Privacy

• Your account. Your name, email address, and sign-in details, held by Clerk, the service that runs Artifac's sign-in. If you sign in with another account, such as Google, we receive the name and email address it shares.
• What you and your agents publish. The files of each artifact and the data people save in it, along with who created and changed them.
• Workspaces and sharing. The workspaces you belong to, your role in each, the people you invite, and the email addresses you send invitations to.
• Usage. Counts of artifacts, subdomains, and stored bytes, which plan limits are measured against, and which artifacts you opened, so your library can sort by recently opened.
• Payments. If you subscribe, Stripe processes the payment. Artifac never sees or stores your card number. We keep whether your subscription is active and when its period ends.
• Request logs. The services that host Artifac (Vercel, Cloudflare, and Convex) record requests, including IP addresses and browser details, to operate the service and protect it from abuse.
• Visitors to an artifact. People who open an artifact without signing in, because anyone with the link or everyone may, get an anonymous identifier in a cookie, so the records they save can stay theirs. It is not tied to a name or an email address.

We use this information only to run Artifac as described on this page: to sign you in, store and serve your artifacts, enforce sharing and plan limits, process payments, send the invitations you ask us to send, keep the service secure, and answer you when you write to us. We do not sell it, and we do not use it for advertising.

Artifac uses the cookies that keep you signed in and the anonymous visitor cookie described above, and no advertising or tracking cookies. Pages on artif.ac load Clerk's sign-in script so an artifact can tell whether you are signed in, and that script sets Clerk's session cookies even when you are not. Every artifact runs in its own origin on artifacusercontent.com, kept apart from your Artifac account, so code inside an artifact cannot read your sign-in session.

These services process information for Artifac: Clerk for sign-in, Stripe for payments, Convex for the database, Cloudflare for file storage and delivery, and Vercel for hosting. Each receives only what its part of the service needs.

Your artifacts and their data stay until you delete them. A deleted artifact waits in Trash for 30 days so an Owner can restore it, and is then deleted permanently, files and data included. Request logs are kept for the periods the hosting services set.

Owners of a workspace can delete its artifacts and empty them from Trash at once. To delete your account and everything that belongs to it alone, write to us at the address below. Workspaces other people still use, and the artifacts in them, stay with those people.

If this policy changes in a way that matters, we will say so on this page before the change takes effect.

Questions about privacy, or a request to see or delete your data, go to contact@artif.ac.