Privacy Policy
Last updated: 28 September 2026
This policy explains what personal data Marketing for Artists collects, why, for how long, and what your rights are. It covers this website, our contact form, our work for clients, our client platform Gestão de Clientes (app.mktforartists.com), and the access clients give us to their accounts on Meta (Facebook and Instagram), Pinterest and YouTube.
1. Who we are
Marketing for Artists is the trading name of Cristiana Pereira Vieira, a sole trader registered in Portugal. We are an independent marketing studio working with artists, art mentors and creative educators.
Cristiana Pereira Vieira, trading as Marketing for Artists
Rua Engenheiro Adelino Amaro da Costa 10, 1.º Frente
Portugal
Tax number (NIF): 217910467
Email: geral@mktforartists.com
Website: mktforartists.com
For the data described in sections 2 and 3 (visitors, enquiries, people who use our platform, and our own clients' contact and contract details), we are the controller. For the data inside our clients' accounts on Meta, Pinterest and YouTube, our clients are the controllers and we act as their processor, as explained in section 4.
We are not required to appoint a data protection officer. Questions about this policy go to the email address above.
2. Data you give us directly
Contact form and email
When you write to us through the form on our website or by email, we receive your name, your email address, your website or social profile if you include it, the option you choose about what you need, and the message you write.
We use this to reply to you, to prepare a discovery call and, if you ask for one, a proposal. The legal basis is the steps taken at your request before entering a contract (GDPR, Article 6(1)(b)) and our legitimate interest in answering the people who write to us (Article 6(1)(f)).
Discovery calls and proposals
During a discovery call we take notes about your business: what you offer, who your students or collectors are, your goals and the numbers you choose to share. We use those notes only to prepare a proposal for you.
Clients
When you become a client, we also process your contact details, the details needed for the contract and for invoicing, your brand materials, your approvals of the work we produce, and the correspondence needed to run the work. The legal basis is the performance of our agreement with you and, for invoicing records, our legal obligations under Portuguese tax law.
Our client platform
Gestão de Clientes is where our team plans your content and where you review and approve it. To give you access, we keep your name, your email address and your sign-in details, and a record of what you approve, comment on or ask us to change. For members of our team we also record their role and permissions. The legal basis is the performance of our agreement with you.
We do not collect special categories of personal data, and we do not ask for them.
3. Cookies and device data
This website
This website uses cookies that are strictly necessary for it to work. They need no consent and cannot be switched off.
Where this website uses analytics or advertising tools, including the Meta Pixel, they are set only after you accept them in the cookie banner, and you can withdraw that acceptance at any time from the same banner or by deleting the cookies in your browser. The Meta Pixel lets Meta measure the results of our advertising and show our advertising to people who visited this website; the data it collects is processed by Meta under its own privacy policy. At the date shown at the top of this policy, no analytics or advertising tool is active on this website.
Our hosting provider keeps standard server logs (IP address, browser type, pages requested and the time of the request) to keep the website secure and running. Those logs are held by the provider under its own retention rules, and we do not use them to identify visitors.
Our client platform
The platform uses only the cookies it needs to keep you signed in and to remember your preferences, such as your language. It saves unfinished drafts in your browser, so you do not lose work if a page closes. If you turn on notifications, your browser gives us an address for that device so we can send you alerts about your work, and you can turn them off in your browser at any time.
The sign-in page uses hCaptcha to stop automated attacks. To do that, hCaptcha looks at information about your browser and device, under its own privacy policy.
The platform has no analytics or advertising tools. It does not let third parties show content or ads inside it, and it does not follow you across other websites.
4. Client accounts on Meta, Pinterest and YouTube
When you hire us, you can give us access to accounts you own on three platforms: Meta (Facebook Pages, Instagram professional accounts, ad accounts and Business Manager), Pinterest and YouTube. You always grant that access yourself, on the platform's own screens, and we never ask for your password on any of them.
How you give us access
Meta: inside your own Business Manager (also called Business Portfolio), by adding Marketing for Artists as a partner or a named member of our team with a defined role. For publishing and reporting, you can also connect your Page and Instagram account to our platform through Meta's own login.
Pinterest and YouTube: by connecting the account to our platform. You are taken to Pinterest's or Google's own authorisation screen, which shows the name of our app, Gestão de Clientes, and what it asks to do. Nothing is connected until you agree there.
Who is responsible for what
You remain the data controller for everything inside your accounts, including data about your followers, customers and audiences. We act as your processor: we handle that data only on your documented instructions, set out in our service agreement, and only to provide the services you have contracted.
What we access on Meta
Page and account information: names, identifiers, profile images and settings.
Content: posts, stories, captions and comments, and, where community management is part of your agreement, messages sent to your Page or account.
Performance data: reach, impressions, engagement, follower counts, ad spend, results and conversions, as Meta provides them, in aggregated form.
Advertising assets: campaigns, ad sets, ads, audiences and creative, and the billing summaries Meta shows inside the ad account. We never see or hold your card details.
Through our platform, access to your ads is read-only: it does not create, change or delete campaigns. When our team manages campaigns for you, it does so in Meta's own tools, with the role you gave us.
What we access on Pinterest
Account information: the account identifier, username and display name.
Your boards: their names, identifiers and visibility, so we can choose where each Pin goes. We refresh this list from Pinterest when we need it.
The Pins we publish for you: the image, title, description, link and board chosen for each one, and the identifier Pinterest gives the Pin once it is live.
Performance data, where reporting is part of your agreement: impressions, saves, clicks and, for ads, spend and results, in aggregated form. Access to your ads is read-only.
We do not read your messages, we do not keep lists of your followers, and we never publish a Pin that a person on our team has not chosen and scheduled for your account.
What we access on YouTube
Our platform uses YouTube API Services. By connecting a YouTube channel to it, you agree to be bound by the YouTube Terms of Service. Google's own handling of your information is covered by the Google Privacy Policy.
Channel information: the channel identifier, name and handle.
The videos we upload for you: the video file, the title, description, tags, category and privacy setting chosen for each one, whether it is made for children, whether it contains altered or synthetic content, and the identifier YouTube gives the video.
Performance data, where reporting is part of your agreement: views, watch time, subscribers gained and similar figures for your channel and videos, in aggregated form.
We use this data only to publish the videos agreed with you and to report on their results. We do not use it for advertising, we do not sell it or pass it to anyone else, and the people on our team see only what those tasks need.
Channel, playlist and video information is refreshed from YouTube or deleted at least every 30 days. Performance figures are kept only while you remain a client and your authorisation is still active, which we check at least every 30 days. If you disconnect the channel in our platform, we delete what we obtained from YouTube within 7 days. If you remove our access from your Google account instead, we delete it within 30 days.
You can remove our access at any time from your Google account's security settings, as well as by disconnecting the channel in our platform.
Gestão de Clientes' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we keep access tokens safe
Connecting an account gives our platform access tokens issued by Meta, Pinterest or Google. We store them encrypted (AES-256-GCM), in a table that no user account can read, not even our own administrator accounts. Only our server uses them, and only for the tasks described in this section. They never reach your browser, we do not write them to logs, and we do not share them. Pinterest and Google tokens are renewed automatically while the account stays connected. When you disconnect an account in the platform, its tokens are deleted at that moment.
What we do with it
We use the data obtained through Meta, Pinterest and YouTube exclusively to deliver the services set out in your agreement: planning and publishing content, managing campaigns where agreed, responding to comments and messages where agreed, and preparing reports for you.
We only publish content that was created in our platform for your account and deliberately scheduled by a person on our team, usually after you have approved it. Nothing is published without that choice.
We do not sell this data. We do not share it with anyone outside the delivery of your services. We do not use it to build profiles of your followers or customers, to train models, or for our own marketing. We keep your data separate from that of our other clients. We do not keep it after our work for you ends, except as described in sections 5 and 6.
Compliance with the platforms' terms
Our use of these platforms follows their rules: the Meta Platform Terms and Meta Developer Policies, the Pinterest Developer Guidelines, the YouTube API Services Terms of Service and Developer Policies, and the Google API Services User Data Policy. We request only the permissions our services need, we use the data only for those services, we keep each client's data separate from every other client's, we keep access tokens encrypted, we limit access to the people who work on your account, and we remove access when the work ends.
5. Data deletion and removing our access
Remove our access yourself
You can remove our access at any time, without asking us.
Meta: in Business Manager, open Business settings, then Partners (if you added Marketing for Artists as a partner) or People (if you added a member of our team), select us and remove the access. The change takes effect immediately. You can also remove our app from your Facebook account under Settings and privacy, then Settings, then Apps and websites. Meta lets us know, and we delete the accounts you connected and their tokens.
Pinterest: remove Gestão de Clientes from the apps connected to your account, in your Pinterest settings.
YouTube: remove Gestão de Clientes from the apps with access to your Google account, in your Google security settings.
If you connected an account through our platform, you can also disconnect it there. Its tokens are deleted at that moment.
Ask us to delete data
Email geral@mktforartists.com with the subject line Data deletion request. Tell us which business, Pages, channels or accounts the request concerns.
We confirm that we have received your request within 5 working days.
We delete the data within 30 days of your request and tell you when it is done. This covers exported performance data, reports, drafts, media files and any platform data we hold, wherever we store them.
What we may have to keep
Portuguese tax and accounting law requires us to keep invoices, contracts and the correspondence that supports them for 10 years. We keep those records only for that purpose, in restricted storage, and we do not use them for anything else. When the legal period ends, they are deleted.
Deletion without a request
We also delete the data we obtained through Meta, Pinterest and YouTube about your accounts, as soon as reasonably possible and at the latest within 30 days, when our agreement ends, when you remove our access, when it is no longer needed for the services, and whenever the platform asks us to. For YouTube, the shorter periods in section 4 apply.
If you are not our client
If you follow or buy from one of our clients and want your data removed from their Page, account, channel or customer list, please contact that client directly: they control that data. If you write to us instead, we will pass your request on to them and tell you that we have done so.
6. How long we keep data
Enquiries that do not become clients
12 months after our last exchange.
Discovery call notes and proposals
12 months after the proposal, or for the length of the agreement if you become a client.
Client contact, contract and billing data
For the length of the agreement, then for the 10 years required by Portuguese tax law.
Platform accounts for you and your team
For the length of the agreement. When the work ends, we close your access or, if we agree, keep it read-only so you can look back at past work. We delete the accounts and the related personal data within 30 days of you asking us, or of us deleting your client record, except what the law requires us to keep.
Data obtained through Meta, Pinterest and YouTube about your accounts
Only while we provide the services. Deleted as soon as reasonably possible, and at the latest within 30 days, when the agreement ends, when you remove our access, when you ask, or when the platform asks. YouTube data follows the shorter periods in section 4.
Access tokens
Until you disconnect the account in our platform, when they are deleted at once. If you remove our access on Meta, Pinterest or Google instead, the tokens stop working straight away and we delete them within 30 days.
Reports we delivered to you
Copies are kept for 12 months after the agreement ends, so we can answer questions about past work. They contain aggregated figures only. Ask us and we delete them earlier.
Content, drafts and media files we produced for you
For the length of the agreement and 12 months after it ends, unless you ask for earlier deletion.
Server logs
Held by the hosting provider under its own retention rules.
7. Who we share data with
Service providers that we use to run the studio and our platform: website and platform hosting, database hosting, email, document storage, invoicing and accounting software, and the tools we use to plan, schedule and report on your marketing. They process data only on our instructions and under contracts that require them to protect it.
Meta, Pinterest and Google (YouTube), when we work inside your accounts. Each of them processes that data under its own terms and its own privacy policy. None of them is our processor.
Professional advisers, such as our accountant, where necessary to run the business, and public authorities where the law requires it.
We never sell personal data.
8. International transfers
We work from Portugal, in the European Union. Our clients are based around the world, many of them outside the European Economic Area, and the data in their accounts stays under their control. Some of the providers we use are based outside the European Economic Area, or process data there.
When personal data leaves the European Economic Area, we rely on the European Commission's Standard Contractual Clauses, on an adequacy decision (for example, for the United Kingdom) or on another safeguard permitted by the GDPR. You can ask us which safeguard applies in a given case.
9. Security
Access to your data is limited to the people who work on your account. The accounts we use to access Meta, Pinterest and YouTube, and our team's accounts on our platform, are protected by two-factor authentication. Access tokens are stored encrypted, as described in section 4. When someone leaves our team or the work ends, their access is removed. If a security incident affects your data, we tell you and the supervisory authority as the law requires.
10. Your rights
Under the General Data Protection Regulation you have the right to:
access the personal data we hold about you;
have it corrected if it is inaccurate or incomplete;
have it erased, as described in section 5;
restrict how we use it while a question about it is resolved;
receive it in a portable format, or have it sent to another provider;
object to processing based on our legitimate interests;
withdraw consent at any time, where consent is the basis for processing.
We make no decisions about you based solely on automated processing.
To exercise any of these rights, email geral@mktforartists.com. We answer within one month. If a request is complex we may take up to two more months, and we will tell you why. We may ask you to confirm your identity before we act.
If you believe we have handled your data wrongly, you can complain to the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese supervisory authority, at cnpd.pt. If you live in another country, you can also contact the supervisory authority there.
11. Children
This website, our platform and our services are for adults and businesses. We do not knowingly collect data from anyone under 16. If you think a child has sent us data, write to us and we will delete it.
12. Changes to this policy
We update this policy when our services or the law change. The version in force is the one published on this page, with the date shown at the top. If a change affects how we handle data inside client accounts, we tell our clients directly, and we ask for your agreement again before we use data from a connected account in a new way.
13. Contact
For anything about this policy or your data, email geral@mktforartists.com or write to Cristiana Pereira Vieira, Marketing for Artists, Rua Engenheiro Adelino Amaro da Costa 10, 1.º Frente, Portugal.