Privacy Policy

This policy explains what information Artifacky collects, why, and what you can do about it. We've tried to keep it plain.

Artifacky is operated by Artifacky Pte Ltd ([[FILL: UEN]]), a company incorporated in Singapore with its registered office at [[FILL: REGISTERED_ADDRESS]] (“Artifacky,” “we,” “us”). For the purposes of applicable data-protection law, Artifacky Pte Ltd is the data controller responsible for the personal information described here. You can reach us about privacy at [[FILL: CONTACT_EMAIL]].

1. What we collect

Information you give us

• Account details — when you sign up, including through Google, we receive your email address and basic profile information such as your name and avatar.
• Profile content — your handle, bio, links, and anything else you choose to add.
• Artifacts — the files you upload and publish, and the preview images we generate from them.
• Payment information — if you buy a paid plan, our payment processor handles your card details directly; we receive limited billing information such as confirmation of payment and your plan status, not your full card number.
• Messages — anything you send us, for example by email.

Information we collect automatically

• Usage and device data — IP address, browser and device type, pages viewed, and similar log information, used to run and secure the service.
• Cookies— we use essential cookies to keep you signed in and the service working, and we may use limited analytics to understand usage. See “Cookies” below.

2. How we use it

• to provide, maintain, and improve Artifacky;
• to create your account, profile, and public artifact URLs;
• to process payments and manage your plan;
• to communicate with you about your account and the service;
• to keep the platform safe — preventing abuse, fraud, malware, and security threats;
• to meet legal obligations.

We do not sell your personal information.

3. Legal bases

Where data-protection law (such as the GDPR) applies, we rely on: performing our contract with you (to provide the service), our legitimate interests (to secure and improve it), your consent (for example, non-essential analytics), and compliance with legal obligations.

4. Cookies

Essential cookies are required to sign you in and keep the service functioning. Any analytics or non-essential cookies are used to understand and improve usage, and where required we'll ask for your consent and let you decline. You can also control cookies through your browser settings.

5. Who we share it with

We share personal information only as needed to run Artifacky:

• Service providers who operate our infrastructure on our behalf — including hosting and our database and authentication provider, our content storage, rendering, and delivery network, our email provider, our login provider, and our payment processor. They may process data only to provide services to us.
• Legal and safety — when we believe disclosure is necessary to comply with the law, enforce our terms, or protect people and the platform.
• Business transfers — if Artifacky is involved in a merger, acquisition, or sale of assets, information may transfer as part of that deal.

Our sub-processors

We rely on the following providers to run Artifacky. Some are located outside Singapore, so using Artifacky involves cross-border transfers of personal data (see “International transfers” below).

• Supabase — database and authentication hosting (region: ap-southeast-1, Singapore).
• Cloudflare R2 — storage of user artifact content (served from artifackyusercontent.com).
• Stripe — payment processing.
• Resend — transactional and lifecycle email.
• Vercel — application hosting.
• Google Workspace — internal email and operations.

6. International transfers

Artifacky is operated from Singapore. Because we use the service providers listed above, your personal data may be transferred to and processed in other countries — including the United States and the European Union — whose data-protection laws may differ from those where you live. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

7. Keeping and deleting your information

We keep your information for as long as your account is active or as needed to provide the service, then for any period required to meet legal, accounting, or security obligations.

When you delete an artifact, we remove it from public view and its URL stops working. For operational reasons, a copy may be retained internally for a period and may persist in routine backups for a limited time before being overwritten.

When you delete your account, or ask us to erase your personal information, we will delete or de-identify your personal data, including stored artifacts, except where we're legally required to keep it. Backups are purged on a rolling cycle. To request full deletion, contact us using the details below.

8. Your rights, by region

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, contact us using the details below; we may need to verify your identity, and we'll respond within the time the law requires.

Singapore (PDPA)

As an organization established in Singapore, we handle personal data in accordance with the Personal Data Protection Act 2012 (PDPA). You may request access to, and correction of, the personal data we hold about you, and you may withdraw consent you have given for our collection, use, or disclosure of your personal data. We will respond as the PDPA requires. Our data-protection contact is [[FILL: CONTACT_EMAIL]].

Europe and the United Kingdom (GDPR / UK GDPR)

If you are in the European Economic Area or the United Kingdom, you have rights to access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. Our legal bases for processing are described in “Legal bases” above. Because we operate from Singapore and use service providers in other countries, your personal data may be transferred outside the EEA/UK; where required we rely on appropriate safeguards such as standard contractual clauses (see “International transfers”).

California (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, to access and delete it, to correct it, and not to be discriminated against for exercising these rights. The categories of personal information we collect and our purposes for using them are described in “What we collect” and “How we use it” above. We do notsell or “share” your personal information as those terms are defined under the CCPA/CPRA, so we do not offer a “Do Not Sell or Share My Personal Information” opt-out; if that ever changes, we will provide the required notice and opt-out before doing so.

9. Artifacts and third-party content

Artifacts are created by users and can contain their own code, forms, links, or third-party services. If an artifact collects information from you, sets its own cookies, or sends data elsewhere, that is controlled by the artifact's creator, not by Artifacky, and is governed by the creator's own practices and policies. Creators who collect information from visitors are responsible for doing so lawfully.

10. Security

We use reasonable technical and organizational measures to protect your information, including rendering artifacts in a sandboxed, isolated environment. No method of storage or transmission is perfectly secure, so we can't guarantee absolute security.

11. Children

Artifacky isn't directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us information, contact us and we'll delete it.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll take reasonable steps to let you know, and we'll update the date at the top.

13. Contact us

For privacy questions or to exercise your rights, reach us at [[FILL: CONTACT_EMAIL]].