Privacy Policy

When you upload artwork, it is processed in memory on our servers and the resulting file is returned to you in the same session. We do not save your uploaded artwork or your generated files to any database, storage bucket, or disk, and any temporary data created while processing your request is discarded when the request finishes.

• We do not retain your artwork after your file is generated.
• We do not use your artwork to train any AI or machine-learning model.
• We do not share, sell, or publish your artwork.
• Because we keep no copy, we cannot re-send a file later. Download and save your files when you create them.

To run the Service, we collect a small amount of account and transaction information:

• Account information: handled by our authentication provider, Clerk. This typically includes your email address and any name or profile details you provide when you sign up.
• Payment information: handled by our payment processor, Stripe. We receive confirmation of your purchase and a Stripe customer reference, but we do not receive or store your full card number.
• Credit and transaction records: your current credit balance and a ledger of credit purchases, spends, and refunds, tied to your account ID. This ledger contains amounts, timestamps, and workflow type (prints, keychains, or PDF compiler) only, never your artwork.
• Basic technical data: standard request information (such as IP address and browser type) used to operate, secure, and rate-limit the Service.

• To provide the Service: process your artwork and return your files.
• To manage your account, credit balance, purchases, and refunds.
• To secure the Service and prevent fraud and abuse (including rate limiting).
• To respond to your support requests.
• To comply with our legal obligations.

We do not sell your personal information, and we do not use your artwork for advertising or model training.

We use a small number of trusted providers to run the Service. Each receives only what it needs for its function:

• Clerk: account creation and authentication.
• Stripe: payment processing.
• Supabase: the database that holds your credit balance and transaction ledger (no artwork).
• DigitalOcean: hosting for the backend that processes your artwork in memory.
• Vercel: hosting for the website you are using now.

We may also disclose information if required by law or to protect the rights, safety, and security of Octosmith or its users.

We use cookies and similar browser storage that are necessary for the Service to work, chiefly to keep you signed in (set by Clerk). We do not use third-party advertising or cross-site tracking cookies.

• Artwork and generated files: not retained (discarded as soon as your request completes).
• Account and transaction data: kept while your account is active and as needed for our records, accounting, and legal obligations. If you delete your account, we remove or anonymize your personal information, except records we are required to keep (for example, transaction history for tax or fraud-prevention purposes).

We take reasonable measures to protect your information: encrypted connections (HTTPS), keeping sensitive keys only on our backend servers, and limiting who can access the credit database. No method of transmission or storage is completely secure, but our zero-storage design means there is no stored library of artwork to be exposed in the first place.

Depending on where you live (for example, under the GDPR or California's CCPA), you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to certain processing. To exercise these rights, contact us using the details below. You can also manage or delete your account through your account settings.

The Service is not intended for children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Octosmith is operated from the United States. If you use the Service from elsewhere, your information may be processed in that country, which may have different data-protection laws than your own.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. Significant changes will be communicated where practical.

Questions about your privacy or this policy? Reach us through our contact page.