Privacy Policy
Last updated November 3, 2026. We are a small research institute. This page explains what personal information we collect through our website, events and mailing lists, why, and what you can ask of us. It is written to be read in a few minutes.
Who we are
Artificiality Institute is the organization responsible for your personal information (the “data controller” under the EU and UK General Data Protection Regulation). We are a nonprofit registered in the United States at 70 Southwest Century Drive, Suite 100, Box 1070, Bend, Oregon 97702. Contact us at hello@artificialityinstitute.org with any question about this policy or your data.
What we collect, and why
When you register for an event or online session. Your name and email address, anything you type into an optional question box, and your answer to the newsletter checkbox. We use these to confirm your place, send you the joining link and a reminder, and share the recording or materials afterwards. Our basis for this is that you asked us to (performance of a contract). We keep a record of who registered for what as part of our relationship history.
When you subscribe to our news. Your name, email address, and a record of when and how you subscribed. We use these to send you Institute news and event invitations, a few times a month. Our basis is your consent, which you give by ticking the box or confirming a subscription email, and which you can withdraw at any time with the unsubscribe link in every email.
When you buy a ticket, a course place, or make a donation. Your name, email address and the details of the purchase. Payment card details go directly to our payment provider, Stripe; we never see or store them. Our basis is performance of a contract, and keeping financial records as the law requires.
When you apply to join our community, request a call, or fill in another form on our site. The details you give us on that form, used to respond to your request. Our basis is that you asked us to.
When you email us. We keep correspondence so we can follow up and so we have a record of our relationship with you. Our basis is our legitimate interest in running the Institute and keeping in touch with the people we work with.
Technical information. When you submit a form on a page we host, we keep the internet address it came from for 24 hours to filter automated spam, then delete it. When you give consent to marketing, we keep the internet address with the consent record as proof that you gave it. We do not use tracking pixels in our emails and we do not track whether you open them. This website uses Google Analytics, which sets cookies to count visits; Google’s own privacy policy describes how it handles that data.
Who else sees your information
We do not sell your information and we do not share it with event hosts, partners or sponsors. When we run a session for another organization’s members, that organization is told how many people registered, not who.
We use these services to run the Institute. Each processes personal information only on our instructions:
Supabase (database hosting) — our contact records
Resend (email delivery) — sending our emails
Vercel (web hosting) — the pages where you register
Google Workspace — email, calendar, and Google Meet for online sessions
Stripe — payments
Ghost — the Artificiality Journal newsletter
Circle — our community platform, if you join
Framer — this website and its forms
These providers are based in, or store data in, the United States. We are a US organization, so your information is held in the United States. Where EU or UK law requires it, transfers rely on the providers’ standard contractual clauses or their participation in the EU–US Data Privacy Framework.
How long we keep it
Event registrations, purchases and donations: for as long as we keep a record of our relationship with you, and financial records for seven years as required by law.
Newsletter subscriptions: until you unsubscribe. We keep the unsubscribe record so we don’t email you again.
Form submissions we don’t act on, and spam: deleted within 90 days.
Email correspondence: for as long as we are in touch with you.
If you ask us to delete your information, we do so unless we have to keep part of it (for example a payment record), and we tell you what we kept and why.
Your rights
Wherever you are, you can ask us to tell you what information we hold about you, correct it, delete it, or stop using it for a particular purpose, and you can withdraw consent to marketing at any time. If you are in the EU, the UK or another place with data protection law, you also have the right to receive a copy of your data in a portable form, to object to processing based on our legitimate interests, and to complain to your national data protection authority. We would rather hear from you first: email hello@artificialityinstitute.org and we will reply within 30 days.
Children
Our events and services are for adults. We do not knowingly collect information from anyone under 16.
Changes
When we change this policy we update the date at the top. If a change affects how we use information you have already given us, we will email you about it.