cat PRIVACY.md
Privacy Policy
Last updated: November 8, 2026
This policy explains what personal data Artelo collects, why, who it is shared with and what your rights are. It covers the website artelo.space, founding reservations, purchases and support.
Data controller: Individual Entrepreneur RomarioDeveloper, the Republic of Kazakhstan ("Artelo", "we", "us").
Contact for privacy questions: hello@artelo.space
The short version: we collect as little as we can, we use no cookies for analytics, we never sell your data, and you can ask us to delete it at any time.
1. What we collect and why
1.1 Founding reservation and the optional profile form
When you reserve a founding spot, we collect:
- your email address;
- the plan you are interested in (Solo, Team, Setup or unsure).
If you then fill in the optional profile step, we also collect:
- your role (Freelancer, Agency, Indie hacker or Other);
- the AI coding agents you use;
- which recipe you would like next.
If you arrived through a link with campaign tags, we also record those tags (utm_source, utm_medium, utm_campaign, ref), so we know which post or channel brought you.
Why: to email you when early access opens, to offer you the founding price, and to decide which features to build first.
Devlog signup. If you sign up for the devlog instead, we collect your email address (and campaign tags, as above). Why: to email you Artelo build updates, such as the first full recipe run. Nothing else.
How submissions are handled: each reservation, profile or devlog submission is sent as a message to a private Telegram chat that only the founder can read and, if enabled, as an email to the founder's mailbox through our email delivery provider (see Section 3). We do not run a separate database for submissions. We may copy your email and answers into our own private list to follow up with you.
IP address: when you submit the form, your IP address is used briefly in server memory to limit abuse (no more than 5 submissions per minute). We do not store it with your submission.
1.2 Purchases
When you buy a license, payment is handled by our reseller and merchant of record, Polar Software, Inc. ("Polar"). Polar collects your name, email, billing address, payment details and tax information under its own privacy policy. Card details are processed by Polar's payment processor and never reach us.
From Polar we receive your name, email, country, order details (plan, amount, date, refunds) and the GitHub username you connect at checkout.
Why: to deliver the Product, give you access to the private repository, provide updates and support, handle refunds, and keep accounting records.
1.3 Repository access (GitHub)
The Product is delivered as access to a private GitHub repository. To grant access, your GitHub username is added to the repository. GitHub processes your activity there under the GitHub Privacy Statement. We can see your GitHub username and your activity in the repository (for example, issues you open).
1.4 Emails you send us
If you email hello@artelo.space, we receive your email address, the message and anything you attach. Mail to this address is forwarded by our domain provider to the founder's mailbox.
Why: to answer you.
1.5 Website analytics (no cookies)
We use Plausible Analytics, a privacy-focused tool. It does not use cookies and does not create persistent identifiers. It records page views and a few anonymous events (such as clicking a button, choosing a plan, clicking a buy button, reaching the thank-you page after payment, starting or submitting the form, copying a share link, and viewing a section of the page), together with the referrer, campaign tags, browser, operating system, device type and approximate location (country, region, city).
Plausible counts unique visitors with a daily hash of the IP address and browser user agent, using a random salt that is deleted every 24 hours. Raw IP addresses are not stored. Data is processed and stored in the EU. Details: plausible.io/data-policy.
Why: to understand which pages and channels work, without tracking you.
1.6 Hosting and security logs
Our website is hosted on Vercel. Like any web host, Vercel processes technical request data (such as IP address, browser and requested URL) to deliver the site and keep it secure, and may keep short-lived logs.
1.7 GitHub Discussions
Customers can ask questions in the GitHub Discussions of the private repository. GitHub processes that activity under its own privacy statement (see Section 1.3). We see the profile information you choose to show there.
What we do not do
- We do not use advertising or tracking cookies, pixels or fingerprinting.
- We do not sell, rent or trade personal data.
- We do not see your AI provider API keys. Artelo runs locally on your machine, and your code and keys stay with you.
- We do not add you to a marketing newsletter you did not ask for. A reservation means we email you about Artelo early access and the founding offer only. A devlog signup means we email you Artelo build updates only. Reply "unsubscribe" at any time and we will stop.
2. Legal bases (for visitors in the EU, UK and similar jurisdictions)
- Steps before a contract / your request: handling your reservation and emailing you when access opens, and sending the devlog you asked for.
- Contract: delivering your license, repository access, updates and support.
- Legal obligation: keeping purchase and tax records.
- Legitimate interests: cookieless aggregate analytics, preventing abuse of our forms, and answering your emails.
- Consent: the optional profile answers. You can withdraw consent at any time by emailing us.
3. Who we share data with
We share data only with the services needed to run Artelo:
| Service | What for | Where |
|---|---|---|
| Telegram (Telegram Messenger Inc.) | Delivers reservation, profile and devlog submissions to the founder's private chat | Telegram's data centers (cloud chats are stored encrypted) |
| Resend (if enabled) | Emails the same submissions to the founder's mailbox | USA |
| Polar Software, Inc. and its payment processor | Checkout, payments, tax, receipts, refunds, repository access automation | USA |
| GitHub, Inc. | Hosting the private repository you get access to | USA |
| Vercel Inc. | Website hosting | USA and global edge network |
| Plausible Analytics | Cookieless website statistics | EU |
| Our domain and email forwarding provider | Forwarding mail sent to hello@artelo.space | USA |
We may also disclose data if the law requires it, or to protect our rights in a dispute. If Artelo is ever sold or transferred, your data would move with it under this policy, and we would tell you first.
4. International transfers
We are based in the Republic of Kazakhstan. Several of our providers are in the United States or elsewhere. Your data may be processed outside your country. Where the law requires it, we rely on the providers' standard contractual clauses or equivalent safeguards.
5. How long we keep data
- Reservations and profile answers: until early access opens plus 12 months, or until you ask us to delete them, whichever is sooner.
- Devlog signups: until you unsubscribe or ask us to delete your email.
- Purchase records: for as long as tax and accounting law requires (Polar keeps its own records as merchant of record).
- Repository access: while your license is active. Access is removed if you get a refund.
- Emails: as long as needed to help you, then deleted periodically.
- Analytics: Plausible keeps only aggregated statistics, without raw IP addresses.
6. Your rights
Depending on where you live, you can ask us to:
- tell you what data we hold about you and give you a copy;
- correct it;
- delete it;
- stop or restrict processing, or object to it;
- send it to you in a portable format;
- withdraw consent you gave.
Email hello@artelo.space from the address you used with us. We will reply within 30 days. Deleting data you gave at checkout may also require a request to Polar, and we will help you with it.
You also have the right to complain to the data protection authority in your country.
7. Security
We limit access to personal data to the founder, use providers with strong security practices, and use two-factor authentication on the accounts that hold your data. No system is perfectly secure. If a breach affects your data, we will tell you as the law requires.
8. Children
Artelo is a professional tool for developers. It is not intended for anyone under 16, and we do not knowingly collect their data.
9. Changes
If we change how we use your data (for example, if we add a newsletter or a database), we will update this page before the change takes effect and update the date at the top. For significant changes affecting customers, we will also email you.
10. Contact
Individual Entrepreneur RomarioDeveloper, the Republic of Kazakhstan
Email: hello@artelo.space
Related: Terms of Service · Refund Policy