Privacy Policy

The short version

• Your library, versions and pages live on your website or platform account — not with us.
• What you send to be converted is processed and not kept.
• We keep your email, your website's address and a few usage counts, so we can run your plan and help you.
• We do not sell your personal information. Marketing email only if you tick the box for it — it starts unticked.
• We never receive information about the visitors to your pages, except GoHighLevel form answers, which pass straight through to your own contacts.

Information we collect

Information you provide.

• When you switch on a plugin or app: your email address; your website's address and name; the plugin and platform version numbers; the platform's id for your site or account where the platform gives us one; and whether you ticked "Send me tips and offers from ArtifactPlugin and Silicon Beach Web" — with the time and the exact wording you saw. The box is unticked unless you tick it.
• When you download a website as a .zip from artifactplugin.com: your email address, and whether you want tips and offers.
• When you buy a plan: payment is handled by Stripe. Your card details go to Stripe, not to us. Stripe holds the record of your purchase; we read from Stripe your email address, your plan and whether it is paid. The websites your licence is switched on for, the website you bought from, and where the sale came from (the marketplace or campaign tags) are stored with your subscription at Stripe. ArtifactPlugin keeps no separate billing database.
• When you sign in to My account: we email you a sign-in link. Nothing else is stored; your session is the ap_acct cookie.
• When you ask for help or join a waiting list: your message and your email address; if you sent it from a plugin or app, also your website's address, your plan and the app's version number. For a waiting list: your email address and which list.

What you convert. The code you paste or the file you upload is sent to our service to be recognised, safety-checked and turned into pages. The result goes back to you. We do not keep the code, the file or the result. If your code uses a public code library, our service downloads that library from its public host at that moment. If you bring a link instead of code, our service may fetch that link. The paste preview on artifactplugin.com is converted and shown in your browser, and not saved.

Usage data. When you visit artifactplugin.com we record the page you landed on, the website that sent you, and campaign tags in the link (utm_source, utm_medium, utm_campaign), if any. When you use the plugin or app — publish, update, unpublish, schedule, reach a plan limit, connect or disconnect an AI app, or use a template — we receive the name of that event and a few counts (for example how many live pages your website has), with your website's address. Before you publish, we receive how many live pages your website has and your licence key (if you have one), so we can say whether your plan has room.

Cookies. artifactplugin.com uses only its own cookies. It does not load advertising or third-party analytics scripts.

• ap_anon — a random id so we can tell visits apart (1 year).
• ap_attr — where your first visit came from (landing page, referring site, campaign tags) (90 days).
• ap_acct — keeps you signed in to My account (14 days).
• ap_site — remembers your website's address while you connect an AI app (180 days).

Abuse protection. To stop abuse, our service counts requests per internet address, website and licence key. It stores those only in scrambled (hashed) form, and each count is deleted when its time window ends.

When you connect an AI app (optional). The connection is created and kept on your own website. Our service passes your AI app's requests to your website and keeps nothing. Your AI app and what it does with your chats are between you and that app.

Platforms that make us keep a login. On HubSpot and GoHighLevel, the platform requires us to hold one login token for your account. It is encrypted before it is stored, it is the only thing we keep about your account, and it is deleted when you disconnect or uninstall. On Shopify, we keep your store's Shopify login session (your store's address and its access key), as Shopify requires; it is deleted when you uninstall. On WordPress, Webflow, Wix and Framer we keep no login.

Forms on your pages. Answers from forms on your pages go to your own website or platform (your WordPress, your store's contact form, your Wix, Webflow or HubSpot account, or the address you set in Framer). On GoHighLevel, a form's answers pass through our service on their way into your own GoHighLevel contacts; we do not keep them.

How we use it

• To run ArtifactPlugin: convert what you send, apply your plan's limits, check licences.
• To send you service email: sign-in links, purchase confirmations, welcome and help replies.
• To answer your help requests, or to set things up for you when you ask us to.
• To understand how ArtifactPlugin is used and improve it.
• To send you tips and offers from ArtifactPlugin and Silicon Beach Web — only if you ticked the box. You can unsubscribe at any time.

Service email from ArtifactPlugin is sent with open-tracking and link-tracking turned off.

Sharing

We do not sell your personal information. We share data only with service providers who help us operate, under confidentiality obligations, or where required by law. For ArtifactPlugin those are:

• RICOS, Silicon Beach Web's own business system — where your email, switch-on details, usage events and help requests are kept as Silicon Beach Web's customer and support records. RICOS stores its records with Supabase.
• Stripe — payments, licence and plan records, and the billing portal (stripe.com/privacy).
• Vercel — hosts artifactplugin.com and the conversion service.
• Mailgun — sends our email.
• Upstash — holds the encrypted HubSpot and GoHighLevel login tokens and the scrambled abuse-protection counts.
• Your website platform — the platform you install ArtifactPlugin on, under its own privacy policy.

We used ElevenLabs to record the voice of the WordPress plugin's guided tour. Those recordings ship inside the plugin; ElevenLabs never receives anything about you.

How long we keep it

• Code and files you convert: not kept.
• Abuse-protection counts: until their time window ends.
• Login tokens (HubSpot, GoHighLevel, Shopify): until you disconnect or uninstall.
• Purchase records: kept by Stripe.
• Your email, switch-on details, usage events and help requests: kept while your account or licence is active. Ask us and we delete them within 30 days.

Your choices

• You may request access to, correction of, or deletion of your information by emailing support@siliconbeachweb.com.
• Unsubscribe from tips and offers at any time by emailing support@siliconbeachweb.com. Every tips-and-offers email also has an unsubscribe link.
• Cancel a paid plan from My account.
• Delete the plugin or app. In WordPress, deleting the plugin removes its settings and your library (unless you turn that off under Settings → Privacy & data); you can export your library there first.
• You can disable cookies in your browser settings at any time. My account sign-in needs the ap_acct cookie.

Security

Licence keys, sign-in links and sessions are signed so they cannot be forged, and HubSpot and GoHighLevel login tokens are encrypted before they are stored. No system is perfectly secure; tell us at support@siliconbeachweb.com if you find a problem.

Children

ArtifactPlugin is made for people running websites. It is not meant for children, and we do not knowingly collect information from children under 13.

Changes to this policy

If we change this policy, we update it here and change the date at the top.

Contact

Questions about this policy? Email ArtifactPlugin Support · Silicon Beach Web at support@siliconbeachweb.com, use the help page (artifactplugin.com/support), or call Silicon Beach Web at (818) 564-7538.

JM Media Partners LLC DBA Silicon Beach Web · Venice Beach · Los Angeles, CA · 12405 Venice Blvd #377, Los Angeles, CA 90066