Privacy Policy.
1. What we collect
Account information
When you register, we collect your first name, last name (optional), display name, email address, and password (stored as a secure hash). We also collect the preferences you set at signup: preferred language, how you heard about us, and the types of opportunities you're looking for.
Profile and usage data
When you use Arthead, we store the open calls you save, your application tracker entries, any notes or draft text you write, and files you upload to your material vault. We also record which features you use and how often, to improve the product.
Payment information
If you subscribe to a paid tier, your payment is processed by Stripe. We never see or store your full card number. We do retain your Stripe customer ID and subscription status to manage your account.
Emails and messages
If you contact us through the contact form or by email, we keep your message and email address to respond to you.
Analytics data
We use Google Analytics to understand how people use our site. This collects anonymized data including your approximate location, device type, browser, and which pages you visit. Your IP address is anonymized before storage. You can opt out using the Google Analytics opt-out browser add-on.
2. How we use your data
We use the information we collect to:
- Create and maintain your account
- Send you the newsletter and deadline reminders you've opted into
- Process payments and manage your subscription
- Respond to support requests and contact form messages
- Improve the site through aggregate analytics
- Detect and prevent fraud or abuse
We do not sell your personal data. We do not use your data to serve you third-party advertising.
3. Third-party services
We share data with the following trusted providers, only to the extent necessary to run the service:
- Supabase (US) — authentication, database, and file storage. Your data is stored on servers located in the United States.
- Stripe (Ireland/US) — payment processing and subscription management.
- Resend (US) — transactional email delivery (confirmation emails, deadline reminders, newsletter).
- Google Analytics (US) — anonymized site usage analytics.
- Vercel (US) — hosting and content delivery.
We do not share your data with any other third parties unless required by law.
5. Data retention
We keep your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required by law to retain certain records (for example, payment records for tax purposes, which we keep for 7 years).
Aggregated, anonymized analytics data may be retained indefinitely.
6. Your rights
You can, at any time:
- Access the personal data we hold about you
- Correct inaccurate data via your account settings
- Request deletion of your account and data
- Withdraw consent for optional data uses (newsletter, deadline reminders) via account settings
- Request a copy of your data in a portable format
To exercise any of these rights, email us at privacy@arthead.world. We will respond within 30 days.
7. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. That said, no system is perfectly secure. If you believe your account has been compromised, contact support@arthead.world immediately.
8. Age requirements
Arthead is not intended for anyone under the age of 16. We do not knowingly collect data from children. If you believe we have inadvertently collected data from a minor, please contact privacy@arthead.world and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the site before the change takes effect. The date at the top of this page always reflects the current version.
10. Contact
For privacy questions or requests, contact us at privacy@arthead.world. For general support, use support@arthead.world.
Arthead is a Canadian federal corporation operating from Toronto, Canada. This policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian provincial privacy laws.
