Last Updated: February 24, 2026
Artifactly Studio ("Artifactly", "we", "us", or "our") is committed to protecting the privacy and security of our users' data. This Privacy Policy ("Policy") governs the collection, processing, storage, and transfer of data when you utilize our cloud-based B2B SaaS inventory management and cross-listing platform (the "Service"). This Policy applies to all Merchants, Vendors, and Corporate accounts.
Under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), Artifactly operates exclusively as a Data Processor regarding the inventory, customer data, and sales data synchronized through connected marketplaces. You (the Merchant) remain the Data Controller of this information. You warrant that you have obtained all necessary consents from your end customers to allow Artifactly to process this data on your behalf.
By explicitly providing OAuth and API credentials, you grant Artifactly a non-exclusive license to transmit your inventory data across approved platforms. We share your data with sub-processors strictly necessary to deliver the Service (e.g., Google Cloud Platform, AWS, Anthropic, OpenAI, Stripe). We do NOT sell, rent, or lease your Personal Data or Inventory Data to third parties for marketing or competitive analysis purposes.
Artifactly uses third-party Large Language Models (LLMs), such as Google's Gemini, to provide automated title generation, description writing, and social media content creation. Any images, text, and metadata submitted to our AI features will be processed by these models. Artifactly contractually ensures that our enterprise AI partners do not use your proprietary business data or images to train their foundational public models.
We implement industry-standard security practices including encrypted data storage, secure authentication, and continuous monitoring. Data is retained only for the duration of your active subscription, plus a 30-day grace period to allow for data export. Upon account deletion, all OAuth tokens are revoked and data is permanently purged from active databases.
Your data may be transferred to and processed in the United States or other jurisdictions where our sub-processors operate. We rely on Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) to ensure lawful international transfers.
Our platform uses essential cookies to maintain secure authenticated sessions and functional cookies to remember platform preferences (e.g., dark mode, UI state). We also utilize targeting and performance cookies (e.g., Google Analytics 4) to analyze usage patterns. By using the Service, you consent to our Cookie Policy. You may revoke non-essential cookie consent at any time via the platform settings or browser controls.
When you connect your marketplace accounts (e.g., Etsy, eBay, Shopify) to Artifactly, we access and process data through their APIs on your behalf. This includes:
We process this data solely to provide the cross-listing, inventory synchronisation, and content generation services described in our Terms of Service. We do not use marketplace member data for advertising, sell it to third parties, or retain it beyond what is necessary to provide the Service. Listing data displayed within Artifactly is refreshed regularly and will not be more than six (6) hours older than the source marketplace. In the event of a data breach involving marketplace data, we will notify the affected marketplace and sellers within twenty-four (24) hours.
Depending on your jurisdiction, you have the right to access, rectify, port, restrict processing of, and request the deletion of your personal data ("Right to be Forgotten"). To exercise these rights or to request a copy of our DPA, please contact our Data Protection Officer at support@artifactlystudio.com.