ARTIFACTS LLP ("ARTIFACTS", "we", "us", or "our") builds and publishes digital products, including mobile

applications, web applications, websites, desktop software, developer tools, and related services. This Privacy Policy explains how ARTIFACTS handles personal data through artifacts.software, our company communications ,product announcements, support channels, and other company-level interactions (collectively, the "Company Services").

Our privacy commitments

- We do not sell personal data.

- We do not use company-website visitors' personal data for cross-context behavioural advertising.

- We collect only what we reasonably need to operate, secure, support, and improve the Company Services.

- Each ARTIFACTS product with materially different data practices receives its own product privacy policy. The product-specific policy controls for that product.

- We give people practical ways to ask questions, withdraw optional consent, and request access, correction, or deletion where applicable.

1. Who we are

The data controller/data fiduciary for the Company Services is:

ARTIFACTS LLP LLPIN: ACS-5971 Location: Bangalore, Karnataka, India Privacy, legal, and general enquiries:

contact@artifacts.software Product support: support@artifacts.software Website: https://artifacts.software/

2. Scope and product-specific policies

This Policy applies to:

- artifacts.software and company-level landing pages;

- product announcements, waitlists, newsletters, surveys, and beta-interest forms;

- emails, support requests, feedback, and business enquiries sent to ARTIFACTS;

- company social pages when ARTIFACTS receives information from those pages; and

- company-level security, fraud-prevention, and legal-compliance activities.

An ARTIFACTS product may collect or process information that this company-level Policy cannot describe

precisely. In that case, the product's own privacy policy applies in addition to this Policy and takes priority if there is a conflict. For example, Pageling has a separate privacy policy describing OCR, highlights, optional AI processing, connected imports, cloud sync, and purchases. Momentum and future ARTIFACTS products may also have product-specific notices.

This Policy does not govern third-party websites, app stores, social networks, or services that ARTIFACTS does not control.

3. Information we collect

3.1 Information you choose to provide

We may collect:

- your name, email address, and organisation;

- the content of messages, support requests, feedback, survey responses, or enquiries;
- product interests and communication preferences;

- information you submit when joining a waitlist, newsletter, beta, event, or research programme; and

- files or screenshots that you deliberately send to support.

Please avoid sending passwords, payment-card details, government identifiers, health information, or other

sensitive information unless we specifically ask for it through an appropriate secure process.

3.2 Website and technical information

When you visit our website, our hosting and security providers may process limited technical information needed to deliver and protect the site, such as:

- IP address and approximate region;

- browser type, operating system, device category, and language;

- requested page, referring page, date, time, and basic request logs;

- security, rate-limit, and anti-abuse signals; and

- aggregate page-view, traffic-source, and interaction measurements.

3.3 Business and contractual information

If you discuss a partnership, supplier relationship, client project, employment opportunity, or other business

arrangement with us, we may collect professional contact details, correspondence, proposals, contracts, invoices, tax information, and records needed to manage that relationship.

3.4 Information from third parties

We may receive limited information from:

- app stores and distribution platforms;

- social networks when you contact or interact with us there;

- analytics, hosting, form, email, or support providers;

- business partners where you have asked them to introduce you; and

- public sources used for fraud prevention, sanctions screening, intellectual-property protection, or due diligence.

We use information received from third parties only for the purposes described in this Policy and subject to

applicable law.

4. Website analytics and cookies

Our website is currently hosted on Framer and uses Framer's built-in, privacy-oriented analytics. Framer states that its built-in analytics do not use cookies or persistent identifiers. It uses limited browser and request information to produce aggregate measurements such as daily unique visitors, page views, device category, country estimate, referral source, and popular pages.

We do not currently use Google Analytics, Meta Pixel, or behavioural-advertising pixels on the company website. If we later add a non-essential cookie, advertising pixel, session-recording tool, or similar technology, we will update this Policy and, where required, display a consent tool before that technology operates. You will be able to reject non-essential technologies as easily as you accept them.

Essential local storage or cookies may be used where strictly necessary for security, accessibility, form operation, or a feature you request. Your browser can also block or delete stored data, although doing so may affect that feature.

5. How and why we use information

We use information to:

- operate, deliver, secure, and troubleshoot the Company Services;

- respond to enquiries, feedback, support requests, and rights requests;

- send product announcements or newsletters you requested;

- manage waitlists, betas, surveys, user research, and events;

- understand aggregate website performance and improve our products and communications;

- prevent fraud, abuse, security incidents, and unlawful activity;

- maintain business, tax, accounting, and contractual records;

- establish, exercise, or defend legal claims and protect users, ARTIFACTS, and others; and

- comply with applicable law, court orders, and valid government requests.

Depending on the context and applicable law, our legal basis is one or more of:

- your consent, including for optional marketing communications;

- performance of a contract or steps you request before entering a contract;

- our legitimate interests in operating, securing, supporting, and improving the Company Services, balanced against your rights;

- compliance with a legal obligation; or

- protection of vital interests or other lawful grounds recognised in your jurisdiction.

You may withdraw consent at any time. Withdrawal does not affect processing already completed lawfully, and it does not prevent processing that has another lawful basis.

6.  When we disclose information

We disclose personal data only as reasonably necessary:

6.1 Service providers

Vendors may process information for us for website hosting, forms, email delivery, support, cloud infrastructure, security, analytics, accounting, legal services, or similar operational functions. Our current company website uses Framer for hosting, forms where configured, and cookieless aggregate analytics.

Service providers may use personal data only to provide contracted services, comply with law, and protect their systems. We expect them to provide protections consistent with this Policy, applicable law, and applicable platform requirements.

6.2 Legal, safety, and rights protection

We may disclose information when we reasonably believe disclosure is necessary to comply with law or valid legal process, respond to an emergency, protect a person's safety, investigate fraud or abuse, secure our services, enforce agreements, or establish or defend legal claims. We assess requests and disclose no more than reasonably required

6.3 Business changes

If ARTIFACTS is involved in a merger, financing, reorganisation, acquisition, insolvency, or sale of all or part of its business or assets, information may be reviewed or transferred as part of that transaction. We will require the recipient to honour applicable privacy commitments and will provide notice where required by law.

6.4 At your direction

We may disclose information to another person or service when you clearly ask us to do so. We do not sell personal data. We do not share personal data for cross-context behavioural advertising.

7. Communications

We may send service or transactional messages needed to respond to you or administer a relationship. We send newsletters and promotional messages only where permitted, generally after you opt in. You can unsubscribe through the message link or by emailing contact@artifacts.software. We may retain a minimal suppression record so that we respect your choice.

8. Retention and deletion

We keep personal data only for as long as reasonably necessary for the purpose collected:

- waitlist and newsletter information is retained until you unsubscribe or the list is retired, plus a minimal suppression record;

- ordinary enquiries, feedback, and support correspondence are normally retained for up to 24 months after the matter closes;

- business and contractual records are retained for the relationship and any period required for tax, accounting, audit, warranty, dispute, or legal purposes;

- security logs are kept for a limited period proportionate to investigation and prevention needs; and

- aggregate or de-identified information may be retained where it can no longer reasonably identify you.

We may retain specific information longer when reasonably necessary to comply with law, resolve a dispute,

prevent fraud or abuse, enforce an agreement, or protect legal rights. When information is no longer needed, we

delete, de-identify, or securely isolate it, subject to provider backup cycles.

9. International processing

ARTIFACTS is based in India. Our providers may process information in India, the United States, the European

Economic Area, and other countries where they operate. Those countries may have different data-protection laws. Where required, we use appropriate contractual, organisational, or legal safeguards and limit transfers to what is necessary.

10. Security

We use reasonable technical and organisational measures designed to protect personal data, including access controls, encrypted transport, vendor review, least-privilege practices, logging, and incident-response procedures appropriate to the nature of the data. No system is perfectly secure. If a breach affects your rights, we will notify you and relevant authorities when required by law.

11. Children

The company website and company communications are intended for a general adult audience and are not directed to children. A person under 18 should not submit personal data through a company form, waitlist, survey, or support channel without the involvement and valid authorisation of a parent or legal guardian where permitted by law. Individual ARTIFACTS products may set a stricter eligibility rule in their product-specific terms. If you believe a child provided personal data without valid authorisation, contact us and we will investigate and delete it where required.

12. Your rights and choices

Depending on where you live and subject to lawful exceptions, you may have the right to:

- know whether and how we process your personal data;

- request access to or a copy of personal data;

- correct or complete inaccurate information;

- request deletion or restriction;

- object to certain processing;

- withdraw consent;

- request portability where applicable;

- opt out of marketing communications;

- nominate another person to exercise rights where applicable; and

- complain to a privacy or data-protection authority.

To exercise a right, email contact@artifacts.software with the subject "Privacy Request" and describe the

request. We may ask for information reasonably needed to verify identity and protect accounts. Authorised agents must show authority to act. We will respond within the period required by applicable law.

We will not discriminate against you for exercising a privacy right.

13. Third-party sites and services

Our website may link to app stores, social networks, partner sites, or other third-party services. Their privacy

practices are governed by their own notices. A link does not mean ARTIFACTS controls or endorses every aspect of that service.

14. Changes to this Policy

We may update this Policy when our services, vendors, or legal obligations change. We will post the revised Policy with a new "Last updated" date. For a material change that meaningfully reduces your rights or expands a new use of personal data, we will provide additional notice or obtain consent when required. We do not treat silence as consent where affirmative consent is required.

15. Contact and grievance handling

Questions, complaints, and rights requests may be sent to: Privacy and Grievance Contact ARTIFACTS LLP Privacy, legal, and general enquiries: contact@artifacts.software Product support: support@artifacts.software Location: Bangalore, Karnataka, India

We will acknowledge and address privacy grievances within the timeframe required by applicable law. If you are not satisfied, you may contact the competent privacy authority in your jurisdiction.