Privacy Policy
1. Who is responsible for your data
ARTEZIQ is the controller of personal information collected directly through this website and the ARTEZIQ Explorer Program. ARTEZIQ is based in the United States. Privacy questions and requests may be sent to arteziq.apps@gmail.com.
2. What this policy covers
This policy covers arteziq.com, ARTEZIQ application-information pages, the Explorer Program application/NDA workflow, ARTEZIQ surveys hosted on this site, and the optional Google Analytics measurement described below. Individual ARTEZIQ apps may have additional privacy notices if their features collect different information.
3. Information we collect
Website analytics and regional consent
When analytics is active—automatically in countries where consent is not required, or following an affirmative choice in the EEA, UK, and Switzerland—Google Analytics 4 (GA4) may process information such as page URLs, referring pages, campaign parameters (for example UTM source/medium/campaign), browser/device information, approximate location derived by Google, and non-identifying interaction events such as an app link click or a successful Explorer submission. ARTEZIQ does not intentionally send names, email addresses, phone numbers, signatures, NDA text, or free-form Explorer responses to GA4.
Explorer Program applications and NDAs
The Explorer form currently collects:
- full name, email address, phone number, city/state, and preferred contact method;
- primary testing device and a description of relevant experience/intended use;
- the app being tested;
- NDA name, NDA email, acceptance date, handwritten signature, agreement ID, and signing timestamp;
- browser user-agent information and limited form-timing/rate-limit data used to prevent abuse.
Explorer applicants must confirm that they are at least 18 years old. ARTEZIQ does not ask applicants to provide special-category personal data and applicants should not include sensitive personal information in free-form responses unless it is genuinely necessary.
Surveys
ARTEZIQ surveys may collect responses, comments, and—when requested or voluntarily provided—name and email address. Survey pages may also send limited browser and anti-abuse timing information to the survey backend. Survey responses are not sent to GA4.
4. Why we use this information and our legal bases
| Purpose | Typical legal basis where GDPR/UK GDPR applies |
|---|---|
| Reviewing an Explorer request, contacting an applicant, administering testing, and creating/administering the NDA | Steps taken at your request before entering an Explorer relationship and performance/administration of that relationship or agreement |
| Security, anti-spam, rate limiting, troubleshooting, and protecting ARTEZIQ systems | ARTEZIQ’s legitimate interests in operating a secure and reliable service |
| Website analytics and campaign measurement | Consent where required, including for EEA/UK/Swiss analytics cookies and similar technologies |
| Keeping records needed to establish, exercise, or defend legal rights or comply with law | Legal obligation and/or legitimate interests, as applicable |
| Product research through surveys | Legitimate interests and, where required, consent |
You may withdraw analytics consent or opt out at any time. In the EEA, UK, and Switzerland use the Privacy & Analytics link displayed on the site. Visitors elsewhere can use the Open analytics preferences link in Section 10 below. Withdrawal does not affect processing that occurred before withdrawal.
5. Where information is processed and stored
The public website is served through GitHub Pages and uses a Porkbun-registered domain. Explorer and survey submissions are transmitted to Google Apps Script endpoints operated under ARTEZIQ’s Google account.
For Explorer submissions, the current backend generates/transmits the submitted application and signed NDA PDF through Google’s email services. A signed NDA copy is emailed to the applicant, and an application summary plus the signed NDA is emailed to ARTEZIQ’s administrative mailbox. The current backend code does not intentionally write Explorer form responses or signed PDFs to a separate database or Google Drive folder. Copies are therefore retained primarily in the relevant email accounts unless ARTEZIQ later implements an additional storage system.
The anti-abuse rate-limit cache is temporary. ARTEZIQ’s Explorer backend uses a non-reversible hash for the rate-limit key and keeps that temporary cache entry for approximately 15 minutes.
6. Who receives information
Personal information may be received by:
- authorized ARTEZIQ personnel who need it to administer the Explorer Program or surveys;
- Google, as the service provider supporting Apps Script, email delivery, and—only after consent—Google Analytics;
- GitHub, as the website-hosting provider, for normal hosting/security logs and technical delivery;
- the applicant, who receives their own signed NDA copy;
- government authorities, courts, advisers, or other recipients where disclosure is required by law or reasonably necessary to establish, exercise, or defend legal claims.
ARTEZIQ does not sell Explorer application data or signed NDAs.
7. International transfers
ARTEZIQ is based in the United States, so information submitted by a person in the EEA, United Kingdom, or Switzerland may be processed in the United States and other locations used by ARTEZIQ’s service providers. Where data-protection law requires a transfer safeguard, ARTEZIQ relies on applicable transfer mechanisms made available by its service providers, such as adequacy frameworks and/or standard contractual clauses where available.
8. How long we retain information
- Explorer applications and ARTEZIQ’s copy of signed NDAs: normally for the duration of the Explorer relationship plus 3 years, then deleted unless a longer period is reasonably necessary for a legal claim, legal obligation, or active dispute.
- Explorer anti-abuse rate-limit cache: approximately 15 minutes.
- Survey responses: normally up to 24 months, unless a shorter period is sufficient or a longer period is needed for documented research or legal purposes.
- Analytics: controlled by ARTEZIQ’s GA4 retention settings. ARTEZIQ intends to use a limited retention period and does not use GA4 to store Explorer form content.
The applicant’s emailed copy of a signed NDA is under the applicant’s control. Backup systems may retain deleted information for a limited period before normal backup rotation completes.
9. Your privacy rights
Depending on where you live, you may have rights to request access to your personal information, correction, deletion, restriction of processing, objection to certain processing, and portability. Where processing is based on consent, you may withdraw consent at any time.
Send requests to arteziq.apps@gmail.com with enough information for ARTEZIQ to identify the relevant record. ARTEZIQ may need to verify your identity before completing a request. Where GDPR/UK GDPR applies, ARTEZIQ will normally respond without undue delay and within one month, subject to lawful extensions.
People in the EEA/UK also have the right to complain to the data-protection authority responsible for their location. ARTEZIQ asks that you contact us first when practical so we have an opportunity to address the concern.
10. Analytics choice, regional detection, and local storage
ARTEZIQ uses a coarse country lookup to decide whether the stricter analytics-consent flow should be shown. The site requests a country determination from Country.is (api.country.is) on each page visit. Like any Internet request, the visitor’s IP address is visible to that service while the request is processed. ARTEZIQ does not store the returned IP address and does not cache the regional classification in the visitor’s browser. The country is checked again on each page load so a VPN change or international travel does not reuse a previous country result. Country.is states that its public service does not log requests.
For visitors detected in the EEA, United Kingdom, or Switzerland, Google Analytics does not load until the visitor chooses Allow analytics. For visitors outside those regions, GA4 may load automatically unless the visitor has previously declined analytics. If the country cannot be determined, ARTEZIQ does not load GA4 and does not display the automatic consent interface. This avoids incorrectly treating an EEA/UK/Swiss visitor as outside the consent-required regions.
Visitors in the EEA, United Kingdom, or Switzerland are shown a centered Privacy & Analytics text link immediately above the site copyright so they can change their analytics choice. Advertising storage, ad-user-data, and ad-personalization signals remain denied by ARTEZIQ’s site configuration.
To change your analytics choice at any time, open analytics preferences.
11. Children
The Explorer Program is intended for adults age 18 or older. ARTEZIQ does not knowingly accept Explorer NDAs from children. If you believe a child has submitted personal information, contact ARTEZIQ so the information can be reviewed and deleted where appropriate.
12. Automated decision-making
ARTEZIQ does not use the Explorer application data described in this policy for solely automated decisions that produce legal or similarly significant effects.
13. Changes to this policy
ARTEZIQ may update this policy as the website, analytics, apps, or Explorer Program change. The effective date and version at the top of this page identify the current published notice.