Your things are personal.

For signed-out visitors, Artanizer asks permission before loading Google Analytics, Vercel Web Analytics or Vercel Speed Insights on the homepage, pricing page, Shopify overview or this privacy page. Declining does not limit Artanizer.

Events are restricted to those public pages. URLs are reduced to their path without search parameters or fragments, and Vercel collectors load with a no-referrer policy. Advertising storage and personalization are not enabled.

Essential operational diagnostics

Artanizer records unexpected failures so the service can be repaired. The structured reporter keeps the feature area, error category, an independent random event reference and a numeric framework reference when available. It excludes private content, raw error messages, stacks and request URLs. Repeated reports are limited; the reporter does not record your screen.

Hosting infrastructure maintains operational request logs. Platform administration does not grant access to your private collection, photos or assistant conversations. This page describes current website behavior; it is not a claim of legal compliance certification.

Feedback you choose to share

The feedback panel sends your message, selected feature area and category to the Artanizer team. A screenshot is attached only after you choose it, review its preview and approve sharing. We do not automatically attach household records or capture your screen. An optional recent error reference can help the team locate a bounded diagnostic report.

Feedback is associated with your account and visible to authorized platform administrators. You can review recent submissions and withdraw them in the panel. Withdrawal removes the submitted message and image from active feedback storage; a content-free request receipt prevents an old network retry from restoring them. Completed account deletion also removes your feedback. Recovery backups expire separately.

If you approve optional AI help, your message and selected feature area are sent to OpenAI to suggest a clearer title, category and one follow-up question. Screenshots and household records are excluded. You can submit without using AI, and feedback assistance does not deduct Artanizer credits.

Shopify Merchant app

The separate Shopify Merchant app uses read_products, read_inventory and read_locations scopes. It reads your shop identity, product and variant details (including IDs, title, status, SKU, barcode and image URL), inventory-item and location IDs, location names, tracking flags and stock quantities to show a read-only catalog inside your Artanizer workspace. It does not request Shopify customer or order scopes.

Embedded sign-in links your numeric Shopify staff user ID to your own Artanizer membership. The connection also stores the shop domain and Shopify app and installation identifiers. Shopify access and refresh tokens are stored encrypted. To verify a Shopify-managed plan, the app reads subscription status and billing events through Shopify's Partner API and stores the plan, verification dates and last relevant event reference.

Disconnecting stops Shopify sync, deletes stored Shopify access and refresh tokens, and removes staff links. The imported catalog, item and site mappings, stock-review notes, billing observation and request records can remain in your Artanizer workspace. A verified Shopify uninstall or shop-redact webhook queues removal of the Shopify connection, catalog mirror and billing observation. Removal runs after the app checks the store relationship; if that check is unavailable, the job is retried and deletion can be delayed. Artanizer items you explicitly created from a Shopify product, their physical history and the copied product name remain in your workspace; when a verified erase completes, Shopify origin receipts are removed from those items.

Account and access data

To create an Artanizer account we ask for your email address, password and workspace name. We store your email, a password hash rather than your password, a display name, workspace membership and a digest of your sign-in session. Failed sign-in attempts record the attempted email and time. Registration also uses a pseudonymous network identifier derived from the request address to limit abuse.

New accounts also store the accepted Terms version, a fingerprint of that agreement and the server-recorded acceptance time. This receipt does not contain an IP address or browser identifier. We do not invent acceptance for older accounts. The receipt is removed when account deletion completes after the cancellation period; recovery backups expire separately.

A sign-in session stops being valid after at most 90 days; a Shopify staff link expires within 30 days and can be unlinked sooner. Those access limits do not mean every related database record or backup is physically erased at that time.

Storage, sharing and your copy

Artanizer uses hosting and database service providers to operate the service. They store and process account records, connected-shop information and workspace data needed to provide Artanizer. Authorized members of your workspace can access its records according to their role. Operator recovery backups can include account records, connected-shop information and imported catalog data; they are separate from the archive you can download from Settings.

Local Help uses no AI provider. AI features run only when a workspace's plan includes them and someone chooses to use them; each request is sent to our AI provider, OpenAI, to produce that answer:

• Photo recognition (adding things from photos, photographing a place, rescanning saved photos and identifying a thing) sends those photos and the related item details.
• Organizing makes two text-only requests, never with photos. Size estimates send the names and details of the things being sized. The plan check sends the names, categories and conditions of the things together with the plan's box and room names.
• Ideas sends a one-line summary per item, never photos or notes.
• Ask inventory sends the conversation and a limited relevant slice of household inventory.

Manual organization never uses an AI provider. This is separate from Shopify's read-only synchronization and from optional public-site analytics.

If you use an AI agent built into your browser, that agent can read what Artanizer's page tools return to it, such as the names and places of things you search for; Artanizer sends nothing to any agent by itself.

The application does not publish a fixed physical-purge period for account records, operator backups or hosting request logs. Disconnecting a Shopify store is not a request to erase the Artanizer account or its workspace records.

Access, correction and deletion requests

You can delete your Artanizer account yourself in Account settings, after entering your password. The account is locked at once: you are signed out everywhere, your public listings become private, your open Find requests close and your calendar links stop. Signing in with your password within 14 days cancels the deletion. If you are the only owner of a household that other people use, make another member an owner first.

After the 14 days, we remove your email address, password, name and Shopify staff links, and withdraw the invitations you sent that were not yet accepted. Households where you were the only member are deleted. Shared households keep their history, which shows your past changes as made by a deleted member. Offers and messages you sent to other people stay with them, without your photos and with your name shown as "Deleted member". Billing and credit records are kept without your name for 6 months, then deleted. Operator recovery backups and hosting request logs are not edited; they expire on their own schedules. Deleting your account does not uninstall the Shopify app; uninstall it in Shopify.

Workspace owners can download an archive of their workspace records from Settings. For a copy, correction or deletion request concerning your Artanizer account, workspace or Shopify connection, email electronicpaper.ca@gmail.com. This is the current Artanizer support address.

Include the Artanizer account email and, for Shopify requests, the store domain so we can identify the correct records. Do not send a password, Shopify token or private collection in email. We verify authority before disclosing or changing data, and explain any records or recovery copies that cannot be removed immediately. Unlinking one staff identity or disconnecting one store does not delete the entire Artanizer account.