Privacy Policy | AI Artifacts

1. Introduction

AI Artifacts is committed to protecting your privacy and handling personal information responsibly, in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth) and, where applicable to you, the General Data Protection Regulation (GDPR), the UK GDPR and other international privacy laws. By using the Service you acknowledge that this Privacy Policy applies to your personal information as described below.

2. Information we collect

Information you provide

Account details, such as your username, email address and password;
Billing details, such as your name and billing address, collected and processed by our payment processor, Stripe, on our behalf;
Content you submit to the Service, such as chat messages, documents, images and voice recordings;
Correspondence you send us, for example through support requests.

Information collected automatically

Usage data, such as which features you use and how often, for the purpose of enforcing plan limits and improving the Service;
Device and log data, such as your IP address, browser type and access times;
Cookies and similar technologies as described in section 5.

3. How we use your information

We use personal information to:

Provide, operate and maintain the Service, including authenticating your account and enforcing plan entitlements;
Process subscription payments and manage billing through Stripe;
Communicate with you about your account, transactions and updates to the Service;
Detect, investigate and prevent fraud, abuse and security incidents;
Comply with legal obligations, including tax, accounting and consumer protection requirements;
Improve and develop the Service, including through aggregated or de identified analytics.

AI Artifacts does not use your conversations, documents or files to train artificial intelligence models unless you explicitly opt in to that use.

4. Legal basis for processing

Where the GDPR or a similar law applies to you, we rely on the following legal bases to process your personal information: performance of a contract with you (to provide the Service and process billing), our legitimate interests (such as securing and improving the Service), compliance with a legal obligation, and your consent where we ask for it, for example to use your content to improve models. You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

5. Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and to protect the Service against cross site request forgery. We may also use analytics cookies to understand how the Service is used, which help us improve it. You can control cookies through your browser settings, though disabling strictly necessary cookies may prevent parts of the Service from working correctly.

6. How we share information

We share personal information only in the following circumstances:

With service providers who process information on our behalf, such as Stripe for payments and our cloud hosting and email delivery providers, under contractual obligations to protect your information;
With optional identity providers, such as Google, GitHub or Microsoft, if you choose to sign in using those services;
Where required by law, regulation, legal process or governmental request;
To protect the rights, property or safety of AI Artifacts, our users or the public;
In connection with a merger, acquisition or sale of assets, subject to this Privacy Policy continuing to apply to your information.

We do not sell your personal information.

7. International data transfers

AI Artifacts is based in Australia and may use service providers located in other countries, including the United States, to operate the Service. Where personal information is transferred outside your home jurisdiction, we take reasonable steps to ensure it receives a comparable standard of protection, including through contractual safeguards such as standard contractual clauses where required by the GDPR or similar laws.

8. Data retention

We retain personal information for as long as your account is active and as needed to provide the Service. If you cancel your subscription or delete your account, we retain your content for a limited period, currently up to 30 days, to allow for accidental cancellation or account recovery, after which it is deleted from our active systems. We may retain limited information for longer where required for legal, tax, accounting or fraud prevention purposes, or where it remains in encrypted backups until those backups are cycled out in the ordinary course of business.

9. Data security

We use administrative, technical and physical safeguards designed to protect personal information against unauthorised access, disclosure, alteration and destruction, including encryption of data in transit and access controls on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Depending on where you live, you may have rights in relation to your personal information, which can include the right to access, correct, export or delete the information we hold about you, the right to object to or restrict certain processing, and the right to lodge a complaint with a data protection authority, such as the Office of the Australian Information Commissioner or, for users in the European Economic Area or the United Kingdom, your local supervisory authority.

You can access and update most account information directly from your account settings. To exercise any other right, contact us using the details in section 13 and we will respond within the time required by applicable law.

11. Children's privacy

The Service is not directed to children under the age of 16, and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "last updated" date, and where a change is material we will provide additional notice, such as an email or an in product notification.

13. Contact us

If you have questions about this Privacy Policy or wish to exercise a privacy right, please contact us at support@artifacts-ai.com.