client.

We may also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific software feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

AI Services

Our AI Services do not require you to provide personal data to function. However, you may voluntarily choose to include personal data in your inputs, including text prompts, uploaded files (such as images, videos, or voice samples). When you do so, you are responsible to ensure that you are allowed to provide this data, and that you have all necessary consents and licenses required to transfer this personal data to us.

The AI Services are not intended for the processing of sensitive or special categories of personal data (as defined under GDPR), and we ask you to not include such personal data.

Your text prompts, uploaded files, and the AI-generated outputs are accessible via your "My Account" interface; please note that hashed versions of your text prompts may be retained for security and system integrity purposes.

Non-Personal Data
We also collect data about the use of our Service and the characteristics and activities of users, in order to operate it and improve it. We may collect the following non-Personal Data:

If we combine Personal Data with non-Personal Data, the combined data will be treated as Personal Data. Further Personal Data will only be stored and processed if you voluntarily provide it to us, e.g. through a contact form.

Tracking Technologies

When you visit or access our Services or interact with our electronic communications (such as emails or newsletters), we use (and authorize 3rd parties to use) pixels, cookies, events, unique tracking links and other technologies (collectively, "Tracking Technologies"). Those allow us to automatically collect information about you, your device and your online behavior, in order to enhance your navigation in our Services, improve our Services’ performance, perform analytics and customize your experience. We store Tracking Technologies when you visit or access our Services. These are called "First Party Tracking Technologies". In addition, Tracking Technologies are stored by other third parties (for example our analytics service providers, business partners and advertisers) – these are called "Third Party Tracking Technologies". Both types of Tracking Technologies may be stored either for the duration of your visit on our Services or for repeat visits.

We use a tool called “Google Analytics” to collect information about use of our Service. Google Analytics collects information such as how often Users visit our site, what pages they visit when they do so, and what other sites they used prior to coming to this site. We use the information we get from Google Analytics only to improve our Services. Google Analytics collects only the IP address assigned to you on the date you visit our site, and plants a cookie on your web browser to identify you as a unique user the next time you visit. The cookie cannot be used by anyone but Google and we do not combine the information collected through the use of Google Analytics with personally identifiable information. Google’s ability to use and share information collected by Google Analytics about your visits to this site is detailed on the Google Privacy Policy. You can prevent Google Analytics from recognizing you on return visits to this site by disabling cookies on your browser as described below.

How to Manage Your Tracking Technologies Settings

There are various ways in which you can manage and control your Tracking Technologies settings. Please remember that, by deleting or blocking Tracking Technologies, some of the features of the Services may not work properly or as effectively

For other browsers, please consult the documentation that your browser manufacturer provides.

Please note that the above information may change when manufacturers update their systems. Also note, that your device may use another platform, not described above. In that case, please consult the manufacturer documentation for further instructions.

How do we use the data we collect?

Please note that even if you unsubscribe from our promotional or marketing emails, we may continue to send you service-related updates and notifications, or reply to your queries and feedback you provide us.

Additionally, please note that even if you opt-out, we may still use and share your Personal Data with third parties for non-marketing purposes (for example to provide our Services, fulfill your requests, communicate with you and respond to your inquiries, etc.). In such cases, the companies with whom we share your Personal Data are authorized to use your Personal Data only as necessary to provide these non-marketing services.

Purposes and Legal Bases for the Processing of Your Personal Data

Our legal bases for collecting and using your Personal Data depend on the particular purpose for which your data is being processed, however, we generally use the following:

  1. Performance of a contract – We will use this basis for processing necessary to make the Services, including support services, available to you, and to send you service communications.
  2. Consent – In limited cases (for instance, where you accept cookies on our Services) we will process your Personal Data based on your consent. You can withdraw your consent at any time by contacting us using the details provided below.
  3. Legitimate interests – We will process your Personal Data based on our legitimate interests in maintaining and improving our Services, such as for the purpose of understanding how our Services are used and improving them, our customer service and support operations, and protecting and securing our users, ourselves and our Services.
  4. Compliance with a legal obligation – In limited cases we may process your Personal Data where we need to do so to comply with a legal obligation e.g. which is set out in an applicable law, or if we receive an order from a court or regulatory body.

The following list outlines the purposes for which We may process Personal Data about you and the legal basis for any such processing:

Purpose/Activity Type of Data Lawful basis for processing including basis of legitimate interest
Registration and Account Setup - Registration information (name, mailing address, email address, home and work telephone numbers, company information, job position)
- Payment details (pseudonymized “token” received from payment processors)
Performance of a contract Necessary to create and maintain your account and process payments
Customer Communication and Support - Information provided voluntarily (via contact forms, e-mail, support channels)
- Survey responses and additional profile information
Performance of a contract We may contact you when responding to inquiries, providing support, to facilitate your use of the services
Purchase Facilitation - Transaction information
- Account details
Performance of a contract Necessary to facilitate your purchases and provide you the purchased content
Newsletter and Marketing Communications - Email address
- URLs of media created by you and uploaded (when provided)
- Online identifiers
Legitimate interest Used for sending newsletters or marketing messages to you
Service Delivery - IP address
- General location data (city, country)
- Usage data (session details, device/hardware information, webpage/advertisement history, interaction and engagement data)
Performance of a contract Necessary to deliver our services to you
Service Improvement and Personalization - General location data (city, country)
- Usage data and online identifiers (session details, device/hardware information, webpage/advertisement history, interaction and engagement data)
- social media account data (profile name, profile picture, additional details as provided by platforms)
- Information received from business partners (contact details, company information, job description)
Legitimate interest Necessary for the effective delivery, performance, and ongoing improvement of our Services and deliver you with the best experience possible
Third-Party and Social Media Integration - Social media account data (profile name, profile picture, additional details as provided by platforms)
- Information received from business partners (contact details, company information, job description)
Performance of a contract Used to facilitate registration and login via third-party accounts
Digital Rights Management (DRM) - Data related to online content published using our Assets (e.g., YouTube's Content ID data, associated video and channel data) Legitimate interest Ensures protection of digital content and the enforcement of intellectual property rights
Enterprise User Support - All relevant Personal Data for representatives of enterprise users (as outlined above) Performance of a contract Necessary for delivering our business solutions and managing the enterprise relationship
Collecting and/or Generating Audio Data for use in connection with our Services - Voice samples and/or audio recordings of your voice that you choose to share with us Performance of a contract Necessary for providing you with our AI voice Services such as speech-to-speech functionality and voice cloning
Statistical and Aggregated Analysis - Aggregated data derived from Personal Data (e.g., aggregated usage data for statistical or demographic insights) Legitimate interest Used for analysis, system optimization, and service enhancement
To ensure compliance with our policies and terms, including in relation to security - All types of Personal Data Legitimate interest Used for analysis, system optimization, and service enhancement
To comply with legal and regulatory requirements - All types of Personal Data Legal Compliance Ensuring compliance with applicable laws, our policies and terms

Personal Data and AI Voice Services clarifications

We process Audio Data to provide our AI voice features, including speech-to-speech functionality and voice cloning. When you choose to submit voice samples for cloning, we may use third-party AI technologies to analyze your speech patterns and generate a unique voice model that reproduces your vocal characteristics. This model is created exclusively for your use within our Services and enables us to generate audio outputs (voiceovers) that sound similar to your voice. Depending on your location and the way we handle your Audio Data (as described in this Policy), applicable law may classify it as biometric data. We do not use Audio Data or voice models to infer personal traits, create profiles, or draw assumptions about you beyond providing the Services. Misuse of the Services to impersonate others is strictly prohibited as further detailed in our Terms of Use.

You may delete your generated voice model and the associated voice samples at any time through your account dashboard. Once deleted, these materials are permanently removed from our systems, subject to any limited retention required by applicable law.

With Whom Do We Share Your Personal Data?

Transfer of data outside the EEA (for EU data subjects)

Please note that some data recipients may be located outside the EEA. In such cases, we will transfer your data only to such countries as approved by the European Commission as providing adequate levels of data protection, or enter into legal agreements ensuring an adequate level of data protection.

How we protect your information

We have implemented administrative, technical, and physical safeguards to help prevent unauthorized access, use, or disclosure of your Personal Data. Your data is stored on secure servers and isn’t publicly available. We limit access to your information only to those employees or partners on a “need to know” basis, to enable the carrying out of the agreement between us.

While we seek to protect your information to ensure that it is kept confidential, we cannot absolutely guarantee its security. You need to help us prevent unauthorized access to your account by protecting your password appropriately and limiting access to your account. You will be solely responsible for keeping your password confidential and for all use of your password and your account, including any unauthorized use. You should also be aware that there is always some risk involved in transmitting information over the internet. While we strive to protect your Personal Data, we cannot ensure or warrant the security and privacy of your Personal Data or other content you transmit using the service, and you do so at your own risk.

Retention

We will retain your Personal Data for as long as necessary to provide our services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Retention periods will be determined taking into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time. Under applicable regulations, we will keep records containing client personal data, trading information, account opening documents, communications, and anything else as required by applicable laws and regulations.

User Rights

European Union Users

If you reside in the EU, you may request to:

However, please note that these rights are not absolute, and may be subject to our own legitimate interests and regulatory requirements.

California Users

You have the right to:

How to Contact Us?

If you wish to exercise any of the aforementioned rights, including your right to delete Your Personal Data, or receive more information, please submit a request through the Help Center.

Updates to This Policy

This Privacy Policy is subject to changes from time to time, in our sole discretion. The most current version will always be posted on our website (as reflected in the "Last Updated"). You are advised to check for updates regularly. In the event of material changes, we will provide you with a notice. By continuing to access or use our Services after any revisions become effective, you agree to be bound by the updated Privacy Policy.

Last updated: June 16, 2026