ArtifactVerify – Privacy Policy

We do not collect or store biometric identifiers or personal facial data. Images are strictly used for artifact evaluation.

For each analysis, a public verification page may store:

• Thumbnail image
• Analysis summary
• Typology classification
• Authenticity probability score
• Date of analysis
• SHA-256 image hash (to lock the report to the original image set)

This data is publicly accessible via the QR code generated for the report.

Verification pages are retained indefinitely unless the owner requests deletion.

Third-party sharing: We do not sell or rent your email address to third parties. We use email service providers (Resend, ImprovMX) to deliver messages on our behalf; these providers may not use your information for their own purposes.

Payments are processed by Stripe.

We do not store:

• Credit card numbers
• Billing addresses
• Stripe customer records

We only receive limited, non-sensitive metadata needed for technical support (e.g., transaction success/failure).

Our hosting provider, Vercel, automatically logs IP address, browser metadata, and request timestamps. These logs are standard for security, abuse prevention, and troubleshooting.

We do not use this data for tracking or profiling.

We store timestamps, SHA-256 image hashes, and performance/debug data for:

• Ensuring accuracy
• Supporting billing or payment issues
• Verifying that reports match their original image sets

These may be retained permanently for security and verification purposes.

To request deletion of your data, email support@artifactverify.com with your request. We will respond within 30 days.

You may request deletion of your public report by providing the Report ID and the Verification Token included in your original PDF Analysis Report. This ensures only the rightful owner can request deletion.

• Free Tier Quick Check: You may request deletion of your email address at any time. We will remove your email from our system and unsubscribe you from all communications.
• Images remain: Email deletion does not require deletion of your submitted images. Once anonymized (stripped of personal identifiers), images are no longer linked to you and may be retained for analysis verification or training purposes per your original consent.

Deletion requests do not apply to:

• Stripe billing records (required by law)
• SHA-256 hashes needed to maintain system integrity (but the public page can be removed)
• Anonymized images already included in training datasets (cannot be individually identified or removed)

• Opt-in only: Training data collection requires your explicit consent via the checkbox before upload. You can use PointCheck without consenting to data usage.
• Free tier requirement: Free Quick Check assessments require consent as consideration for the free service.

• Accuracy improvement: Images are used to improve our evidence-based verification algorithms, making assessments more accurate.
• Model training: Anonymized images may be used to train or fine-tune AI models for better artifact analysis.
• Research: Aggregated, anonymized data may be used for academic research on lithic analysis and authentication.

Before inclusion in any training dataset, images are stripped of all personal identifiers:

• No email addresses, names, or account information retained
• No IP addresses or location data attached
• Images assigned random identifiers with no link to original submitter
• EXIF metadata removed

Consented images may be retained indefinitely in anonymized form for training purposes, even if you later request deletion of your public report. The anonymized training data cannot be linked back to you.

• Academic institutions: Universities and research organizations studying lithic analysis, archaeology, or authentication methodologies.
• Research partners: Organizations collaborating on artifact authentication research and technology advancement.
• Commercial partners: Companies developing tools or services that advance the study of lithics and artifact authentication.

Shared datasets contain only:

• Anonymized artifact images
• Analysis labels (authenticity assessment, typology, material)
• No personal identifiers, email addresses, or account information

• No royalties or compensation: By consenting to data usage, you waive any claim to royalties or compensation from dataset licensing.
• Non-reversible anonymization: Once anonymized and included in a dataset, images cannot be individually identified or removed.
• Opt-out of future collection: You can decline the consent checkbox on future uploads to prevent additional images from being collected.

Any revenue generated from dataset licensing is used to support continued development of PointCheck, improve analysis accuracy, and maintain free tier availability.