Privacy Policy

Artypot is operated by Harry Baldwig ("I," "me," "us"). For questions about this policy, contact baldwig@artypot.com.

Account information: Your name, email address, and password (hashed — we can't read it). Optionally: a profile picture and phone number for verification purposes.

Financial information: For backers: payment method details (processed by Stripe — see Section 5). For creators receiving payouts: bank account information (processed by Plaid / Stripe Connect), Tax ID for 1099 reporting.

Activity data: Bounties you've created, pledges you've placed, bounties you've fulfilled, notifications you've received.

Usage data: Standard server logs — IP addresses, browser type, pages visited, timestamps. We use this to diagnose problems, not to build marketing profiles.

Communications: If you contact us via the support form or email, we retain those messages to resolve your request.

We use your data to:

• Run the Platform — authenticate your account, process pledges, trigger payouts
• Send you transactional emails (pledge confirmations, bounty updates, payment receipts)
• Comply with legal obligations — tax reporting (1099s), fraud prevention
• Improve the Platform — identify bugs and usage patterns in aggregate
• Respond to support requests

We do not use your data for advertising, profiling, or sale to third parties.

We share data only with the service providers needed to operate the Platform:

• Stripe — payment processing and creator payouts
• Plaid — bank account verification for creator payouts
• TaxBandits / similar — 1099 filing where required
• Email service provider — transactional email delivery
• Hosting / infrastructure providers — servers and databases

All service providers are bound by data processing agreements. We do not allow them to use your data for their own purposes.

We may also disclose data where required by law, such as in response to a valid court order or subpoena.

All payment card data is handled directly by Stripe, Inc. When you enter your card details, that information goes to Stripe's servers — not ours. We never see or store your full card number, CVV, or expiry.

We store a Stripe customer ID and a reference to your saved payment method (e.g., last four digits, card brand) so you can manage your billing. This reference is not sufficient to initiate a charge — only Stripe can do that on our instruction.

Stripe's privacy practices are governed by the Stripe Privacy Policy.

Creator bank account information is processed by Plaid and Stripe Connect. We store only a tokenised reference to the linked account — not the account number itself.

We retain your account data for as long as your account is active. If you delete your account, we remove your personal information from active systems within 30 days.

Financial records (pledge amounts, payout records, receipts) are retained for 7 years as required by US tax law, even after account deletion. These records are anonymised where possible.

Server logs are retained for up to 90 days and then deleted.

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correct — update inaccurate information via your settings page
• Delete — delete your account and personal data (subject to legal retention requirements)
• Portability — request your data in a machine-readable format
• Object — object to processing where we rely on legitimate interests

To exercise these rights, contact us or email baldwig@artypot.com. We will respond within 30 days.

If you are in the EU/EEA or California, you may have additional rights under GDPR or CCPA. We'll honour those requests even if you don't cite the specific regulation.

Artypot uses minimal cookies:

• Authentication token — stored in localStorage (not a cookie) to keep you logged in. Cleared when you log out.
• Stripe's cookies — set by Stripe's JavaScript for fraud detection during payment flows. Governed by Stripe's policy.

We do not use analytics cookies, tracking pixels, or third-party advertising cookies. There is no cookie consent banner because there is nothing to consent to beyond what's necessary.

Artypot is not intended for anyone under 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

Artypot is operated from the United States. If you are accessing the Platform from outside the US, your data will be transferred to and processed in the US. By using the Platform, you consent to this transfer.

We apply data protection measures consistent with US law. We do not currently have a formal EU Standard Contractual Clause (SCC) framework in place, but we will comply with any lawful data subject requests we receive.

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last updated" date at the top. For material changes, we will notify you by email or via the Platform.

Privacy questions or requests? Contact us here or email baldwig@artypot.com.