1. Scope and roles
Artifactonus is the service and product name. “We,” “us,” and “our” refer to the operator identified in service and checkout communications. This policy applies to the Artifactonus website, accounts, workspaces, and product features.
For account, security, and service-operation data, the Artifactonus operator generally acts as the data controller. For lead, CRM, and recovery data that a business customer submits, the customer generally determines the purpose of processing and acts as controller, while we process that data to provide the service. Specific legal roles may vary under applicable law.
2. Data we process
Account and workspace data
We process email address, authentication identifiers, workspace and organization information, membership, plan, subscription status, and preferences needed to operate your account.
CRM and lead data
When you add leads or connect HubSpot, we may process contact names, business email addresses, deal names and values, pipeline and stage, contact and activity dates, next actions, external record identifiers, synchronization status, and related revenue-risk signals. HubSpot OAuth credentials are encrypted and handled only by trusted server-side code.
Recovery and outcome data
We process recovery-message drafts and edits, recipient addresses, sending status and timestamps, limited delivery identifiers, reply and activity records, and outcomes such as reactivated, recovered, won, or lost. We do not use an external AI provider to create recovery drafts unless the service is expressly updated to say otherwise.
Billing data
Paddle acts as Merchant of Record and collects payment and transaction details under its own privacy notice. Artifactonus receives and stores limited billing records such as Paddle customer and subscription identifiers, selected plan, subscription status, trial dates, billing period dates, and payment-event status. We do not store full payment card numbers.
Technical data
We and our hosting providers may process IP address, browser and device information, request times, pages or features used, diagnostic events, and security logs. We use essential cookies and similar storage to keep you signed in, secure sessions, and support checkout functionality.
3. Why we process data
We use personal data to:
- create, authenticate, and administer accounts and workspaces;
- provide Find, Recover, Money, CRM sync, and billing features;
- send recovery emails only when an authorized user requests it;
- operate subscriptions, trials, support, and service notices;
- protect the service, prevent abuse, and troubleshoot failures;
- meet legal, tax, accounting, and regulatory obligations; and
- improve reliability and usability using limited operational data.
Depending on the jurisdiction and context, our legal bases may include performing a contract, legitimate interests in operating and securing a business service, consent, and compliance with legal obligations.
4. Service providers and disclosures
We use carefully selected providers to operate Artifactonus:
- Supabase for authentication and hosted application data;
- Vercel for application hosting, delivery, and operational logs;
- HubSpot when a customer chooses to connect its CRM;
- Resend to deliver recovery emails initiated by an authorized user; and
- Paddle as Merchant of Record for checkout, payment, tax, invoicing, subscription management, and refunds.
These providers receive only the information reasonably needed for their role and process data under their own terms and contractual obligations. We may also disclose information when legally required, to protect rights and security, during a business reorganization, or with your direction. We do not sell personal data for money or use it for cross-context behavioral advertising.
5. International transfers
Artifactonus and its providers may process data in countries other than yours. Where required, transfers are supported by recognized safeguards such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism. Local laws in a destination country may differ from those where you live.
6. Retention
We retain account and workspace data while the account is active and as reasonably needed to provide the service. CRM, lead, recovery, and outcome records are retained according to the customer’s use of the workspace and deletion requests. Security, billing, transaction, and legal records may be kept longer where required for fraud prevention, accounting, disputes, or legal compliance.
Deletion from active systems may not immediately remove copies from encrypted backups, which are isolated and expire according to backup schedules. We delete or anonymize data when it is no longer reasonably needed, subject to legal obligations.
7. Security
We use administrative, technical, and organizational measures designed to protect data, including access controls, organization-scoped authorization, encrypted transport, restricted server credentials, and encryption of integration tokens. No system can guarantee absolute security, so customers should also protect accounts with strong, confidential credentials.
8. Your choices and rights
Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing of personal data, or to obtain a portable copy. You may also withdraw consent where processing depends on consent and complain to a competent data-protection authority.
Workspace users should first direct requests about business-controlled CRM or lead data to the organization that entered that data. Requests about an Artifactonus account may be submitted through the support channel shown in the account or service communications. We may need to verify identity and authority before acting.
Billing-data requests may also involve Paddle. See the Paddle Privacy Notice.
9. Children
Artifactonus is a business service and is not directed to children. You must be at least 18 years old, or the age of legal majority where you live, to create an account or purchase a subscription.
10. Changes and contact
We may update this policy as the service, providers, or law changes. We will post the updated version here, revise the effective date, and give additional notice of material changes where appropriate.
Privacy questions and requests may be sent through the Artifactonus support channel shown in your account or service communications. Please do not include passwords, payment-card details, or other secrets in a request.