Privacy Policy

Who we are

Artiphy is operated by [Company name], [Address], company ID (IČO) [IČO] (“we”, “us”). We are the controller of the personal data described in this policy.

For anything about your data, write to support@artiphy.ai.

What we collect

Account data: your email address, name, a hash of your password, or the identity from the sign-in provider you choose (Google, Discord or GitHub), and your workspace memberships.

Your content: prompts, the images, audio and video you upload, everything you generate, and the characters, styles, projects and pipelines you create.

Billing data: your credit balance and purchase history. Card details go straight to Stripe; we never see or store them.

Technical data: IP address, browser and device details, request logs and error reports.

Why we use it

To provide the service: run your generations, store your library and run your workspaces (performance of a contract, Art. 6(1)(b) GDPR).

To take payments and keep accounting records (contract and legal obligation, Art. 6(1)(b) and (c)).

To keep the service safe: security, abuse prevention, content-safety checks on prompts and outputs, and fixing errors (legitimate interest, Art. 6(1)(f)).

To send service emails such as verification, password resets and receipts (contract). We don't send marketing without your consent.

Artiphy never uses your prompts, uploads or creations to train AI models, and never sells your data.

How we handle your data

Your account data and library are stored in the EU: files in Amazon S3 and the database on Neon, both in Frankfurt (eu-central-1).

To generate, we send your prompt and any input files to the AI provider behind the model you pick. Most of these providers process data in the United States or elsewhere outside the EU. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses.

The table lists each processor and what its own terms say about using your data for training. For OpenRouter models we ask OpenRouter to route only to providers that do not collect data. For models from a provider marked “Yes” or “Not excluded”, that provider may use what you send it under its own terms. If that matters for a project, choose a model from a provider marked “No”.

How long we keep it

We keep your account data and library for as long as your account is open.

Deleting your account in Settings → Danger zone closes it immediately and signs you out on every device. Your content, files and profile are then erased automatically within one month. If you deleted your account by mistake, email support@artiphy.ai before then.

We keep billing records (purchases, credit history and invoices) for as long as accounting and tax law requires, and security logs for as long as needed to protect the service. They stay linked to an anonymised account record, not to your email.

AI providers keep inputs for their own periods. For example, Replicate deletes API inputs and outputs after one hour, and OpenAI keeps abuse-monitoring logs for up to 30 days.

Your rights

You can download all your data at any time in Settings → Danger zone → Export, and delete your account there too.

You also have the right to access, correct and restrict your data, to object to processing based on legitimate interest, and to data portability. Email support@artiphy.ai and we will answer within one month.

You can complain to a supervisory authority. In the Czech Republic that is the Office for Personal Data Protection (ÚOOÚ, uoou.gov.cz).

Cookies and local storage

We use only what the service needs: a secure, httpOnly cookie that keeps you signed in, and your browser’s local storage for preferences such as language and unfinished drafts. There are no advertising or analytics cookies.

Error reports go to Sentry, hosted in the EU, so we can fix bugs.

Contact

Questions about this policy or your data: support@artiphy.ai or the contact form.

[Company name], [Address].