California Resident Notice at Collection
Last updated: February 17, 2026
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 ("CCPA"), requires us to provide some additional information to California residents. This section only applies to you if you are a California resident, although please note that the rights afforded herein are the same as those offered to all of our users in our main Privacy Policy.
This notice does not apply to personal information we collect from our employees and job applicants in their capacity as employees and job applicants.
Categories of Personal Information We Collect
The following chart details the categories of personal information we collect, how we use it, and with whom we share it:
| Category of Personal Information | Purposes of Use | Categories of Third Parties to Whom We Disclose This Information | Do We "Sell" or "Share" This Information? |
|---|---|---|---|
| Contact information (such as your full name, email address) | Provide the Services; Communicate with you; Analyze use of and improve the Services; Comply with law or defend our legal rights; Security/fraud prevention | Service providers (Convex, Novu, Vercel, PostHog); Entities for legal purposes | No |
| Billing information (such as billing address, last 4 digits of card number, transaction history) | Provide the Services; Process payments; Comply with law or defend our legal rights; Security/fraud prevention | Service providers (Stripe); Entities for legal purposes | No |
| Product interaction information (such as uploaded artifacts, comments, review feedback) | Provide the Services; Analyze use of and improve the Services; Security/fraud prevention | Service providers (Convex, Vercel); Entities for legal purposes | No |
| Internet network and device information (such as IP address, browser type, operating system, device identifiers) | Provide the Services; Analyze use of and improve the Services; Security/fraud prevention | Service providers (Vercel, Convex, PostHog); Entities for legal purposes | No |
| Login information (such as your email address and password hash) | Provide the Services; Security/fraud prevention | Service providers (Convex); Entities for legal purposes | No |
| Professional or employment information (such as company name, job title — if voluntarily provided) | Provide the Services; Communicate with you | Service providers; Entities for legal purposes | No |
For more information about each category of personal information, purpose of use, and third parties, please see the "What we collect and why" and "When we access or disclose your information" sections of our Privacy Policy.
Your Rights Under the CCPA
As a California resident, you have the following rights:
- Right to Know. You have the right to know what personal information we collect, use, disclose, and sell/share. This notice and our Privacy Policy provide this information.
- Right of Access. You can request a copy of the specific pieces of personal information we have collected about you.
- Right to Delete. You can request that we delete the personal information we have collected from you, subject to certain exceptions.
- Right to Correct. You can request that we correct inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale/Sharing. You have the right to opt out of the sale or sharing of your personal information. We do not sell or share your personal information as defined under the CCPA, and we have not done so in the past 12 months.
- Right to Limit Use of Sensitive Personal Information. We do not use or disclose sensitive personal information for purposes beyond those permitted by the CCPA, so no opt-out is needed.
- Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality because you exercised your rights.
How to Exercise Your Rights
To exercise any of the rights described above, you may:
- Email us at privacy@artifactreview.com
- Update your account settings directly within the Services
When you submit a request, we will need to verify your identity. At a minimum, we will verify your name and the email address associated with your account. If we cannot verify your identity, we may be unable to fulfill your request.
You may also designate an authorized agent to make a request on your behalf. To do so, we will require written authorization with a signature from the account holder.
Retention of Personal Information
Please see the "Data retention" section of our Privacy Policy for information about how long we retain each category of personal information.
Shine the Light Disclosure
The California "Shine the Light" law gives residents of California the right under certain circumstances to request information regarding the manner in which we disclose certain categories of personal information with third parties for their direct marketing purposes. We do not disclose your personal information to third parties for their own direct marketing purposes.
Contact Us
If you have questions about this notice or your rights under the CCPA, please contact us at privacy@artifactreview.com.
Adapted from the Basecamp open-source policies (CC BY 4.0).