Privacy Policy
Last updated: March 6, 2026
SWISH LIVE (hereinafter "Posteryart" or "we"), as data controller, is committed to protecting the privacy of users of its website posteryart.com (hereinafter the "Site"). This Privacy Policy describes how we collect, use and protect your personal data, in accordance with the General Data Protection Regulation (GDPR) and French data protection laws.
1. Data Controller
- SWISH LIVE – SARL with share capital of €12,000
- 48 Rue Claude Balbastre, 34070 Montpellier, France
- SIREN: 828 655 928
- Email: [email protected]
2. Data Collected
We collect the following categories of data:
a) Data provided directly by the user
- Email address (when signing up to unlock additional generations)
- Uploaded photos (for personalized poster generation)
- City or person name (for poster customization)
b) Order data (via Shopify)
- First and last name
- Delivery postal address
- Email address
- Payment information (processed directly by Shopify — we do not have access to it)
c) Automatically collected data
- Browsing and usage data (via Amplitude)
- Technical error data (via Bugsnag)
- Detected country (for displaying prices in local currency)
3. Purposes and Legal Basis
| Purpose | Legal Basis |
|---|---|
| Personalized poster generation | Performance of contract |
| Order processing and tracking | Performance of contract |
| Transactional emails (confirmation, tracking) | Performance of contract |
| Email collection to unlock generations | Consent |
| Audience analysis and service improvement | Legitimate interest |
| Bug detection and fixing | Legitimate interest |
| Location detection for price display | Legitimate interest |
4. Sub-processors and Recipients
Your data may be shared with the following sub-processors, strictly within the purposes described above:
| Sub-processor | Role | Location |
|---|---|---|
| Shopify | Payment and checkout management | Canada / EU |
| Printing partner | Poster printing and shipping | EU |
| Cloudflare | Website hosting and image storage | United States |
| Supabase | Database and server functions | United States |
| Amplitude | Audience analytics | United States |
| Bugsnag | Technical error tracking | United States |
| Resend | Transactional email delivery | United States |
| Google Cloud (Vertex AI) | AI image generation | EU (Belgium) |
For transfers to the United States, our sub-processors rely on Standard Contractual Clauses (SCCs) from the European Commission or the Data Privacy Framework (DPF) to ensure an adequate level of protection.
5. Data Retention
- Uploaded photos: automatically deleted after poster generation
- Generated posters (previews): retained for 30 days, then automatically deleted
- Email addresses (leads): retained for 3 years from collection, unless objection
- Order data: retained in accordance with legal accounting obligations (10 years)
- Analytics data: anonymized after 13 months
6. Your Rights
Under the GDPR, you have the following rights:
- Right of access: obtain confirmation that data concerning you is being processed and receive a copy
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure: request the deletion of your data
- Right to restriction of processing: restrict processing in certain cases
- Right to data portability: receive your data in a structured, readable format
- Right to object: object to processing based on legitimate interest
- Right to withdraw consent: at any time, for processing based on consent
To exercise these rights, contact us at: [email protected]
If you have difficulties, you may file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr
7. Cookies and Trackers
The Site uses cookies that are strictly necessary for the operation of the service, as well as audience analytics cookies (Amplitude) and error tracking cookies (Bugsnag).
These analytics cookies are placed based on our legitimate interest in understanding Site usage and improving quality. They are not used for advertising purposes.
No advertising or targeting cookies are used on the Site.
Cookies used:
| Cookie | Purpose | Duration |
|---|---|---|
| localStorage (cart, preferences) | Site operation | Persistent |
| Amplitude | Audience analytics | 13 months |
| Bugsnag | Error detection | Session |
8. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration or disclosure. All communications between your browser and the Site are encrypted via HTTPS.
9. Policy Changes
We reserve the right to modify this Privacy Policy at any time. The version in force is the one accessible on the Site at the date of your visit.
10. Contact
For any questions regarding the protection of your personal data, you can contact us at: [email protected]