Data Processing Information

Important: this page summarizes current service terms and data practices for StateOfArt. It is provided for transparency and does not replace independent legal advice for your specific jurisdiction.

Roles

For user account and product operation data, StateOfArt acts as controller. For customer-provided research content processed on behalf of an organization, StateOfArt may act as processor under a separate agreement.

Categories of data

Identity, contact, project content, uploaded PDFs, usage events, billing metadata, support tickets.

Sub-processors

Supabase, Vercel, Stripe, configured AI providers, and optional ad providers for free-plan placements. Maintain a current list and notify customers.

AI providers

Free plan AI uses customer-provided BYOK credentials (encrypted at rest). Paid plans route AI calls through platform-managed OpenRouter. Prompts/context may be transmitted to the selected provider per their terms.

DPA

For DPA requests, contact support@publishpilotapp.com with your entity details and expected processing scope.

Requests

For export or erasure requests contact support@publishpilotapp.com with subject line "Data request".

Version française