Privacy, in plain language.

share/artifacts is operated by Arun Singh, an individual operating AI for Masses, based in Somerville, Massachusetts, United States.

Privacy questions and requests can be sent to support@aiformasses.dev.

Account records include your name, email address, securely hashed password, verification state, sessions, IP address, and browser or device information used for security and rate limits.

Publishing records include original and sanitized HTML, titles, revisions, content hashes, artifact settings, access rules, and public identifiers. Restricted sharing can also include allowed recipient emails or domains, access tickets, and access events.

Connection records can include API-token metadata, OAuth grants, connected-client details, and organization membership. We keep operational logs needed to diagnose failures, prevent abuse, and protect the service.

Stripe processes payment details. We receive and store the customer, subscription, price, plan, status, renewal, and cancellation information needed to provide paid features. We do not receive or store full payment-card numbers.

We use information to create and secure accounts, sanitize, store, and deliver artifacts, enforce sharing choices, operate billing, communicate about the service, prevent abuse, and maintain reliability.

We do not sell personal information or use it for behavioral advertising.

We use service providers to run the product, including Neon for database infrastructure, Vercel for application hosting, Resend for transactional email, and Stripe for payments. They process information for the services they provide to us and under their own applicable terms and privacy notices.

Anyone with a public artifact link can open it. Restricted links remain subject to the access settings chosen by the publisher. Do not publish personal or confidential information unless you intend to share it with that audience.

A publisher can include remote HTTPS images or fonts. When a visitor opens that artifact, the remote host may receive the visitor's IP address and browser information. We do not proxy or control those remote hosts.

We keep account and artifact information while it is needed to provide the service, meet security and legal obligations, and resolve disputes. Deletion removes content from active product use; limited backup, fraud-prevention, or legal records may remain for a reasonable period.

We use access controls, origin separation, HTML sanitization, and other safeguards, but no online service can guarantee absolute security.

You can change sharing settings, unpublish artifacts, and delete artifacts from your account. Email us to request access, correction, or deletion of your account information. We may verify your identity before completing a request.

The service is for adults age 18 or older and is not directed to children. If we learn that a child has provided personal information, we will take appropriate steps to delete it.

We may update this notice as the service changes. A material update will be identified by a new effective date. See the Terms of Service for the agreement governing use of share/artifacts.