Skip to content

Privacy policy

What we collect, why, and what you can ask us to do about it.

Last updated 7 September 2026

Who is responsible

ARTIFLUENCE, a SAS registered at the RCS of Nantes under SIREN 993 049 659, is the controller of the personal data described here. The registered office is 4 rue Marcel Carné, 44115 Basse-Goulaine, France.

We have not appointed a data protection officer. For anything in this policy, write to contact@artifluence.com.

The legal notice has the full publisher and host details.

What this policy covers

Two surfaces, one company:

  • The public website on artifluence.com — pages, the blog, the help centre, the visibility check, the newsletter field and the contact form.
  • The product on app.artifluence.com — accounts, workspaces, billing, publishing and the rest of the software.

If you only read the site, the product sections do not apply to you. If you subscribe, both do.

The marketing site

Pages, language and preferences

The site stores a few things so it can work the same way the next time you visit:

  • a language cookie (NEXT_LOCALE), so a French reader is not sent back to English;
  • a theme preference (light, dark or system);
  • whether you dismissed the announcement banner;
  • your answer to the cookie question (artifluence-consent in local storage).

Those are functional. The site works if you refuse analytics.

The host also keeps ordinary server logs — IP address, user agent, the page requested — for security and to keep the site up. We do not use those logs to build a profile of you.

The visibility check

The homepage and the contact form can look up a business in Google Places. If you type a name, that query goes to Google, and we receive the public listing facts Google returns (name, address, phone, website, rating, a photo, a place id). If you allow location in the browser, we send a rough position to Google only to bias the results toward shops near you. We do not keep that position.

Choosing a business sends you to the audit on app.artifluence.com with the place id. Nothing is published or changed on the listing. The audit itself is part of the product and needs no account.

Analytics

Google Analytics loads only after you press accept on the cookie banner, and only if we have configured it. If you decline, or if analytics is not configured, the script is not on the page at all.

When it does run, page views are sent to Google with IP anonymisation on. We use that to see which pages are read, not to advertise to you. You can change your mind by clearing the site data for artifluence.com and answering the banner again.

Contact, newsletter and booking

The contact form and the footer newsletter send your message or address to us through the product’s servers. Both paths are live:

  • a contact message (name, email, the Google listing you pick, what you wrote) is used to answer you, and nothing else;
  • a newsletter address is used to send the monthly email you asked for, until you unsubscribe.

The contact form is protected by Google reCAPTCHA v3, which is invisible: there is no puzzle to solve. It loads when you start filling the form in — not when you open the page — and Google scores whether you look like a person from how the browser behaves. We see only that score, never a reason for it. If it refuses you, the email address beside the form still works.

If you book a demo, the calendar is run by Cal.com on our behalf. Cal.com receives the name, email and slot you pick so the founders can meet you. Their own policy applies to that booking.

A phone call to +33 2 21 65 24 32 or an email to contact@artifluence.com is just a conversation. We keep what we need to help you.

The product

An account on app.artifluence.com is a different relationship. To run the service we process:

  • Account. Email and authentication data, through Firebase Auth.
  • Workspace and locations. Business name, Google place id, address, phone, website, hours, photos, brand, posts, reviews, and the people you invite (owner, admin or member).
  • Connected networks. Google Business Profile, Facebook, Instagram and Pinterest — the four we actually publish to. Access tokens are held by our publishing provider, bundle.social, not in your browser.
  • Reviews. Google and Facebook reviews, and the replies you send or let the product send.
  • Generated content. Drafts, posts, images and video the product produces for you.
  • Billing. Customer and payment details through Stripe — card brand and last four digits, invoices, an optional VAT number. We do not see the full card number.
  • Email. Transactional mail (invites, receipts, notices) through Mailtrap.
  • Usage. Enough to show you what published and how a listing is doing.

You own the words and photographs you put in. You can export them and you can delete them. We do not train our models, or anyone else’s, on your content.

The product is stored in the European Union (Google Cloud / Firebase). Some subprocessors below may process a subset outside the EU; where they do, they do it under a contract that includes the standard contractual clauses.

Why we process it, and on what basis

  • Running the site and remembering language, theme and consent — legitimate interest, or what is strictly necessary for the service.
  • Measuring which pages are read — consent.
  • Answering a contact message or sending the newsletter — pre-contract or consent.
  • A booked demo — pre-contract.
  • The visibility check and the audit — pre-contract: you asked for it.
  • Providing the product you subscribe to — contract.
  • Invoices, VAT, accounting — legal obligation.
  • Keeping the service secure — legitimate interest.

Cookies and similar storage

No separate cookie page. This is the list.

  • NEXT_LOCALE. Language. Cookie, about a year. Necessary.
  • Theme. Light, dark or system. Local storage. Necessary.
  • Announcement dismiss. Local storage. Necessary.
  • artifluence-consent. Whether you accepted or declined analytics. Local storage. Necessary (it stores the answer, not a tracker).
  • Google Analytics cookies. Only after accept, and only if analytics is configured. Audience measurement. Consent.
  • Google Places / Maps. Set by Google when the business picker runs. Necessary for that lookup.
  • Google reCAPTCHA. Set by Google when you start filling in the contact form. Necessary to keep that form from becoming a spam relay.
  • Cal.com. Set by the booking calendar if you open a demo. Pre-contract.

The product on app.artifluence.com sets its own session and preference cookies so you can stay signed in. Those are necessary for the account.

Who else sees it

We do not sell your data. We use companies that process it for us, for a specific job:

  • Google Cloud / Firebase — hosting, authentication, database, files, functions, in the EU.
  • Google — Places, Maps and reCAPTCHA on the site; Business Profile, Gemini and (if you accept) Analytics.
  • Meta — Facebook and Instagram, when you connect them.
  • Pinterest — when you connect it.
  • bundle.social — publishing and the OAuth tokens for those networks.
  • Stripe — subscriptions, tax and invoices.
  • Mailtrap — transactional email.
  • Cal.com — demo bookings.
  • SearchApi, Scrappa, Olostep — public listing and competitor facts, so the audit and the local view have something to show.
  • Brandfetch — a logo when we can find one.
  • Pexels and Pixabay — stock you may pick in the product.
  • Cloudflare — custom domains on websites the product publishes.

Each of them only gets what that job needs.

How long we keep it

  • Site logs: a few weeks, unless we need them longer for an incident.
  • Consent, language, theme: until you clear them, or they expire.
  • Contact messages: as long as the conversation is open, then a limited archive.
  • Newsletter: until you unsubscribe, then we suppress the address so we do not write again by mistake.
  • Demo bookings: as long as Cal.com keeps the event, and a short note on our side that we met.
  • Product account: for the life of the workspace, then until you delete it or ask us to. Billing records are kept for the period French accounting law requires.
  • Backups: a rolling window, then they age out.

Your rights

You can ask us to access, correct, delete or export the data we hold, or to restrict or object to some of the processing. Where we rely on consent, you can withdraw it. Write to contact@artifluence.com. We will answer as a person, within a month.

You can also complain to the CNIL (Commission nationale de l'informatique et des libertés), 3 Place de Fontenoy, 75007 Paris, cnil.fr.

Children

Artifluence is for professionals. The site and the product are not aimed at anyone under 18, and we do not knowingly collect data from children.

Changes

If this policy changes in a way that actually affects you, we will update the date at the top and, for subscribers, say so in the product. The version on this page is the one in force.

How to reach us

ARTIFLUENCE, 4 rue Marcel Carné, 44115 Basse-Goulaine, France. contact@artifluence.com. +33 2 21 65 24 32.

The terms and conditions cover the subscription, the twelve-month commitment and what you can do with the product.