Data Processing Information

Important: this page summarizes current service terms and data practices for StateOfArt. It is provided for transparency and does not replace independent legal advice for your specific jurisdiction.

Roles

For user account and product operation data, StateOfArt acts as controller. For customer-provided research content processed on behalf of an organization, StateOfArt may act as processor under a separate agreement.

Categories of data

Identity, contact, project content, uploaded PDFs, usage events, billing metadata, support tickets.

Sub-processors

Supabase, Vercel, Stripe, and configured AI providers. Maintain a current list and notify customers.

AI providers

When you enable OpenAI or OpenRouter, prompts and context may be transmitted per their terms. Configure data retention and zero-retention options where available.

DPA

For DPA requests, contact support@publishpilotapp.com with your entity details and expected processing scope.

Requests

For export or erasure requests contact support@publishpilotapp.com with subject line "Data request".

Version française