Privacy Policy

Artaa.Media is a remote creative studio providing video editing, web design and visual identity services. This policy covers the Artaa.Media website — at artaa.media and, in Persian, at artaamed.ir — and the two signed-in applications on both: the Client Portal, where clients manage projects, meetings, sample requests, files and approvals, and the Talent Portal, where creative professionals apply to work with us and, once approved, find opportunities and carry out the work we assign.

It applies to four groups of people, and not everything below applies to everyone:

• Visitors who only read the public website. We collect nothing from you beyond what your browser sends to load the pages — unless you accept Marketing in the privacy preferences, in which case the Meta Pixel described in section 9 also runs on the public marketing pages.
• People who contact us — a project enquiry, a meeting booking or a sample request — whether or not they ever create an account.
• Clients with a Client Portal account.
• Talents: people who create a Talent Portal account to apply to work with us, whether or not their application is approved, and the approved talents who work with us through it. Section 5 describes what the Talent Portal holds.

Artaa.Media is responsible for the information described here. How to reach us is in section 15.

We collect the information you type into our forms, and nothing more from them. Depending on the form, that is:

• Project enquiry and meeting booking: your name, email address, company name if you give one, country, timezone, the service you are interested in, a description of your project, a preferred start date, a budget range if you choose one, and any reference link you provide.
• Sample request: your name, email address, company name if you give one, country, the service and the deliverable you want, a description of your project, a target deadline if you set one, and any reference or material links you provide.
• Meeting booking additionally records the time slot you choose and the timezone it was chosen in, so the meeting appears correctly for both of us.

Each of these forms records that you agreed to be contacted about your enquiry, and when. We keep that record because it is the basis on which we reply to you.

Optional fields are genuinely optional. A form will tell you which fields it needs.

Clients and talents have the same kind of account, and everything in this section applies to both. If you create one, we store your display name, your email address, your preferred language, whether you signed up as a client or as a talent, and the status of your account — and, for a client, the organization name you choose.

Some things are deliberately never stored as you gave them:

• Your password is never stored. What we store is a scrypt digest of it, which cannot be turned back into your password. We cannot tell you what your password is, and neither can anyone who obtains a copy of our database.
• Session tokens, email verification links and password reset links are never stored either. We store a keyed digest of each one, so a copy of the database taken without the key is not a set of usable credentials.
• Your IP address is never stored in readable form. Where we need to recognise repeated requests — to apply rate limits and to detect abuse — we store a keyed digest of the address instead of the address.

We keep a record of security-relevant events on your account: registration, email verification, successful and failed sign-ins, sign-outs, password resets, session revocations, connecting or disconnecting a sign-in provider, and profile or photo changes. These records hold the type of event and when it happened. They deliberately do not hold your password, your tokens, your email address or the contents of any change.

You can sign in to the Client Portal or the Talent Portal with Google instead of a password. If you do, the following is exactly what happens.

We use Google only to confirm who you are. We do not use Google to read, write or access anything else.

Specifically:

• The only permissions we request from Google are openid, email and profile. Nothing else is ever requested.
• We do not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google service. We could not read your mail or your files even if we wanted to, because we never ask for the permission that would allow it.
• We do not keep Google access tokens, refresh tokens, or the raw identity token Google issues. There is no place in our database for any of them. The identity token is checked when it arrives and then discarded.
• If Google confirms that your email address is verified, that address can be used to create an Artaa.Media account, or to securely connect Google sign-in to an Artaa.Media account that already uses the same address. If Google does not confirm the address as verified, we will not create or connect anything.
• We store the identifier Google uses for your account, because that identifier is what keeps the connection between your Google sign-in and your Artaa.Media account working. We store it together with the email address Google reported, so that your account settings can show you which Google account is connected.
• Information from your Google profile never silently overwrites your Artaa.Media profile. Your Google name is used only to fill in the display name of a brand-new account at the moment it is created. It never changes the name on an account that already exists, and you can edit your display name yourself at any time.
• Your Google profile picture is not used as your Artaa.Media profile photo, and we do not copy it. Profile photos are only ever ones you upload yourself.

Connecting Google is optional. An account created with a password does not need it, and connecting Google does not disable your password — you can continue to sign in either way.

Signing in with Google means Google receives a request from your browser, and Google will handle that under its own privacy policy. We have no control over and no visibility into what Google records about it.

Once you are working with us, the Client Portal holds the information needed to run the work:

• Projects: the title and brief you submit, the versions we deliver, and the approval or change-request decisions you record against them, including any note you write with a decision.
• Meetings: the meetings you have booked, their status, and any reschedule or cancellation.
• Sample requests: the brief you submitted and the material attached to it.
• Your organization: its name, your role in it, and which other records belong to it.

Records belong to your organization, and the server checks that on every single request rather than trusting anything your browser sends. Your browser never tells us which organization you belong to; we resolve that from your session.

If you sent us an enquiry or a sample request before you created an account, and it used the same email address, verifying your email address links those earlier records to your account so you can see them in one place. Records already linked to someone else are never re-linked.

If you apply as a talent, the Talent Portal holds your application and, once you are approved, the work you do with us:

• Your application: your professional name and title, country, time zone and biography; the services you offer, your main discipline, your skills and tools; the languages you work in and how well; the positions you have held and, if you gave it, your years of experience; links to work you choose to show us, with a title and description for each; your availability and the hours a week you can take on; and your CV, if you upload one. We never open your portfolio links automatically.
• Our review of it: whether we approved it, asked for changes or declined it, the message we wrote to you with that decision, and which sections we asked you to change.
• Opportunities: the ones you apply for, with any note you write and your confirmation that you are available, and what we decided.
• Assigned work: the terms of any work we offer you — its scope, dates, weekly hours, revisions and fee — your answer, the progress updates and problems you report, the files you submit, and our feedback on them.
• Membership: your plan, its period, its price and how it was started.

Which opportunities you can see and apply for is decided by predefined rules that compare what each opportunity asks for with your application: services, skills, tools, languages, country, years of experience, availability and weekly hours. There is no score and no ranking. Decisions on your application, on your opportunity applications and on offers of work are made by people on our team. When we make one of those decisions, or review work you submit, we may also keep an internal note for our own team, which is not shown in the Talent Portal.

Your application, your CV and your portfolio links are seen only by you and by the people at Artaa whose role requires it. They are never shown to clients, and there is no public talent profile or directory. The Client Portal shows clients nothing about you — not your name, your application or your files. Work you submit reaches a client only if our team approves it and delivers it as part of the client’s project, and it arrives as a delivery from Artaa, without your name or the name you gave the file.

Files you upload — project material, sample-request material, your profile photo and, for a talent, your CV and the work you submit — are treated as confidential and are handled as follows.

• They are stored in private storage on our server, outside any location a web server can reach directly. There is no public URL for an uploaded file.
• Each stored file is given a random identifier as its name, with no file extension. Nothing about a stored file can be guessed from what you called it, and the name you uploaded is kept only as a label to show back to you.
• The type of every upload is decided by inspecting the actual content of the file, not by trusting its name. A file whose name and content disagree is refused.
• Uploads are size-limited, and profile photos and CVs are limited separately and much more tightly — a profile photo may be JPEG, PNG or WebP, and a CV must be a PDF, each up to 5 MiB.
• A file can only be downloaded through an authorized route, which checks who is asking before any content is sent: a client’s project files are available to that client’s organization and to a talent only if our team has given that talent access for work on the project (see section 9), and a talent’s CV to that talent. Within our team, files are available only to the roles whose work requires them. Your profile photo is served only to you.

Replacing your profile photo stores the new one before removing the old one, so a failure part-way through cannot leave you with no photo. Removing it deletes the stored image and returns you to your initials.

We use the information described above to:

• reply to your enquiry and discuss your project;
• schedule, confirm, reschedule and cancel meetings;
• produce, deliver and revise the work you have asked for;
• operate your account, sign you in, and let you recover access;
• show you your own projects, files, meetings and approvals;
• for talents: review your application, show you the opportunities you are eligible for, decide on your opportunity applications, offer and manage the work we assign you, and manage your membership;
• keep the service working and secure — including rate limiting, preventing abuse of forms and uploads, and investigating suspicious activity;
• keep a record of what was agreed and delivered.

We do not sell your information, rent it or trade it. Which opportunities a talent can see and apply for is decided by predefined rules, described in section 5; decisions on applications, on opportunity applications and on offers of work are made by people on our team. The information you give us in forms, in the Client Portal and in the Talent Portal is never used for advertising.

The one advertising use is separate from all of the above and applies only if you accept Marketing in the privacy preferences: the Meta Pixel described in section 9 reports which public marketing pages were viewed and, when an enquiry you send has been stored, that an enquiry was made, so that we can measure our advertising, attribute it to campaigns and, where applicable, reach visitors to our public pages with advertising on Meta platforms. It receives nothing you typed and nothing from your account.

We do not send marketing email. The email we send is transactional: verifying your address, resetting your password, confirming or updating a meeting you booked and, for talents, telling you our decision on your application, the progress of an opportunity application, and work we offer you or decide on.

Information is held in a PostgreSQL database on a private server. The database is not reachable from the public internet. Traffic to the website, the Client Portal and the Talent Portal is encrypted in transit.

The measures described in sections 3 and 6 are the substance of our security posture: passwords stored only as scrypt digests, credentials stored only as keyed digests, IP addresses stored only as keyed digests, uploaded files kept outside the web root under unguessable names, and authorization checked against the database on every request rather than trusted from a token or a browser.

Sessions are re-checked continuously. If your account is suspended or your password is reset, existing sessions stop working immediately rather than when they happen to expire.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your information, we will tell you.

We do not sell your information. The one advertising-related service we use is described below, and it runs only with your consent.

Three third-party services can receive information, and only for the purposes described:

• Google — only if you choose to sign in with Google. See section 4 for exactly what is and is not involved.
• Resend — our transactional email provider. It receives the email address and message content needed to deliver verification, password reset and booking messages, the acknowledgement we send when you submit an enquiry, the notice of each new enquiry sent to our own inbox, and the notices we send talents about their application, their opportunity applications and work we offer them.
• Meta (the Meta Pixel) — only if you accept Marketing in the privacy preferences, and only on the public marketing pages. What it receives is described in the next paragraphs.

The Meta Pixel is a small script provided by Meta Platforms. It is not loaded, and nothing is sent to Meta, until you accept Marketing in the privacy preferences shown on your first visit to a public marketing page; the default is off. Once accepted, it runs on the public marketing pages of artaa.media — the home page, About, Contact, FAQ, the service pages, the portfolio project pages and the legal pages — and reports to Meta that a page was viewed, which service or portfolio project was viewed (by its public identifier), and that you chose to open the project inquiry form (with the page language and which button you used). When an enquiry you send from the contact page or the project inquiry form has been received and stored, it also reports that an enquiry was made, with the page language and which of the two forms you used — never what you wrote in it, which options you chose, or its reference. Meta calls this a “Lead” event. It is sent only if Marketing is accepted at the moment the enquiry is stored; an enquiry sent before you accepted, or after you withdrew, is never reported later. Meta also receives the technical information any request carries, such as your IP address, browser details and the address of the page, and may set the browser identifiers described in section 12.

We use this information for advertising measurement and campaign attribution — to understand whether our advertising on Meta platforms reaches people who are interested in our work and how many enquiries follow from it — and, where applicable, to build advertising audiences on Meta from visitors to our public pages. Meta processes it under its own terms and privacy policy, which describe its retention; we do not claim to know or control Meta’s retention periods and do not state them here.

Nothing you type into a form is sent to Meta: not your name, email address, company, message or any other field. The enquiry report carries only the page language and which form was used as its parameters; we do not pass any form value, the enquiry reference or information from your account to Meta with it. No information from the Client Portal, the Talent Portal or Operations is sent to Meta, and the pixel never runs on those pages, on the sign-in and sign-up pages, or on the booking and sample-request pages. We do not send Meta hashed or unhashed contact details of any kind (“advanced matching” is not used), and we do not send events from our server to Meta.

You can refuse Marketing at any time, and you can withdraw it later from the privacy preferences link in the footer of every public page. Withdrawal stops the pixel from sending anything further and removes the Meta identifiers from your browser where we are able to; it does not recall information already transmitted to Meta. The enquiry report was added on 22 October 2026, so an acceptance of Marketing given before that day is not carried over: you are asked again, and nothing is sent to Meta until you accept. A refusal given before that day stays a refusal.

There is no other analytics service, no tag manager and no other third-party tracking script anywhere on this website, in the Client Portal or in the Talent Portal. Fonts are served from our own origin rather than from a third-party font service.

Our server and database are operated on infrastructure provided by a hosting provider, which necessarily stores the data on our behalf.

Talents working on a client’s project. To produce the work, our team may give an approved talent we have assigned to the project access to files the client provided. The talent sees each file under a label our team writes, not the client’s file name, and the Talent Portal shows them no client name, organization or account details. Nothing about a talent is shown to clients; section 5 describes how a talent’s approved work is delivered.

We may disclose information if we are legally required to, or where it is necessary to establish, exercise or defend a legal claim. If that ever happens we will tell you unless we are prohibited from doing so.

Account information is kept for as long as your account exists. So is a talent’s application, our review of it, and the record of opportunities, assigned work and membership.

Enquiries and sample requests carry a recorded retention period: sample requests are recorded with a twelve-month retention class and an expiry date, and project enquiries with a standard twenty-four-month class.

We want to be precise about what that means today, because it would be easy to imply more. Those retention periods are recorded and reportable, but they are not yet enforced automatically — there is no scheduled job that deletes expired records. In practice, deletion happens when you ask us for it, or when we review records. We would rather tell you that than describe an automatic process that does not exist.

Records of completed work, and the security event log described in section 3, may be kept longer where there is a legitimate reason — for example a record of what was delivered and agreed.

You can ask us to do any of the following, and we will:

• tell you what information we hold about you;
• give you a copy of it;
• correct anything that is wrong — your display name and profile photo you can change yourself in your account settings at any time;
• close your account and delete your information. Deletion is not automatic: we review each request by hand, delete what can be deleted, and keep only records we are required or legitimately entitled to keep — such as records of completed or agreed work and the security records described in section 3 — and we tell you what we kept and why;
• disconnect Google sign-in from your account, provided you have another way to sign in;
• withdraw Marketing consent — you can do this yourself at any time from the privacy preferences link in the footer of every public page, without writing to us;
• stop contacting you.

Depending on where you live, some of these may also be rights you hold under local law. We honour the requests above regardless of whether the law in your country requires it.

Write to accounts@artaa.media or use the contact page. We may need to confirm that the request comes from you before acting on it, particularly for deletion. We will respond within a reasonable time.

If we cannot fully act on a request — for example where we must keep a record of a completed engagement — we will tell you which part we cannot do and why.

Reading the public website sets no cookies of our own, and no analytics cookies. Your privacy preferences themselves are kept in your browser’s local storage under the key artaa.privacy.preferences.v2 — a record of your choice that is never sent to us or to anyone else, so remembering that you declined tracking does not itself require a tracking cookie. A choice recorded earlier under the key artaa.privacy.preferences.v1 is read only to keep a refusal, never to reuse an acceptance (see section 9), and is removed when you next make a choice.

If you accept Marketing, the Meta Pixel may set advertising-related identifiers in your browser: the first-party cookies _fbp (a browser identifier Meta uses to distinguish visitors) and, when you arrive from a Meta advertisement, _fbc (the click identifier from that advertisement). They are set by Meta’s script under Meta’s terms; withdrawing Marketing removes them where we are able to and stops the pixel setting them again. Without Marketing consent they are never set.

The Client Portal and the Talent Portal set cookies that are strictly necessary to sign you in and keep you signed in safely:

• artaa_account_session — your session. It cannot be read by JavaScript, which is what stops a scripting flaw from stealing it.
• artaa_account_csrf — the value our own pages send back to prove a request came from you and not from another site.
• artaa_account_exchange — short-lived, set only while a password reset link is being exchanged.
• artaa_account_oauth — short-lived, set only while a Google sign-in is in progress, and used to confirm that the sign-in finishing is the same one your browser started.

All four are removed or expire on their own. Blocking them will prevent you from signing in, because they are the mechanism by which signing in works.

Sessions expire after a set period and are ended immediately when you sign out, when your password is reset, or when an account is suspended.

Inside the Client Portal, the Talent Portal and the talent application you can choose how they look: Light, Dark or System. If you choose, we remember it in one cookie, artaa_ui_theme. It is a preference, not a sign-in cookie, and the portals work without it:

• It holds one word — light, dark or system — and nothing else. It identifies no one and is never used for tracking or advertising.
• It is set only when you press one of the three options. Until then nothing is stored, and the portals appear in Dark. Deleting it returns them to Dark.
• Our server reads it only to send each page in the appearance you chose, so that a page does not flash in a different one while it loads.
• System means the portals follow your device’s light or dark setting, and change with it without reloading. Your browser applies that setting itself: the cookie records only the word system, and the portals neither read nor store your device’s setting.
• It lasts one year from the last time you chose, and is sent only to the site that set it, over an encrypted connection. artaa.media and artaamed.ir each keep their own, so a choice made on one does not carry over to the other.
• The appearance switch is part of the page, so the page’s own scripts can read this cookie, unlike the session cookie above.

Artaa.Media is a remote studio and works with clients and talents internationally. Our server, our database and our email provider are located outside some of the countries our clients and talents are in, so information you give us will be transferred to and processed in a country other than your own.

By using the service or sending us an enquiry, you understand that this transfer is necessary for us to provide it.

This policy is published in English. English is the authoritative version.

We will update this policy when the service changes, and the effective date at the top will change with it. If a change materially affects how we handle your information, we will make that clear rather than quietly revising the text.

Continuing to use the service after a change means the updated policy applies to you.

For any question about this policy, or to make any of the requests in section 11, write to accounts@artaa.media, or use the contact page at artaa.media/en/contact.

We read every message sent to that address.