Privacy Notice

Artificial Outlook (the "Service") is operated by Artificial Outlook ("we", "us", "our"). For personal data we collect from you in connection with the Service, we act as the data controller.

We collect the following categories of personal data:

• Account data: name, email address, authentication identifiers from Google or Apple sign-in, profile image.
• Authentication & session data: login timestamps, session tokens, device and browser identifiers, IP address.
• Usage & telemetry: pages viewed, features used, timestamps, referrer, and other diagnostic information.
• Support communications: messages you send us and our responses.
• Subscription metadata: tier, billing interval, status, period dates. Payment card details are collected and stored by Paddle — we never see them.

• Paddle — our Merchant of Record. Paddle handles checkout, payments, billing, subscription management, tax compliance, invoicing, and refunds. See Paddle's Privacy Notice.
• Infrastructure & hosting providers — including Supabase (database, authentication) and Cloudflare (edge hosting).
• Identity providers — Google and Apple, when you sign in via OAuth.
• Analytics tooling — to measure feature usage and improve the Service.
• Professional advisers — legal, accounting, and similar advisers when needed.
• Authorities — where required by law, court order, or to protect our rights.

We do not sell your personal data.

Some of our service providers operate outside the UK and EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions where applicable.

We retain personal data for as long as your account is active and as needed to provide the Service. After account closure we delete or anonymise personal data within a reasonable period, except where we are required to retain it for legal, tax, accounting, or fraud-prevention reasons (typically up to 7 years for billing records held by Paddle).

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you;
• Request correction or deletion;
• Restrict or object to certain processing;
• Request portability of data you provided to us;
• Withdraw consent at any time where processing is based on consent;
• Lodge a complaint with your data-protection supervisory authority.

To exercise these rights, contact us through the in-product support channel. We will respond within one month.

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), access controls, and least-privilege service credentials. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

We use cookies and local storage that are essential for the Service to function — for example, to keep you signed in. We may use a limited number of analytics cookies to understand product usage. We do not use cookies for cross-site advertising. You can manage cookies through your browser settings.

The Service is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this notice from time to time. Material changes will be communicated through the Service or by email.

For privacy questions or to exercise your rights, contact us through the in-product support channel. For payment-related data held by Paddle, contact Paddle at paddle.net.