Privacy Policy

This privacy policy explains how Arminful (Armin Esmaili) collects, uses, stores and shares personal data on the website arminful.com and in Arminful SEO, the site owner’s SEO app that uses Google user data. The Google user data section below covers exactly which Google data the app accesses and how it is handled.

Who we are

This website represents Arminful (Armin Esmaili). Contact is handled through the forms on this site. Booking and contact messages are emailed to the artist inbox so they can reply.

Google user data (Arminful SEO)

arminful.com has a private SEO workspace, Arminful SEO, used only by the site owner. When the owner connects a Google account to it, the app receives the data below from Google APIs.

What we access

• Google Search Console (read only): Search performance for the arminful.com property: search queries, pages, clicks, impressions, click through rate and average position, plus sitemap and indexing status.
• Google Analytics (read only): Aggregated traffic reports for the arminful.com property: sessions, users, top pages and traffic sources. No data about individual visitors.
• Google Business Profile: The Arminful business listing: business information, reviews and review replies, and posts.
• Google account email: The email address of the Google account that was connected.

How we use it

• Only to provide the features of Arminful SEO to the site owner: SEO reports, keyword tracking, review reminders and suggested fixes for arminful.com.
• Not for advertising, and never sold.
• Not used to develop, improve or train generalised AI or machine learning models.
• People do not read the data, except the owner using the app, or when needed for security, to comply with the law, or with the owner’s explicit permission.

Where it is stored and how it is protected

Google data and the OAuth tokens are stored on the private server that runs arminful.com, not on any third party analytics platform. Access tokens are stored encrypted. The app is only reachable through the site’s admin area, which is protected by Cloudflare Access and the admin login. All traffic uses HTTPS.

Sharing

• Google user data is not sold, rented or shared with third parties for their own use.
• To write a suggestion the owner asks for (for example a better page title), the relevant figures, such as the top search phrases for one page, may be sent to the AI model provider that powers the app (OpenRouter, which routes to Anthropic’s Claude). They are sent only to produce that suggestion.
• Data may be disclosed if the law requires it.

Retention and deletion

Reports are kept while the Google connection is active so that changes can be compared over time. When the account is disconnected, the tokens are deleted at once and the stored Google data is deleted within 30 days. You can ask for earlier deletion through the contact form.

Revoking access

Access can be revoked at any time from your Google Account at myaccount.google.com/permissions or by disconnecting in the app’s settings.

Arminful SEO’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we collect

This section describes how the website arminful.com handles the information visitors send through it.

If you submit the booking or contact form, we receive the details you enter: name, email address, optional event information, and your message. Hidden anti spam fields may be submitted but are discarded. We do not ask for payment details on this website.

How it is used

Inquiry data is used only to respond to your message and to consider bookings or collaborations. It is not sold. Server logs may include technical data such as IP address for security and rate limiting.

Analytics

This site uses Microsoft Clarity to see how people use the pages. Clarity may record mouse movement, clicks, and scrolling. Microsoft’s privacy policy applies to that data. arminful.com also counts page views itself without cookies: it stores the page, the referring site, device type and country, never your IP address, and the daily visitor ID cannot be linked across days. Do Not Track and Global Privacy Control are respected. The site still works if analytics are blocked.

Third parties

Email delivery may use a transactional email provider. Official music and social links lead to third party platforms with their own privacy practices.

How long inquiries are kept

Booking and contact messages are kept for as long as needed to answer them and handle any booking that follows, and for at most two years after the last message, unless the law requires longer.

Your rights

You can ask to see, correct or delete the personal data we hold about you, or object to how it is used. Send the request through the contact form or by email. If you are in the EEA you can also complain to your data protection authority; in Norway that is Datatilsynet.

Changes

If this policy changes, the date at the top of the page is updated.

Security reports

If you find a security issue on this website, email hello [at] arminful.com or use the contact form. Please include enough detail to reproduce the issue. Encrypted reports are welcome; the PGP public key is at /.well-known/pgp-key.txt. Do not use this channel for booking or music questions. A machine readable contact file is published at /.well-known/security.txt.

Other questions can also be sent via the contact form.