Privacy Policy

This Privacy Policy explains how [Company Legal Name] (“Artifact,” “we,” “us”) collects, uses, and shares information when you use Artifact (the “Service”). It's part of our Terms of Use.

1. Information we collect

You give us directly

• Account information: name, email, handle, avatar, and bio (via our authentication provider, Clerk).
• Content you publish: Artifacts, screenshots, descriptions, tags, comments, and reactions.
• Payment-related information for subscriptions and Partner payouts — handled by our payment processor; we don't store full card numbers ourselves.
• Anything you send us directly, like support requests or Partner applications.

We collect automatically

• Usage data: which Artifacts you view, remix, save, or react to; follows; search queries within the Service.
• Device and log data: IP address, browser type, pages visited, and timestamps.
• Cookies and similar technologies — see Section 3 below.

From third parties

If you sign in via a third-party provider (e.g. Google, GitHub), that provider shares basic profile information with us as part of authentication, via Clerk. Our payment processor shares limited billing status information with us (e.g. that a subscription is active), but not your full payment details.

2. How we use this information

• To operate the Service: your feed, search, remix relationships, saves, follows, and the Partner revenue-share program.
• To process payments and Partner payouts.
• To communicate with you: transactional emails, security notices, and — if you opt in — product updates.
• To maintain platform safety: detecting abuse, fraud, and violations of our Terms.
• To improve the Service: understanding which features and Artifacts are used, in aggregate.
• To serve and measure advertising — see Section 3.

3. Cookies & advertising

We use cookies and similar technologies for a few purposes:

• Essential: keeping you signed in, remembering your filter/sort preferences, security.
• Analytics: understanding aggregate usage so we can improve the Service.
• Advertising: the Service displays ads on free-tier pages. Depending on the ad partner(s) we work with, this may involve cookies or similar identifiers used to serve and measure ads. [Fill in specifics once an ad vendor is chosen — contextual/non-tracking networks like Carbon Ads or EthicalAds require much lighter disclosure here than a programmatic network like Google AdSense/Ad Manager, which involves third-party tracking and typically needs a consent banner + Google's own required disclosures for EEA/UK/CH users.]

Premium subscribers [do / do not — decide as a product matter] see ads. You can control non-essential cookies through [cookie banner / browser settings — link to your actual cookie management UI here].

4. How we share information

We share information with:

• Service providers who help us run the Service: Clerk (authentication), Convex (application data storage), our payment processor (billing and Partner payouts), and hosting infrastructure.
• Advertising partners, limited to what's needed to serve and measure ads (see Section 3).
• Other users, for information that's inherently public within the Service — published Artifacts, your public profile, comments, and reactions.
• Legal or safety reasons: to comply with law, respond to lawful requests, or protect the rights and safety of Artifact and its users.
• In connection with a merger, acquisition, or sale of assets, subject to this Policy (or a successor policy you're notified about).

We do not sell your personal information.

5. Data retention

We keep account and content data for as long as your account is active. If you delete your account, we delete or anonymize personal information within [X days], except where we need to retain it longer for legal, tax, fraud-prevention, or dispute purposes (for example, transaction records for Partner payouts).

6. Your rights & choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing (including, depending on jurisdiction, opting out of “sale” or “sharing” of information for advertising purposes under laws like CCPA/CPRA, or exercising GDPR rights if you're in the EU/UK).

You can update most account information directly in your settings, or reach out to [Privacy Contact Email] to exercise these rights. We'll respond within the timeframe required by applicable law.

7. Children's privacy

Artifact isn't directed at children under [13/16], and we don't knowingly collect personal information from them. If you believe a child has provided us information, contact us at [Privacy Contact Email] and we'll delete it.

8. International data transfers

We and our service providers may process information in countries other than where you live, including [United States]. Where required, we use appropriate safeguards for these transfers (e.g. standard contractual clauses).

9. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

10. Changes to this Policy

We may update this Policy from time to time. For material changes, we'll provide notice before they take effect.

11. Contact

Questions about this Policy, or want to exercise your privacy rights? Reach us at [Privacy Contact Email] or [Company Mailing Address]. [If you have EU users, consider whether you need a designated EU representative under GDPR Art. 27.]