Last updated: 11 October 2026.<\/p>\n\n\n\n
This notice explains how we process personal data when you visit archademediamanager.com and when you use the Archade Media Manager service (https:\/\/app.archademediamanager.com), under Regulation (EU) 2016\/679 (GDPR).<\/p>\n\n\n\n
The controller is Archade Design Solutions di Carlo Maria Crespi Perellino, Via Santo Stefano 23, 40125 Bologna (BO), Italy, VAT no. 04249951205, REA BO 580050, email studio@archadedesign.com<\/a>, certified email (PEC) archadedesignsolutions@pec.it<\/a>, telephone +39 351 499 9599. We have not appointed a data protection officer (DPO): for any request write to the email or PEC address above.<\/p>\n\n\n\n The website does not use profiling cookies, statistics or advertising tools: it only uses the technical cookies described in the Cookie policy<\/a>. The body text uses a font hosted on our server; the headings use a font served by Adobe Fonts (Adobe), which receives the IP address and technical browser data to deliver it, without using cookies (Adobe Fonts privacy notice<\/a>). For security and operation the server technically logs IP address, browser and requested pages; these logs are kept for a limited period and are not used to profile you.<\/p>\n\n\n\n If you write to us by email we use your address and what you tell us only to reply to you. Legal basis: pre-contractual measures you requested or our legitimate interest in replying. We keep the correspondence for as long as needed to handle the request and any relationship that follows.<\/p>\n\n\n\n When you create an account we process your name, work email, password (stored only as an encrypted hash that nobody can read), company details (company name, VAT number, tax code, registered office, PEC, recipient code), the consents you give (document, version, date, time, IP address and browser), login dates, connected devices (browser, IP address, last activity) and the details of the people you invite to your profile (email, name, role). If you turn on two-step verification we keep the key in encrypted form and the recovery codes only as a hash. Legal basis: performance of the contract; for the consent log also our legitimate interest in proving acceptance of the terms.<\/p>\n\n\n\n For security we also log failed login attempts (to block anyone trying to guess passwords) and, if you ask to recover your password, a single-use link valid for one hour. Legal basis: legitimate interest in the security of the service.<\/p>\n\n\n\n You connect your social profiles through each platform\u2019s official login. We ask for the permissions needed to read the list of your pages and profiles, to publish the content you schedule and to read its results. We process:<\/p>\n\n\n\n We only publish the content you schedule, at the time you choose. Uploaded files are reachable through unguessable addresses so that the platforms can download them at the time of publication. We do not sell the data and we do not use it for advertising.<\/p>\n\n\n\n Data received from Google APIs (YouTube).<\/strong> The use and transfer to other applications of information received from Google APIs complies with the Google API Services User Data Policy<\/a>, including the Limited Use requirements. Archade Media Manager\u2019s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.<\/p>\n\n\n\n YouTube API Services. If you connect a YouTube channel, Archade Media Manager uses the YouTube API Services: by connecting it you accept the YouTube Terms of Service<\/a> and your data is also covered by the Google Privacy Policy<\/a>. You can revoke access at any time from the app or from the Google permissions page<\/a>. After revocation from the app we delete the data received from YouTube within 7 days; if you revoke from the Google page, within 30 days. Data received from YouTube is refreshed or deleted at least every 30 days, as long as the authorisation remains valid. For questions write to studio@archadedesign.com<\/a>.<\/p>\n\n\n\n Platform rules. We process the data received from Meta, LinkedIn and Pinterest only on behalf of the customer who connected the account, keeping it separate by organisation, and we keep it only for as long as each platform\u2019s rules allow. We do not sell, transfer or use this data for advertising or to profile people.<\/p>\n\n\n\n The Adviser reads your profile\u2019s numbers and suggests tips using automatic rules, on our server. Answers to open-ended questions are generated by an artificial intelligence system, and the app says so. For these answers, the question you write and a summary of the profile\u2019s numbers (not the access keys, not the data of individual people) are sent to Anthropic, which provides the Claude model and acts as our data processor; Anthropic does not use this data to train its models. Questions and answers stay in your profile so you can review the latest ones. Do not include unnecessary personal data in your questions.<\/p>\n\n\n\n If you start a subscription, payment takes place on Stripe (Stripe Payments Europe Ltd., Ireland), which processes the card details as an independent controller: we do not see or store the card number. We receive from Stripe the name, email, billing address, any VAT number, and the status of the subscription and payments. Legal basis: performance of the contract and tax obligations. Billing data is kept for 10 years as required by law (art. 2220 of the Italian Civil Code). Stripe privacy notice<\/a>.<\/p>\n\n\n\nThe website<\/h2>\n\n\n\n
The Archade Media Manager account<\/h2>\n\n\n\n
The content and profiles you connect<\/h2>\n\n\n\n
\n
The Adviser<\/h2>\n\n\n\n
Subscription and payments<\/h2>\n\n\n\n
Who processes data on our behalf<\/h2>\n\n\n\n