Privacy Policy

Short version: we store the minimum needed to run a marketplace, we don't sell data, and the most sensitive things (your photos, your API key) are either never stored or stored encrypted.

What we store

• Account: your name, email, and avatar from Google sign-in.
• Marketplace activity: purchases, reviews, credit balance and its transaction history, and per-tool trial usage.
• Creator data: published tools, prompt instructions (kept server-side, never sent to buyers' browsers), and a Stripe account reference for payouts.

What we deliberately don't store

• Your uploaded photos. Reference photos you upload to generation tools are sent to Google's Gemini API to produce your images and are processed in memory per request — they are not saved to our database or file storage.
• Your generated images. They are returned to your browser and exist only there unless you download them.
• Card details. Payments run entirely on Stripe.
• Your Google AI key in plaintext. BYOK keys are encrypted with AES-256-GCM before touching the database and decrypted only for the moment a generation you requested runs.

Third parties we rely on

• Google — sign-in and AI generation (Gemini API).
• Stripe — payments and creator payouts.
• Google Cloud — hosting (Cloud Run, US region).

Each processes data under its own privacy policy. We don't run third-party advertising trackers.

Your choices

• Delete your stored API key anytime in Settings.
• Email support@artmint.shop to request an export or deletion of your account data — handled within 30 days.