Legal
Privacy Policy
How StudioNXT collects, uses, and protects your personal data.
1. Who We Are
StudioNXT is a living archive system for artists, operated by artNXT Company, Stuttgart, Germany.
Contact: contact@studionxt.art
2. What Data We Collect and Why
Account data
When you create an account we collect your name, email address, and a username. Legal basis: contract, necessary to operate your account.
Artist profile data
Practice type, mediums, country, career length, biography, and legacy contact details you choose to provide. Legal basis: contract.
Archive data
Artworks (title, medium, year, dimensions, classification, status, location, price, images), voice sessions (recordings, transcripts, summaries), contacts, tasks, documents (invoices, COAs, loan agreements), and works in progress. All archive data belongs to you. Legal basis: contract.
Mira AI assistant
When you use Mira, your messages and a summary of your archive context are sent to Anthropic's Claude API (United States). Anthropic does not train its models on API data. Legal basis: contract. Mira is a core feature of the service.
Contact form messages
When a visitor sends you a message through your public page, their name, email, and message are transmitted via Resend to your registered email. These messages are not stored in our database. Legal basis: legitimate interest of the artist in receiving enquiries.
Usage analytics
With your consent, we use PostHog to understand which pages are visited and when users leave. PostHog only creates profiles for logged-in users, not anonymous visitors. Analytics data is sent to PostHog's servers in the United States. Legal basis: consent.
Error monitoring
We use Sentry to capture technical errors. Error reports contain the page where the error occurred and a stack trace. They do not include your archive content or authentication tokens. Sentry stores data in Germany (EU). Legal basis: legitimate interest in maintaining a reliable service.
3. Uploaded Files
Artwork images, audio recordings, and documents you upload are stored in Google Firebase Storage in the European Union (EU multi-region). Files are only accessible to you when logged in, unless you explicitly make a work public on your artist page.
4. Sub-processors
We do not sell your data. The following sub-processors operate the service:
| Provider | Purpose | Location |
|---|---|---|
| Google Firebase | Authentication, database, file storage | EU (storage) / US (parent) |
| Anthropic | Mira AI assistant | United States |
| Google Generative AI | AI features (bio generation) | United States |
| Vercel | Application hosting | United States |
| Resend | Email delivery (contact form) | United States |
| PostHog | Usage analytics (consent-gated) | United States |
| Sentry | Error monitoring | Germany (EU) |
| Upstash | Rate limiting | United States |
For transfers outside the EEA we rely on the European Commission's Standard Contractual Clauses (SCCs).
5. Data Retention
Account and archive data: retained until you delete your account. Uploaded files: retained until you delete them or your account. Error logs (Sentry): 90 days. Analytics events (PostHog): 12 months. Contact form messages: not stored.
When you delete your account, all associated data is deleted within 30 days. Residual data in encrypted backups is permanently removed within 90 days.
6. Your Rights (GDPR)
You have the right to: access the personal data we hold about you; correct inaccurate data; erase your data (right to be forgotten); receive your data in a portable format; restrict processing in certain circumstances; object to processing based on legitimate interest.
To exercise any right, email: contact@studionxt.art. We will respond within 30 days.
7. Supervisory Authority
If you believe we have not handled your data lawfully, you have the right to lodge a complaint with:
Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg Königstraße 10a, 70173 Stuttgart www.baden-wuerttemberg.datenschutz.de
8. Cookies and Local Storage
Session storage: used to temporarily hold an image selected for upload. Cleared when you close the tab.
Local storage: used to remember your settings and analytics consent choice.
PostHog cookies: set only if you accept analytics. You can withdraw consent at any time by contacting us.
Firebase Authentication manages your login session using browser session storage, not persistent cookies.
9. Children
StudioNXT is not directed at children under 16. We do not knowingly collect data from anyone under 16.
10. Changes to This Policy
We will notify registered users by email if we make material changes. The date at the top of this page always reflects the latest update.
Questions? Email contact@studionxt.art · app.studionxt.art