Legal

Privacy Policy

Last updated: April 20, 2026

1. What We Collect

We collect the following information when you use artiFACT:

• Account information — name, email address, and password (hashed) when you register
• Uploaded content — photos you upload for analysis, along with the analysis results we generate
• Profile data — display name, username, avatar color, and any profile information you choose to provide
• Usage data — upload counts, feature usage, and basic interaction logs for operating the Service
• Billing information — subscription status and billing history. Payment card details are handled entirely by Stripe and never stored on our servers
• Location data — only if you choose to associate a location with a specific item; we do not collect device location

We do not collect information from third-party sources and do not purchase data about you.

2. How We Use Your Information

We use collected information to:

• Provide, operate, and improve the Service
• Analyze your uploaded photos and return identification and valuation results
• Manage your account, subscription, and billing
• Send transactional emails (account verification, billing receipts, password resets)
• Display your public items on community features (Map, Timeline, leaderboard) — only if you opt in by marking items public
• Enforce our Terms of Service and prevent abuse

3. Data Sharing

We do not sell your personal information. We share data only in the following limited circumstances:

• Service providers — we use Stripe for payment processing, Render for hosting, and Resend for transactional email. Each processes only the data necessary for their function.
• Analysis provider — uploaded photos are sent to Anthropic for analysis. Photos are processed per Anthropic's API data usage policy and are not used to train their models.
• Legal requirements — we may disclose information if required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfer — in the event of a merger, acquisition, or sale of assets, user data may transfer to the acquiring party, subject to the same privacy protections.

4. Public Content

Items you mark as public will be visible to all artiFACT users on the Community Map, Community Timeline, and your public profile. Your display name or username will appear alongside public items. You can make items private again at any time from the item's detail view.

5. Data Retention

We retain your account data and uploaded items for as long as your account is active. If you delete an item, it is removed from your collection and no longer accessible.

If you delete your account, we will delete your personal information and uploaded content within 30 days, except where retention is required by law (e.g., billing records).

6. Security

We use industry-standard security practices including encrypted connections (HTTPS), hashed passwords, and access controls. However, no system is completely secure. You are responsible for keeping your account credentials confidential.

7. Cookies and Tracking

We use minimal cookies required for session management and authentication. We use analytics to understand aggregate usage patterns (pages visited, feature usage); no personally identifiable information is sent to our analytics provider.

8. Children's Privacy

artiFACT is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

9. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate information via your Profile page
• Deletion — request deletion of your account and data
• Portability — request your data in a portable format
• Opt-out — unsubscribe from non-transactional emails at any time

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the app or sending an email. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact

For privacy questions, data requests, or to delete your account, contact us at customer_service@postarc.net.