Privacy Policy

For any question about this policy, or to make a request about your personal data, email hello@artsybugsy.com. This is also our contact point under Singapore’s Personal Data Protection Act (PDPA).

When you message an Artsy Bugsy or Aria Atelier phone number on WhatsApp, we receive the following from Meta’s WhatsApp Business Platform: your phone number, your WhatsApp profile name, the text of your messages, and delivery/read status updates. If you send a photo, video, document, or voice note, we receive only its metadata (type, filename, and any caption) — the media file itself is not downloaded or stored by our systems.

We use this to answer enquiries, arrange trial classes and venue bookings, and communicate day-to-day about a child’s classes, and to keep internal notes for our staff. We do not sell this data, and we do not use it to build advertising profiles.

We only send marketing or promotional messages to people who have opted in. Replying STOP to any message stops further marketing messages to that number.

For troubleshooting delivery problems, we keep a brief technical record of the raw message events for 30 days, with the message text itself removed from that record.

To help our small team reply quickly, the text of a conversation may be sent to Anthropic’s Claude API to draft a reply and to summarise the conversation for our staff. The AI only sees the messages of that one conversation — it is not given broader access to our records. Replies drafted for the parents of our students are always reviewed by a staff member before they are sent. For venue enquiries at Aria Atelier, a small set of standard replies written by our own team may be sent automatically; anything beyond those is reviewed by a person.

For enrolled families, we hold student records such as name, age, class, and progress notes, so we can run classes and keep parents informed. Photos and videos of a child taken during class default to internal use only and are never shared publicly or with anyone outside the studio without a parent’s explicit consent. Parents can only see the records and media of their own children.

We use the following service providers to run our systems. Your data may be processed on servers located outside Singapore as part of using these services:

• Vercel — hosting for our application.
• Supabase — our database.
• Meta Platforms, Inc. — delivery of WhatsApp messages.
• Anthropic — AI-assisted drafting and summarising, as described above.

We retain conversations and related records for as long as needed to run the service and to meet our legal and accounting obligations, and we review what we hold periodically. Raw WhatsApp webhook logs, kept only for troubleshooting, are deleted after 30 days.

You may ask us to access, correct, or delete personal data we hold about you, and you may withdraw any consent you previously gave (for example, to marketing messages), subject to our legal and contractual obligations. To make a request, email hello@artsybugsy.com. If you are not satisfied with our response, you may complain to Singapore’s Personal Data Protection Commission (PDPC).

We may update this policy from time to time. The “last updated” date at the top of this page will always reflect the most recent version.