Last updated: 4 September 2026
1. DATA CONTROLLER
The controller for Art2Canvas is François Heusdens, Entrepreneur individuel (EI), trading as Next Gen Matrix.
Address: 9 Passage du Rouet, 05320 La Grave, France
SIREN: 103 324 224
Email: info@art2canvas.com
Telephone: +33 6 88 52 00 50
2. DATA WE PROCESS
Depending on how you use Art2Canvas, we may process your name, email address, telephone number, delivery and billing details, order details, customer-support messages, saved-design identifiers, uploaded images, previews, crop/layout/transform data, production files, technical logs, IP-derived country information, payment-provider references and, for USDC payments, wallet addresses and transaction hashes. Art2Canvas does not receive or store your full payment-card number when payment is handled by Stripe or another external payment provider.
3. WHY WE PROCESS DATA
We process data to provide the editor and saved-design functions; create, take payment for, produce, deliver and support orders; provide account and order access; prevent abuse, fraud and security incidents; meet accounting, tax and legal obligations; resolve disputes; and operate market, language and currency preferences.
The principal legal bases are performance of a contract or steps requested before entering a contract, compliance with legal obligations and Art2Canvas's legitimate interests in operating and securing the service. Where consent is legally required for a specific optional activity, that activity will rely on consent.
4. SAVED DESIGNS AND UPLOADED IMAGES
Saved designs and their source uploads are retained for up to 90 days unless they become part of an order or must be retained for a legal, security or dispute-related reason. Art2Canvas includes automated housekeeping intended to remove expired saved-design data that is not referenced by an order.
Once a design forms part of a paid order, relevant source, production and approval files may be retained for as long as reasonably necessary to produce the order, provide after-sales support, establish what was approved and handle legal claims. Order and accounting records may be retained for up to 10 years where required by French accounting or tax obligations.
5. IMAGE PROCESSING PROVIDERS
When print-quality enhancement or other image-processing functions are used, an image or derived production image may be transmitted to a specialist AI or image-processing provider configured by Art2Canvas. The current codebase supports Art2Canvas AI services for relevant image-processing functions. Only data needed for the requested processing should be sent. Provider handling is also governed by the provider's applicable service and privacy terms.
6. PAYMENTS
Stripe may process identity, contact, transaction, device and payment information when Stripe is selected. Art2Canvas receives payment status and provider references needed to reconcile the order, rather than full card details.
If you pay using USDC, blockchain payment information can be public by design. Wallet addresses, transaction hashes, token amounts, network information and confirmation data may be stored with the order and may remain permanently visible on the relevant public blockchain independently of Art2Canvas.
7. HOSTING AND TECHNICAL PROVIDERS
The website is hosted by TransIP B.V., Vondellaan 47, 2332 AA Leiden, Netherlands. Technical service providers may process limited data as necessary to host, secure, deliver or support the service.
To select a default country and currency, Art2Canvas may use a country code supplied by the hosting or network environment. If that is unavailable, the server may query the configured IP-to-country service using the visitor's IP address. Local caching uses a one-way IP hash rather than storing the raw IP address in that cache.
8. INTERNATIONAL DATA TRANSFERS
Some payment, AI, infrastructure or support providers may process data outside the European Economic Area. Where GDPR transfer restrictions apply, Art2Canvas relies on the safeguards made available for the relevant provider and service and limits transfers to what is necessary for the processing purpose.
9. COOKIES AND LOCAL STORAGE
Art2Canvas uses an essential session cookie for saved-design, basket, security and account functions. Preference cookies can remember selected language, country and currency, and browser local storage can remember the light/dark theme. These functions are described in the Cookies & Local Storage page. Advertising cookies are not required for the core checkout described by this policy.
10. SECURITY
Art2Canvas uses technical and organisational measures intended to protect stored data and keeps API credentials on the server. No internet service can guarantee absolute security. Do not send payment-card details or private wallet keys by email or through customer-support messages.
11. YOUR RIGHTS
Subject to applicable law, you may request access to your personal data, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent for future processing. Some data cannot be deleted immediately where retention is required by law or necessary for an existing contract or legal claim.
Requests can be sent to info@art2canvas.com. We may need to verify your identity before acting on a request. You also have the right to complain to the French data-protection authority, the CNIL, or another competent supervisory authority.
12. CHANGES
This policy may be updated when services, providers, tax status or legal requirements change. The current version published on art2canvas.com applies from the date shown above.
13. NEWSLETTER AND PROMOTIONAL CONSENT
If you choose the 15% newsletter offer, Art2Canvas processes your email address, consent timestamp/source/version, locale and limited hashed technical evidence of the signup to record and demonstrate your consent, prevent duplicate registrations and issue and enforce the email-linked promotion code. Newsletter marketing relies on your consent. Registration for this promotion is limited to once per email address. You may withdraw marketing consent at any time by contacting info@art2canvas.com; withdrawal stops future marketing but does not recreate promotional eligibility or erase records that must be retained to enforce the one-registration/one-code rule or meet legal obligations.
14. FIRST-PARTY VISITOR STATISTICS
If you consent to analytics, Art2Canvas records privacy-minimised first-party usage events to understand traffic and improve the site. The event store contains one-way hashed random visitor and visit identifiers, clean page paths, displayed language, a country code supplied by the hosting/network environment, referring domain or internal path and visible engagement time. It does not contain your full IP address, email address, name, payment reference, wallet address, advertising identifier or user-agent fingerprint. Raw analytics events are retained for approximately 13 months. Analytics is disabled until you choose to allow it, and you can change that choice using Analytics settings.
ART2CANVAS