Privacy Policy
Last updated: 09/09/2026
Key takeaways
- Your artworks are never used to train AI models
- Cookie-free analytics to respect your privacy
- No card data stored (handled by Stripe)
- All your GDPR rights are respected
1 Data Controller
DE BARDON DE SEGONZAC ARNAUD (EI) — MycreArt
Entrepreneur individuel
Address: 10 rue Simone de Beauvoir, 94140 Alfortville, France
Contact: Contact form
2 Data Collected
Registration
- Username
- Password (hashed)
Artist profile
- Last name, first name, address
- Phone, SIRET (optional)
- Photo, biography
Artworks
- Images
- Titles, descriptions
- Prices, commercial information
Browsing
- IP address — security and anti-fraud only
- Session cookie — only if you log in
- Login logs — security
Payment data: processed exclusively by Stripe. MycreArt does not store any credit card data.
3 Why we use your data
| Purpose | Legal basis |
|---|---|
| Account management | Contract |
| Portfolio display | Contract |
| Payments | Contract |
| Image analysis | Contract |
| Security / anti-fraud | Legitimate interest |
| Service improvement | Legitimate interest |
| Newsletter / marketing | Consent |
4 Who we share your data with
OVH SAS
Hosting (dedicated server) - France
Stripe
Payments - USA (SCCs)
Google Vertex AI
Image analysis - USA (SCCs)
BunnyCDN
Images - Europe
Cloudflare Turnstile
Anti-spam (captcha) - USA (SCCs)
Mailjet
Email delivery - EU
SCCs = Standard Contractual Clauses approved by the European Commission for transfers outside the EU.
5 Data retention
Issued certificates of authenticity are retained on a durable basis, including certain personal data they contain (name, city, any SIRET number), in order to preserve their evidentiary value over time. Sales and subscription data are kept for 10 years under accounting obligations (Article L123-22 of the French Commercial Code). Stripe payment identifiers are kept for the duration of the contractual relationship.
6 Your GDPR rights
CSV export of your artworks and sales from your dashboard; portability of other data on request. Account deletion or anonymization at any time, except for data retained under a legal obligation or for the evidentiary value of certificates.
To exercise your rights: Contact us
If, after contacting us, you believe that your data protection rights have not been respected, you may lodge a complaint with the CNIL (French data protection authority): www.cnil.fr
8 Image analysis Guaranteed protection
Your artworks are NEVER used to train artificial intelligence models
Your images are never used to train artificial intelligence. MycreArt does not do it and does not allow any third party to do it. Our image-analysis tool relies on Google Vertex AI, whose enterprise terms likewise prohibit any model training on your content.
Here are our guarantees:
- Temporary transmission for analysis only
- No permanent storage on Google's side
- Zero use for AI training
- Enhanced privacy settings (Vertex AI)
9 Data security
10 Contact
For any questions about your personal data:
Contact us