Privacy Policy

Last updated: July 14, 2026

1. Who We Are

ArtDrop is software developed and sold by StanHattie LLC ("we," "us," "our"). Our website is getartdrop.com. Contact: support@getartdrop.com

2. How ArtDrop Runs (Web vs Mac)

Mac app ($399 one-time). ArtDrop installs and runs on your Mac, where its configuration and credential files are stored. When you run a workflow, the artwork, product data, credentials, and related business data needed for that workflow are sent directly from your machine to the services you configured (Shopify, your print providers, Anthropic, Backblaze). The Mac app sends license activation and validation data to the ArtDrop license server; the hosted ArtDrop workflow backend does not process normal Mac-app drops.

Web app ($39/mo). ArtDrop runs as a hosted web application on infrastructure operated by StanHattie LLC (currently Railway). Your account configuration, including credentials and connection tokens, is stored in our database so the server can run drops on your behalf. Uploaded artwork and derived files are processed in per-account work areas and may be transferred to your configured storage and providers; copies can remain in processing, archive, connected-storage, or backup locations until cleaned up or deleted under the retention process in Section 12. We do not intentionally load the marketing site's Google Analytics or Microsoft Clarity scripts in the authenticated app. The app does collect first-party account, security, performance, drop, provider, store, and diagnostic records needed to operate its features.

Both tiers: no public dashboard, no admin login that lets third parties see your account, no resale of your data, and no use of your artwork for model training, ever.

3. What We Actually Receive

Mac app, the only data StanHattie LLC receives is:

License activation

• Machine fingerprint hash, a one-way hash of hardware identifiers, generated when you activate your license. Used solely to enforce the machine limit on your license. It cannot identify your computer to anyone.
• License key, the activation key issued to you at purchase
• Activation timestamps, when your license was activated and last validated

Web app, additionally, we receive and store:

• Your account email and authenticated session
• The configuration you save (API keys and connection tokens, voice/copy rules, store and provider connections, template settings)
• Artwork uploads and derived files while they are held in per-account processing or archive areas, configured storage, and operational backups
• Operational records needed to run and reconcile drops: a drop/event ID, store and product-line destination, provider and resulting product references, status, timestamps, and bounded error details
• A perceptual fingerprint of the processed listing image used to reconcile a product outcome with its ArtDrop drop. The fingerprint is not the image, cannot recreate the artwork, and is not used for advertising, cross-site tracking, or model training

Purchase information (via Stripe)

• Name and email, provided at checkout, used to deliver your license key or provision your web subscription and to provide support

Affiliate and referral information

• If you follow an affiliate link, the affiliate code and first-touch timestamp in a signed first-party referral cookie
• If a purchase is attributed, the referring affiliate, purchase/customer identifiers, purchase amount, commission status, and refund or dispute status
• For an accepted affiliate, name, email, referral code, agreement version and acceptance-evidence reference, parent-affiliate relationship if any, payout account identifier/status, clicks, referral and commission ledger, payout history, tax-related account status, and administrative notes

These are the principal categories ArtDrop receives directly. Connected services also receive the workflow data described in Sections 5 and 6.

4. Your API Keys

Mac app. When you connect services like Anthropic, Gelato, Printful, Printify, Shopify, or Backblaze, ArtDrop stores your API keys in a local configuration file on your computer. These keys are never transmitted to StanHattie LLC. All API calls go directly from your machine to the service you configured.

Web app. Your API keys and connection tokens are stored in the hosted application database with application access controls and used to execute the workflows you configure. Values are masked in browser views and portable exports; that masking is a display and export control, while the backend must be able to retrieve and use the stored value for a requested workflow. Credentials are not sold or exposed through a public dashboard. A credential is transmitted to the relevant connected service when authentication requires it. If you cancel your subscription, you can request deletion of stored credentials at support@getartdrop.com, subject to the retention limits in Section 12.

5. Copy Generation (Third-Party Processor)

When you use ArtDrop's copy generation, your artwork image and your voice/copy rules are sent to a third-party language-model provider (Anthropic), which analyzes the image and generates product titles, descriptions, and SEO tags. How that request reaches Anthropic depends on your tier:

• Mac app. The request goes directly from your machine to Anthropic. It does not pass through StanHattie LLC servers.
• Web app. The request is made by our backend on your behalf so that drops can run server-side, using ArtDrop's managed copy-engine integration (or, if you have supplied your own copy-engine key, the credential saved in your account). The image and voice rules are processed through our backend for that request. The source image or derived files may also remain in per-account processing or archive areas, configured storage, and operational backups under the retention process in Section 12.

What gets sent to Anthropic:

• Your artwork image (for visual analysis)
• Your voice rules (so the copy sounds like you)
• Basic context like your artist name and artwork type

What does not get sent:

• Your payment card details
• Financial data
• Customer information
• Store analytics or sales data

We do not sell your data, and we do not train any models on your artwork. The only StanHattie systems involved are described in Section 2 (How ArtDrop Runs) and Section 6 (Subprocessors).

Anthropic says commercial API inputs and outputs are not used for model training by default; explicit feedback or another opt-in can be an exception. Its standard API policy deletes inputs and outputs within 30 days, except where different terms apply or longer retention is needed for Usage Policy enforcement or legal compliance. Review Anthropic's current commercial training policy and API retention policy for the complete exceptions.

If you prefer, you can turn copy generation off and write all product copy manually. ArtDrop will still handle file processing, product creation, and publishing, you just provide the titles, descriptions, and tags yourself.

6. Subprocessors and Third-Party Services

ArtDrop relies on the third-party services below to operate. Each service has its own privacy policy and acts as a subprocessor for the limited data described:

• Stripe (stripe.com/privacy), processes customer payments. If you are accepted as an affiliate and onboard for payouts, Stripe Connect also processes your identity, contact, bank/payout, verification, and tax-form information. StanHattie LLC remains responsible for configuring, reviewing, filing, and delivering any required information returns; Stripe provides tooling and delivery options.
• Anthropic (anthropic.com/policies), copy generation, as described in Section 5 above.
• Gelato, Printful, Printify, if you configure a print-on-demand provider, your product data goes directly from your machine (or, on the web app, from our backend) to that provider.
• Shopify, if you connect a storefront, product data is sent directly to that platform.
• Backblaze B2 (backblaze.com), if you use Backblaze for image hosting, files go directly from your machine to your Backblaze bucket.
• Railway (railway.com), hosts the ArtDrop web application backend and the license activation server in the United States.
• Cloudflare (cloudflare.com), serves the getartdrop.com marketing site and provides DNS, TLS termination, and DDoS protection. Cloudflare may set functional cookies required to deliver the site.
• Resend (resend.com), delivers transactional email (license keys, magic-link sign-in, account notifications) on our behalf.
• Migadu (migadu.com), hosts the support@getartdrop.com and hello@getartdrop.com mailboxes used for customer email.
• Twilio (twilio.com), carries the SMS text messages if you opt in to our SMS Program (Section 17). Twilio receives your phone number and message content solely to deliver the messages.
• Google Analytics 4 (policies.google.com), provides aggregate marketing-site analytics after you accept analytics cookies. We do not intentionally load it in the authenticated application.
• Microsoft Clarity (microsoft.com/privacy), provides consent-gated session-replay analytics for marketing pages, as described in Section 7. We do not intentionally load it in the authenticated application.

We disclose data to the subprocessors and connected services above for the stated purposes and as otherwise required by law. We do not sell personal data. We use analytics cookies only after consent and a first-party referral-attribution cookie when a visitor uses an affiliate link; we do not use cross-site behavioral advertising cookies.

7. Website Analytics

After you accept analytics cookies, the getartdrop.com website uses Microsoft Clarity to understand how visitors interact with marketing pages. Clarity processes pseudonymous identifiers, page and device metadata, interaction events such as clicks and scrolls, performance/diagnostic events, DOM/layout information for session playback, and IP-based location signals. Input fields are masked. Microsoft may set first- and third-party cookies described in its documentation. We use the resulting data for product and website analytics, not to sell personal data or target ads.

We configure Google Analytics and Microsoft Clarity for consented use on the getartdrop.com marketing website and do not intentionally load those services in the authenticated ArtDrop application. That separation does not mean the application collects no data: the hosted app records the first-party account, authentication, security, feature-usage, performance, drop, provider, store, and diagnostic data described in Sections 3 and 10. We use those application records to provide, secure, measure, reconcile, and improve the service, not for cross-site behavioral advertising.

You can learn more about Clarity's data practices at clarity.microsoft.com/terms.

8. Cookies

Mac app. The Mac app runs locally and does not use cookies.

Web app. When you sign in to the hosted web app at app.getartdrop.com, we set a strictly necessary session cookie to keep you logged in. It is not used for advertising or cross-site tracking.

Marketing website. The getartdrop.com website uses a small number of functional cookies from our hosting provider (Cloudflare) required for site delivery, and, only after you opt in through our consent banner, analytics cookies for Google Analytics and Microsoft Clarity as described in Section 7. We do not use advertising cookies or cross-site tracking cookies.

Affiliate referrals. When you intentionally follow an ArtDrop affiliate link or use a URL containing a referral code, ArtDrop may set a signed first-party cookie named artdrop_ref. It records only the referral code and first-touch time, is HttpOnly and SameSite=Lax, is not readable by page scripts, and normally expires after 90 days. It is used to attribute an eligible purchase and prevent the referral timestamp from being altered; it does not follow you across unrelated websites. You can remove it through your browser settings, but doing so may prevent attribution.

9. Email Communications

When you purchase ArtDrop, we send transactional messages and may send occasional product updates to the email address used at checkout. Marketing messages include an unsubscribe link. We do not sell or rent your email address; email processors receive it as needed to deliver authorized messages.

10. How We Use the Data We Have

• Delivering your license key and download link via email
• Activating and validating your license
• Enforcing the machine limit on your license
• Providing customer support when you contact us
• Sending occasional product updates (with easy unsubscribe)
• Creating and authenticating hosted web accounts
• Storing hosted configuration and credentials
• Running requested drops, transferring files, and publishing product data
• Protecting the service, maintaining operational logs, and diagnosing failures
• Recording referral attribution, calculating and auditing commissions, detecting abuse, and administering affiliate payouts

We do not use personal data for targeted advertising or sell it.

11. Where Your Data Is Stored

License activation data and hosted web account, configuration, credential, file, and operational data are stored on infrastructure hosted by Railway in the United States. Data sent to connected services is stored and processed under those services' locations and policies. If you are outside the United States, your data may be transferred to and processed in the United States and other locations used by those services.

12. Data Retention

We retain license data while the license is active. Hosted account, configuration, credential, and operational drop records are retained while the account is active and then deleted or de-identified on request or under our operational deletion process, subject to legal, security, backup, and accounting needs. Operational logs are retained as reasonably needed for security, reconciliation, and diagnosis. Uploaded artwork and derived files may remain in per-account processing or archive areas, configured storage, provider systems, and operational backups until cleanup, account deletion, or another applicable retention process removes them. ArtDrop does not offer those files as a permanent user-facing artwork library, but we do not promise zero or instantaneous retention. If you request license-data deletion, we will remove your name, email, and machine fingerprint within 30 days and deactivate the license. Referral, commission, payout, tax, refund, dispute, and related audit records are retained as needed to administer the program, prevent duplicate payment/fraud, resolve disputes, and satisfy tax, accounting, and legal obligations; deletion requests may be fulfilled by de-identifying non-required personal fields while preserving required financial records. Transaction records may be retained for at least 3 years or longer when tax, accounting, dispute, or legal rules require it.

13. Reddit Community Monitoring

StanHattie LLC uses Reddit's API to read public posts in a small set of print-on-demand and art-business subreddits, solely to find discussions relevant to ArtDrop and inform our product roadmap. We access only public content via OAuth2, read-only. We do not store Reddit content, usernames, or user identifiers; matching happens in memory and the only output is a link to the public thread. Because we retain no copies, content a user deletes on Reddit stops appearing on our next read, satisfying Reddit's 48-hour deletion requirement by design. We never use Reddit data for model training, never sell or share it, and never use it to identify individuals.

14. Your Rights

You can request:

• Access, a copy of the personal data we hold about you
• Correction, correction of inaccurate data
• Deletion, removal of your data (this will deactivate your license)
• Portability, your data in a portable format

Email support@getartdrop.com with the subject "Privacy Request." We will respond within 30 days.

15. Children

ArtDrop is not directed at children under 13. We do not knowingly collect personal data from children.

16. Changes to This Policy

If we update this policy, we will post the revised version here with a new "Last updated" date. Continued use of ArtDrop after an update constitutes acceptance.

17. SMS / Text Messaging

If you opt in by texting ArtDrop first at (833) 278-5080, we collect and use your phone number solely to reply within the support conversation you initiated. We do not collect phone numbers through a web form for this program and do not send proactive account notifications, promotional messages, or marketing texts.

• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
• Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text message services.
• Message frequency varies, and message and data rates may apply.
• You can opt out at any time by replying STOP, or get assistance by replying HELP. Full SMS Program terms are in our Terms of Service.

18. Affiliate and Referral Data

Participation in the affiliate program is optional and subject to the Affiliate Program Agreement. Affiliate statistics links are access-controlled capability links; anyone who possesses an unexpired link may be able to view the affiliate's aggregate clicks, conversions, commissions, and payout history, but not referred-customer personal details. Affiliates should keep those links private and contact us if one should be replaced. We may review referral and transaction signals to enforce program rules, investigate self-referral, fraud, duplicate attribution, prohibited traffic, refunds, disputes, and payment errors.

19. Contact

Privacy questions or requests: support@getartdrop.com

Postal mail:
StanHattie LLC
731 SE Alices Rd PMB 1035
Waukee, IA 50263
United States