Privacy Policy

1. Introduction

Welcome to Atiscon. We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Platform.

2. Information We Collect

2.1 Information You Provide

When you create an account and use our Platform, we collect:

• Account Information: Email address, username, password, full name
• Profile Information: Bio, avatar/profile picture, location, website URL, social media links
• Creator Profiles: Display name, category, collaboration rates, portfolio items, media kit, follower counts, engagement rates
• Brand Profiles: Company name, industry, logo, company description
• Payment Information: Stripe account details (we do not store credit card numbers)
• Communications: Messages, collaboration requests, support inquiries
• Content: Services you offer, projects you post, bio links, portfolio items

2.2 Information Collected Automatically

When you use our Platform, we automatically collect:

• Usage Data: Pages viewed, features used, actions taken, time spent on pages
• Device Information: IP address, browser type, operating system, device type
• Analytics Data: Profile views, link clicks, visitor demographics, referral sources
• Location Data: Country, city (approximate location based on IP address)
• Cookies: Session cookies, preference cookies, analytics cookies

2.3 Information from Third Parties

We may receive information from:

• Google OAuth: If you sign up using Google (email, name, profile picture)
• Stripe: Payment processing information, transaction details, payout status

3. How We Use Your Information

We use your information to:

3.1 Provide Our Services

• Create and manage your account
• Enable you to create profiles, offer services, and post projects
• Facilitate transactions between creators and brands
• Process payments through Stripe
• Enable messaging and collaboration features
• Display your public profile and portfolio

3.2 Improve Our Platform

• Analyze usage patterns to enhance user experience
• Develop new features and services
• Fix bugs and technical issues
• Conduct research and analytics

3.3 Communicate With You

• Send transactional emails (order confirmations, payment notifications)
• Respond to your support requests
• Send important platform updates and policy changes
• Notify you of collaboration requests and messages

3.4 Ensure Security and Compliance

• Prevent fraud and abuse
• Enforce our Terms of Service
• Comply with legal obligations
• Protect user safety and platform integrity

4. How We Share Your Information

We only share your information in the following limited circumstances:

4.1 Public Information

Information you choose to make public is visible to others:

• Your public profile (username, bio, avatar, portfolio)
• Services you offer in the marketplace
• Projects you post (for brands)
• Bio links and social media connections
• Public reviews and ratings

4.2 Service Providers

We share data with trusted service providers who help us operate:

• Stripe: Payment processing and payouts (subject to Stripe's privacy policy)
• Cloud Hosting: Secure data storage and hosting services
• Email Services: Transactional email delivery
• Analytics Tools: Anonymous usage analytics

These providers are contractually obligated to protect your data and only use it for specified purposes.

4.3 Legal Requirements

We may disclose information if required by law or to:

• Comply with legal processes (subpoenas, court orders)
• Respond to government requests
• Enforce our Terms of Service
• Protect our rights, property, or safety
• Prevent fraud or illegal activities

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner, but this policy will continue to apply.

4.5 With Your Consent

We may share information with third parties when you give us explicit permission.

5. Data Storage and Security

5.1 Where We Store Your Data

Your data is stored on secure servers. We use industry-standard security measures including:

• SSL/TLS encryption for data transmission
• Encrypted database storage
• Secure password hashing
• Regular security audits
• Access controls and authentication

5.2 How Long We Keep Your Data

We retain your information for as long as your account is active or as needed to provide services. After account deletion:

• Most personal data is deleted within 30 days
• Transaction records are retained for 7 years for legal/tax compliance
• Analytics data is anonymized and retained indefinitely
• Backup copies are deleted within 90 days

5.3 Security Measures

While we implement strong security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your data.

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device. We use cookies to:

• Keep you logged in
• Remember your preferences
• Understand how you use our Platform
• Improve performance and security

6.2 Types of Cookies We Use

• Essential Cookies: Required for basic functionality (login, sessions)
• Analytics Cookies: Help us understand usage patterns
• Preference Cookies: Remember your settings and choices

6.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect Platform functionality.

7. Your Privacy Rights

You have the following rights regarding your personal data:

7.1 Access and Portability

• Access: Request a copy of your personal data
• Portability: Receive your data in a machine-readable format

7.2 Correction and Deletion

• Correction: Update incorrect or incomplete information in your account settings
• Deletion: Request deletion of your account and personal data

7.3 Control and Restriction

• Opt-Out: Unsubscribe from marketing emails (transactional emails cannot be disabled)
• Restriction: Request limitation of processing in certain circumstances
• Object: Object to processing based on legitimate interests

7.4 How to Exercise Your Rights

To exercise these rights, contact us at support@atiscon.com. We will respond within 30 days.

8. Children's Privacy

Atiscon is not intended for users under 18 years of age.

We do not knowingly collect personal information from anyone under 18. If we discover that we have collected data from someone under 18, we will delete it immediately.

If you believe a child under 18 has provided us with personal information, please contact us at support@atiscon.com.

9. Third-Party Services

9.1 Stripe

We use Stripe for payment processing. When you make a payment or connect your Stripe account:

• Stripe collects and processes payment information
• Stripe's Privacy Policy applies to their processing of your data
• We do not store full credit card numbers

9.2 Google OAuth

If you sign up using Google, we receive basic profile information (email, name, profile picture) as permitted by Google's OAuth policies.

9.3 External Links

Our Platform may contain links to external websites. We are not responsible for the privacy practices of third-party sites.

10. International Data Transfers

Our servers are located in various locations. If you access our Platform from outside France, your data may be transferred to and processed in other countries.

We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws, including GDPR for European users.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date
• We will notify you via email or platform notification for material changes
• Your continued use constitutes acceptance of the updated policy

We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data:

13. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

13.1 Legal Basis for Processing

We process your personal data based on:

• Consent: You have given clear consent for specific purposes
• Contract: Processing is necessary to fulfill our contract with you
• Legal Obligation: We must comply with legal requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests

13.2 Your GDPR Rights

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority