Privacy policy

Data controller: ArtisWeb Digital Agency. Data-protection enquiries: [email protected].

Registered address: 1043 BV, Amsterdam, Netherlands.

Chamber of Commerce (KvK) number: 93937423.

VAT identification number: NL005053046B42.

We collect account and contact data such as email address, name where provided, password credentials in hashed form, support messages, and communication preferences.

We collect check and report data such as the confirmed parcel identifier, its mapped area and boundary, the coordinates used to find it, optional address or property context, intended use, the selected plan, generated report facts, source metadata, share-link settings, and terms-acceptance records.

We collect payment and transaction data such as checkout email, Stripe customer/session/payment references, amount, currency, tax information where available, refund status, and invoice or receipt references. We do not store full payment-card numbers.

We collect technical data such as IP address, browser/device information, request logs, security events, cookie preferences, locale, and approximate timestamps needed to operate, secure, and troubleshoot the service.

We use personal data to provide the website, generate and deliver reports, process checkout, maintain accounts, remember report access, provide support, handle refunds, secure the service, prevent abuse, maintain audit records, and comply with legal obligations.

We may use aggregated or de-identified operational data to improve reliability, data coverage, product quality, and support workflows. We do not sell personal data.

A few days after your report is ready we send one email asking for feedback, based on our legitimate interest in improving the service. It contains no advertising, and we send no further reminders. We quote a reply on the website only if you say yes in writing, and only with your first name and area.

Contract performance: to create accounts, process checkouts, generate reports, provide share-link access, and deliver support you request.

Legitimate interests: to secure the service, prevent fraud and abuse, debug incidents, improve reliability, and maintain limited business records, balanced against your rights.

Legal obligation: to retain records required for tax, accounting, consumer, dispute, regulatory, or compliance purposes.

Consent: for audience statistics, ad measurement, optional communications, and the non-essential cookies and browser storage they use. You can withdraw consent at any time from Cookie settings in the footer. Withdrawal does not affect processing that took place before it.

We use service providers for hosting, database infrastructure, email delivery, payment processing, analytics or error monitoring where enabled, support tooling, and storage/backups. These providers process data on our behalf or as independent controllers where their own terms apply.

Payment processing is handled by Stripe. Stripe may process payment and fraud-prevention data under its own terms and privacy notices.

Audience statistics are handled by PostHog (PostHog Inc., EU Cloud hosted in Frankfurt, Germany) as our processor, only after you accept audience statistics. Until then the PostHog script does not load. Addresses, parcel identifiers, coordinates, email addresses, and private link tokens are removed from page addresses before they are sent. On the check and checkout pages PostHog may record a screen replay in which page text and form fields are hidden. With the same consent PostHog also receives click positions (not what was clicked), page loading speed, technical error reports with personal details removed, and your answer if you reply to a short optional question on the checkout page. Separately, our server sends PostHog technical error reports with personal details removed and no link to you, so we can keep the service working.

Ad measurement is used only if you accept it and arrived from a Google or Meta ad. We then tell that platform that the visit ended in a purchase, with its amount and an order code that does not reveal your name, email, or property. Google Ads receives this from your browser through its conversion tag. Meta receives it from our server through its Conversions API, together with the ad click identifier, your IP address, and your browser's user agent, which we delete once the purchase has been reported. For this collection and transfer we and the platform act as joint controllers; Google (Google Ireland Limited) and Meta (Meta Platforms Ireland Limited) then process the data as independent controllers under their own privacy policies. We do not build retargeting audiences.

We may disclose data if required by law, court order, competent authority, payment dispute process, security investigation, or to protect the rights and safety of users, advisors, the service operator, or others.

Where personal data is transferred outside the European Economic Area, we rely on recognised safeguards such as adequacy decisions, Standard Contractual Clauses, provider transfer addenda, or another lawful transfer mechanism.

PostHog stores our statistics in the EU; its US parent company may access them under the EU-US Data Privacy Framework and Standard Contractual Clauses. Google and Meta may transfer ad measurement data to the United States under the EU-US Data Privacy Framework.

Protected share links expire after 90 days.

A report and the contact email stored with that check are kept for 24 months after the report is generated, unless you ask us to delete them sooner. Account data is kept while the account is open and for 24 months after it is closed.

Payment, invoice, and refund records are kept separately for the period required by Greek tax and accounting law. They are not used for marketing.

Application logs are kept for 90 days. Backups are overwritten on the backup schedule and are not a separate long-term archive.

PostHog keeps audience statistics for up to 12 months and screen replays for up to 30 days. Campaign details saved with an order (such as the campaign name or ad click identifier) are kept with that check and deleted with it.

Audience statistics and ad measurement are used only if you accept them in the cookie banner. Guests can ask for a copy or deletion of a check by emailing the checkout address and including the report reference. Deletion removes the report and contact email. It does not delete payment records that the law requires us to keep.

We use essential cookies and browser storage for session management, authentication, report access, security, locale preferences, and cookie-consent state.

Optional cookies and storage are used only with your consent, which you give separately for each purpose in the cookie banner. Audience statistics (PostHog): a browser storage entry holding a random identifier, kept for up to 12 months (no cookie). Ad measurement (Google Ads): Google's _gcl cookies, which remember an ad click for up to 90 days. For either purpose we also keep the campaign you arrived from and any ad click identifier in browser storage for up to 90 days, so a purchase on a later visit can be linked to it.

Choosing Essential only leaves essential cookies for session, language, and security. You can change or withdraw your choice at any time from Cookie settings in the footer; withdrawing removes the optional cookies and storage we set.

We apply technical and organisational measures designed to protect personal data, including access controls, hashed passwords, secure cookies for supported authentication flows, transport encryption, operational logging, and provider security controls.

No online service can guarantee absolute security. If you believe your account, report link, or personal data has been compromised, contact us promptly.

Subject to applicable law, you may request access, rectification, erasure, restriction, portability, objection to certain processing, or withdrawal of consent where processing is based on consent.

You may also lodge a complaint with the Hellenic Data Protection Authority or another competent supervisory authority. We may need to verify your identity before acting on a request.