Privacy Policy

Last updated: March 20, 2026

Overview

Adaptivearts.ai ("we", "us", "our") is an independent AI research initiative operated by Fredrik Brattén, based in Sweden. This policy explains how we collect, use, and protect your information when you visit our website at adaptivearts.ai, in accordance with the EU General Data Protection Regulation (GDPR).

Data Controller

The data controller responsible for your personal data is:
Fredrik Brattén / Adaptivearts.ai
Sweden
Contact: contact@adaptivearts.ai

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Consent (Art. 6(1)(a)) - for newsletter subscriptions (double opt-in) and contact form submissions
• Contract performance (Art. 6(1)(b)) - for account creation and authentication necessary to provide our services
• Legitimate interest (Art. 6(1)(f)) - for basic server logging necessary for security and site operation

Information We Collect

Account Information

When you create an account or sign in using GitHub or Google, we receive:

• Email address - used to identify your account
• Display name - from your OAuth provider profile
• Profile picture URL - from your OAuth provider (not stored by us)

We do not access your repositories, contacts, files, or any data beyond basic profile information.

Newsletter Subscription

If you subscribe to our newsletter, we collect your email address and optionally your name. You can unsubscribe at any time via the link in every email.

Contact Form

When you submit the contact form, we receive your name, email, and message. This information is used solely to respond to your inquiry.

Automatically Collected Information

Our hosting provider may collect standard web server logs (IP address, browser type, pages visited). We do not use cookies for tracking or analytics. The only cookies used are essential authentication cookies required for sign-in functionality.

How We Use Your Information

• Authentication - to let you sign in and access your account
• Role-based access - to provide appropriate content access (admin, course member, etc.)
• Newsletter - to send updates if you've opted in (double opt-in required)
• Communication - to respond to contact form submissions

Third-Party Services

We use trusted third-party services for the following purposes:

• Authentication and database - hosted in Sweden (EU)
• Website hosting and CDN - static site delivery via a global content delivery network
• Social login providers - if you choose to sign in with a third-party account (e.g., GitHub or Google), the respective provider handles authentication
• Email delivery - contact form responses and newsletter emails are sent via a dedicated email service provider

All third-party providers are selected based on their compliance with applicable data protection regulations. Specific provider details are available upon request.

Data Storage and Security

Your data is stored in a managed database hosted in Sweden (EU). All data is encrypted in transit (TLS/HTTPS) and at rest. Row-level security policies ensure users can only access their own data. Admin access is restricted to authorized accounts.

Your Rights Under GDPR

As an EU resident, you have the following rights regarding your personal data:

• Right of access (Art. 15) - request a copy of your personal data
• Right to rectification (Art. 16) - correct inaccurate data
• Right to erasure (Art. 17) - request deletion of your data ("right to be forgotten")
• Right to restrict processing (Art. 18) - limit how we use your data
• Right to data portability (Art. 20) - receive your data in a machine-readable format
• Right to object (Art. 21) - object to processing based on legitimate interest
• Right to withdraw consent - for newsletter and contact form processing, at any time

To exercise these rights, contact us at contact@adaptivearts.ai. We will respond within 30 days.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.

International Data Transfers

Your primary data is stored in Sweden (EU). Some third-party services involved in hosting, authentication, and email delivery may process data outside the EU/EEA. These transfers are covered by Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework as applicable.

Data Retention

Account data is retained as long as your account is active. Newsletter subscription data is retained until you unsubscribe. Contact form messages are retained for up to 12 months. You can request deletion of your data at any time.

Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

For questions about this privacy policy or your data, contact us at contact@adaptivearts.ai.