Privacy policy
Version 2.0 · last updated September 25, 2026
WeArkMedia (Chamber of Commerce 99429705, the Netherlands) respects your privacy. This policy explains which personal data we process, why, for how long, with whom we share it and which rights you have under the General Data Protection Regulation (GDPR).
1. Who is responsible?
WeArkMedia is the controller for data of visitors to wearkmedia.com, of people who contact us and of Autopilot account holders. For personal data we process on behalf of customers (for example data on a customer's website), we act as processor; the data processing agreement in our terms and conditions applies.
Send questions or requests to arkmedia25@gmail.com.
2. Which data do we process and why?
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email address, company name and message via the contact form or quickscan | Answering your question and preparing a quotation or analysis | Performance of a (pre)contractual obligation and legitimate interest | Up to 2 years after the last contact |
| Email address, website and language when signing up for early access | Giving you access to the Autopilot and informing you about it | Consent and (pre)contractual obligation | Up to 12 months after signing up, or shorter on request |
| Email address for the newsletter | Sending the newsletter | Consent (withdraw via the unsubscribe link) | Until you unsubscribe |
| Account data: email address, name, language, subscription and login data | Managing the account, logging in, invoicing | Performance of the agreement | Duration of the agreement plus 30 days; invoices 7 years (statutory retention) |
| Data in the Autopilot: websites, brand profile, keywords, articles, integrations (encrypted) | Providing the service | Performance of the agreement | Duration of the agreement plus 30 days |
| IP address and time when requesting a login link | Preventing misuse and spam | Legitimate interest | Up to 30 days |
| Visitor statistics without cookies (Vercel Web Analytics) and, with consent, Plausible Analytics | Improving the website | Legitimate interest and consent respectively | Aggregated, not traceable to individuals |
| URLs you enter in the free tools | Running the tool | Legitimate interest | Not stored, only temporarily in server logs |
We do not use your data for automated decision-making with legal effects and we never sell your data.
3. With whom do we share data?
We work with the following processors. Agreements on security and confidentiality are in place with each of them.
| Party | Purpose | Location |
|---|---|---|
| Vercel Inc. | Hosting of website and application | EU (Frankfurt) and global CDN; US company, transfers based on the EU-US Data Privacy Framework and standard contractual clauses |
| Supabase Inc. | Database and login for the Autopilot | EU (Frankfurt) |
| Resend | Sending emails (login links, notifications) | US, standard contractual clauses |
| Plausible Insights | Visitor statistics, only with consent | EU |
| DeepSeek | AI model for analysing websites and writing articles | China. We only send website content, keywords and instructions, no account data. Do not include personal data in instructions or content that you have the Autopilot process. |
| Retrieving search suggestions (search terms only, no personal data) | US | |
| Brave Search (optional) | Research into search results (search terms only) | US |
Apart from these parties, we only share data when the law requires us to.
4. Transfers outside the EU
Some processors are established outside the European Economic Area. Where possible, we rely on an adequacy decision or standard contractual clauses of the European Commission. For the AI model, we limit transfers to non-personal content. We regularly evaluate our choice of AI suppliers and may switch to a supplier within the EU or one with appropriate safeguards.
5. Security
We protect your data with measures including encrypted connections (TLS), encrypted storage of integration credentials (AES-256-GCM), per-customer data separation at database level, passwordless login via single-use links with limited validity, and rate limiting against misuse.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent at any time without affecting earlier processing. Send your request to arkmedia25@gmail.com; we respond within one month and may ask you to confirm your identity.
7. Complaints
If you are not satisfied with how we handle your data, please let us know first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) or with the supervisory authority in your own country.
8. Changes
We may amend this policy. The date at the top shows when the last change took effect. We inform account holders by email of material changes.
The Dutch version of this policy prevails; translations are provided for your convenience.