Privacy Policy — Arty Fitchel's

1. Who this applies to

This Privacy Policy describes how Arty Fitchel's LLC (“we,” “us,” or “the Company”) collects, uses, and handles information when you use artyfitchels.ai and related services. By using the service, you agree to this policy.

2. What we collect

Account information

When you sign up, we collect your email address. This is stored in Supabase and used for authentication and service communications.

Subscription and billing

We store your subscription status and plan in our database. Payment processing is handled by Stripe — we never see or store your payment card details. Stripe's privacy policy applies to payment data.

Companion vault data

Your companion's memory, configuration, and context are stored as encrypted files on Hedera Hashgraph's File Service (HFS). This data is encrypted with a key derived from your passphrase before it is written to Hedera — we cannot read it. Only you, with your passphrase, can decrypt your companion data.

Session audit records

When you open or close a session, a metadata event is logged to Hedera's Consensus Service (HCS). These records are public and permanently stored on the Hedera network — they cannot be deleted by you or by us. They contain: session ID, your companion token ID, timestamp, and which vault sections were loaded. They do not contain the content of your vault or your conversations.

API keys (BYOK)

If you provide API keys for AI model providers, we store them in our database and use them solely to route your requests to the provider you specify. We do not share them with any other party.

Widget settings

Widget configurations (weather location, RSS feeds, stock tickers) are stored in our database and associated with your account.

Usage data

We may collect basic usage data (session counts, error logs) for the purposes of operating and improving the service. This data is not sold or shared with advertisers.

3. How we use your information

To provide and operate the service
To process subscription payments
To send transactional emails (account confirmation, billing receipts)
To diagnose errors and improve reliability
To comply with legal obligations

We do not sell your personal information. We do not use your data for advertising.

4. Third-party services

We use the following third-party services to operate:

Supabase — authentication and database
Stripe — subscription payments
Hedera Hashgraph — encrypted vault storage (HFS) and session audit log (HCS)
AI model providers — Anthropic, OpenAI, Google, Mistral, Groq, and others (used to process your conversation requests)
Vercel — web hosting

Each provider has its own privacy policy. We are not responsible for their data practices.

When you send a message to your AI companion, your message and injected vault context are sent to the AI model provider processing that request. We do not store the content of your conversations on our servers.

5. Data retention

We retain your account data for as long as your account is active. When you delete your account, we delete your Supabase records (account, subscription, API keys, widget settings) and issue deletion requests for your encrypted HFS vault files on Hedera.

HCS session audit records are permanently stored on the Hedera public ledger and cannot be deleted — this is a technical property of Hedera's Consensus Service by design. These records contain only session metadata, not vault content.

6. Your rights

You may at any time:

Access your account data by signing in
Update your account email through your account settings
Delete your account and all associated data through the Danger Zone in settings
Request a copy of your data by emailing us

To exercise any of these rights or for privacy-related requests, contact us at arty@artyfitchels.ai.

7. Security

Your companion vault is encrypted with AES-256-GCM using a key derived from your passphrase — we have no technical ability to access it. Account authentication is handled by Supabase. API keys are stored in our database with access controls. We follow industry-standard security practices, but no system is perfectly secure. Use a strong, unique passphrase.

8. Children

This service is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you by email or in-app notice before material changes take effect. The effective date at the top of this page indicates when this version was last updated.

10. Governing law

This Privacy Policy is governed by the laws of the State of Wyoming.

11. Contact

Privacy questions or requests: arty@artyfitchels.ai
Arty Fitchel's LLC, Cheyenne, Wyoming