Legal

Privacy Policy

Last updated: October 4, 2026

ArtDrop Web is $39 per month. ArtDrop Mac is not currently offered for purchase; existing Mac licenses keep working. The two products are separate, and their privacy posture differs. We do not sell personal data or use your artwork to train automated systems. Read the security and privacy record for customer actions and current boundaries.

1. Who We Are

ArtDrop is software developed and sold by StanHattie LLC ("we," "us," "our"). Our website is getartdrop.com. Contact: support@getartdrop.com

2. How ArtDrop Runs (Web vs Mac)

Mac app (existing licenses). ArtDrop installs and runs on your Mac. Saved settings remain in a local configuration file, and recognized credentials can also be copied to the system keyring when available. When you publish, your Mac sends the artwork, product data, credentials, and related information to the services you chose, including Shopify or Etsy, compatible print providers, the copy service provider, and supported storage services. The Mac app separately sends license activation and validation data to the ArtDrop license server.

Web app ($39/mo). ArtDrop runs on infrastructure operated by StanHattie LLC (currently Railway). Saved connection credentials are encrypted at rest, masked in the browser, and removed or replaced with reference values in account exports. Other settings and identifiers are stored so ArtDrop can run your work. Uploaded artwork and derived files are processed in private account areas and may be transferred to the storage services and providers you choose. Eligible workspace files are included in self-service account deletion. After consent, Google Analytics and Microsoft Clarity can load on the login and claim pages; the signed-in dashboard does not load those marketing analytics services.

Both tiers include account and event records, connected-service transfers, and authorized support and administration access as described below. We do not sell personal data or use artwork for automated-system training.

3. What We Receive

For Mac licensing and purchase delivery, StanHattie LLC can receive and store:

License activation

Web app, additionally, we receive and store:

Purchase information (via Stripe)

Affiliate and referral information

These are the principal categories ArtDrop receives directly. Connected services also receive the workflow data described in Sections 5 and 6.

We do not use your artwork for automated-system training or sell your account data. We disclose data to the processors and connected services listed below to provide the service, secure it, process payments, communicate with you, and complete workflows you request. Authorized personnel may access hosted account data when needed for security, operations, legal compliance, or support.

4. Your API Keys

Mac app. When you connect services like the copy service provider, Gelato, Printful, Printify, Shopify, Etsy, or a supported storage service, the local save path attempts to copy recognized sensitive values into the system keyring when available and also writes the full configuration object to the local JSON configuration file. Normal worker calls use those credentials from your machine to authenticate to the connected service. License activation separately transmits the license fields listed in Section 3 to StanHattie LLC's license server.

ArtDrop Web. Saved connection credentials are encrypted at rest. ArtDrop uses a credential only for the connected work you authorize. Browser views mask saved credentials. Treat every downloaded settings or account-data file as sensitive. Revoke a credential in the service that issued it if you think it was exposed.

Pinterest OAuth in the Web app. When you connect Pinterest for direct organic publishing, Pinterest returns an access token and a rotating refresh token after you authorize ArtDrop. ArtDrop stores the complete token bundle in an AES-256-GCM encrypted envelope that is cryptographically bound to your ArtDrop account and selected ArtDrop store. The database does not store the tokens as plaintext, and the browser does not receive them. The backend decrypts them only when it must call Pinterest for that connection.

5. Copy Generation (Third-Party Processor)

When you use ArtDrop's copy generation, your artwork image and your voice/copy rules are sent to a third-party copy service, which analyzes the image and generates product titles, descriptions, SEO fields, and alt text. Product tags are assembled separately by ArtDrop from configured and analyzed metadata sources. How that request reaches the copy service depends on your tier:

What gets sent to the copy service:

What does not get sent:

We do not sell your data, and we do not use your artwork to train automated systems. The only StanHattie systems involved are described in Section 2 (How ArtDrop Runs) and Section 6 (Subprocessors).

The copy service says commercial API inputs and outputs are not used for service training by default; explicit feedback or another opt-in can be an exception. Its standard API policy deletes inputs and outputs within 30 days, except where different terms apply or longer retention is needed for Usage Policy enforcement or legal compliance. Review the copy service's current commercial training policy and API retention policy for the complete exceptions.

If you prefer, you can turn copy generation off and write product copy manually. ArtDrop can use your titles, descriptions, and tags when publishing through the connections you configured.

6. Subprocessors and Third-Party Services

ArtDrop relies on the third-party services below to operate. Each service has its own privacy policy and acts as a subprocessor for the limited data described:

We disclose data to the subprocessors and connected services above for the stated purposes and as otherwise required by law. We do not sell personal data. We use analytics cookies only after consent and a first-party referral-attribution cookie when a visitor uses an affiliate link; we do not use cross-site behavioral advertising cookies.

6a. Pinterest Direct Organic Publishing (Beta, ArtDrop Web)

Availability. Direct organic Pinterest publishing is offered in ArtDrop Web as a beta. The workflow uses ArtDrop Web's hosted credential vault and PostgreSQL records; it is not an ArtDrop Mac feature. Pinterest Product Pins through the Shopify sales channel are a separate route and do not use this direct workflow.

Identity and owned boards. You authenticate and authorize on Pinterest. ArtDrop does not collect your Pinterest password or ask you to create a developer app or paste a token. ArtDrop stores the Pinterest account ID and username returned for the authenticated user inside the encrypted credential bundle. When you open the board picker, ArtDrop reads the current account and board list from Pinterest and displays only boards whose owner matches that authenticated username. Collaborative boards and boards without a matching owner are excluded. The board list read from Pinterest may be held briefly in ArtDrop's server memory, for up to six hours, so the board picker keeps working when Pinterest is slow. That list is never written to storage. From it, only the chosen board identifier is recorded with the publication review and ledger.

Exact consent, delivery, and readback. You choose one eligible ArtDrop product source and review the exact board, image URL, Shopify destination link, title, description, and alt text. Preparing the review stores those values, but does not publish. A separate Publish click is the immediate timing decision for one Pin; ArtDrop does not schedule, batch, or background-post direct organic Pins. The delivery ledger stores the ArtDrop account and store, source event and review ID, selected board identifier, exact reviewed content and URLs, status, Pinterest Pin ID when returned, verification result, bounded error code, and created, claimed, updated, and completed timestamps. After creation, ArtDrop reads the exact returned Pin ID and marks success only when the available provider fields match the reviewed record. An ambiguous write or mismatched readback is marked unknown for manual review and is not retried automatically. Raw Pinterest response bodies are not stored in the publication ledger.

Disconnect and provider-side retention. Disconnecting Pinterest deletes the local encrypted credential for that ArtDrop store. Pinterest does not provide the end-user token-revocation call this workflow would need, so disconnecting in ArtDrop does not by itself revoke the remote authorization; you must also remove ArtDrop in Pinterest security settings. Disconnecting does not delete Pins already created on Pinterest and does not erase the ArtDrop delivery ledger. ArtDrop account erasure deletes the active local Pinterest credential, pending authorization state, and publication ledger, subject to the backup, security, and legal limits in Section 12. Pinterest may retain and use Pins, account activity, and related data under Pinterest's Privacy Policy; ArtDrop cannot erase those provider-side copies for you.

6b. Bluesky Posting in Social Publishing

Availability. Bluesky posting is available in ArtDrop Web's Social Publishing. It is not an ArtDrop Mac feature. Connecting a profile does not publish anything.

Identity and permissions. You enter your Bluesky handle and sign in on Bluesky's own page. ArtDrop does not receive your Bluesky password and does not ask you to create an app password for the web connection. ArtDrop asks Bluesky only for permission to create posts and upload post images. ArtDrop stores your handle, account identifier, granted permissions, and connection status with your account, and keeps the access and refresh tokens in an encrypted credential bundle used only when ArtDrop must call Bluesky for that connection.

Review, schedule, and delivery. ArtDrop stores each draft you create: the chosen product and its verified public listing link and image, the caption, the image description, the schedule, and your review confirmation. Only a post you review and schedule enters the delivery queue. After publishing, ArtDrop records the returned post identifier and status so you can check the result. You can cancel a post while it is still waiting to send.

Disconnect, erasure, and provider-side retention. Disconnect removes the encrypted credential and any waiting posts for that profile from ArtDrop and asks Bluesky to revoke ArtDrop's access. If Bluesky does not confirm the revocation, ArtDrop tells you to remove ArtDrop in your Bluesky settings. Disconnecting does not delete posts already published on Bluesky. Social Publishing records are included in your account export and in account deletion. Bluesky retains posts and account activity under its own privacy policy; ArtDrop cannot erase those copies for you.

7. Website Analytics

After you accept analytics cookies, the getartdrop.com website uses Microsoft Clarity to understand how visitors interact with marketing pages. Clarity processes pseudonymous identifiers, page and device metadata, interaction events such as clicks and scrolls, performance/diagnostic events, DOM/layout information for session playback, and IP-based location signals. Input fields are masked. Microsoft may set first- and third-party cookies described in its documentation. We use the resulting data for product and website analytics, not to sell personal data or target ads.

After consent, Google Analytics and Microsoft Clarity can load on the marketing website and the hosted login and claim pages. The signed-in dashboard does not load these marketing analytics services. ArtDrop still records the first-party account, authentication, security, feature-usage, performance, drop, provider, store, and diagnostic data described in Sections 3 and 10.

You can learn more about Clarity's data practices at clarity.microsoft.com/terms.

8. Cookies

Mac app. The Mac app opens its local interface in your browser and may use a signed first-party session cookie for that local session. Opening the local interface does not load the hosted login-page analytics described in Section 7.

Web app. When you sign in to ArtDrop Web, ArtDrop sets a strictly necessary HttpOnly, Secure, SameSite=Lax session cookie. Current defaults allow a session to remain signed in for up to 30 days, check for 30 minutes of inactivity, and allow up to 3 concurrent sessions. The login and claim pages can also load consented analytics cookies as described in Section 7.

Marketing website. The getartdrop.com website can receive functional delivery cookies from Cloudflare and, after you opt in through the consent banner, analytics cookies for Google Analytics and Microsoft Clarity as described in Section 7. We do not use those analytics for targeted advertising.

Affiliate referrals. When you follow an ArtDrop affiliate link or use a URL containing a referral code, ArtDrop can set a signed first-party cookie named artdrop_ref. It records the normalized referral code and first-touch time, is HttpOnly, Secure, and SameSite=Lax, and is not readable by page scripts. Its lifetime follows the affiliate setting, whose seeded default is 90 days. The first marker wins even if its code does not match an active affiliate, so an earlier invalid marker can prevent a later referral from being captured until the cookie is removed. You can remove it through your browser settings, but doing so may prevent attribution.

9. Email Communications

When you purchase ArtDrop, we send transactional messages and may send occasional product updates to the email address used at checkout. Marketing messages include an unsubscribe link. We do not sell or rent your email address; email processors receive it as needed to deliver authorized messages.

10. How We Use the Data We Have

We do not use personal data for targeted advertising or sell it.

11. Where Your Data Is Stored

License activation data and hosted web account, configuration, credential, file, and operational data are stored on infrastructure hosted by Railway in the United States. Data sent to connected services is stored and processed under those services' locations and policies. If you are outside the United States, your data may be transferred to and processed in the United States and other locations used by those services.

12. Data Retention

ArtDrop does not publish one automatic retention period for every category of data. Scheduled artwork remains available until its release, and operational, security, license, billing, credit, audit, affiliate, and certificate records follow the retention needs that apply to each record. Copies sent to storage services, storefronts, or print providers remain under those services' policies.

Self-service account deletion removes the hosted sign-in account, passkeys, active sessions, sign-in links, saved settings and credentials, drop tracking, eligible private workspace files, connected-source data, stored Motion audio, and Social Publishing (Social Studio) records tied to the account, including connected Bluesky profiles, their encrypted credentials, drafts, schedules, and delivery records. It also adds the email address to the do-not-email list.

Purchase, billing, credit, audit, and issued-certificate records may remain under their transaction, security, and authenticity-record obligations. Account deletion does not cancel a subscription, revoke a Mac license, or delete data controlled by Shopify, Etsy, Pinterest, a print provider, or another connected service.

Deletion provides a recovery key and a status page so you can continue an interrupted request. ArtDrop reports an incomplete deletion when a required step cannot finish. Once deletion completes, it cannot be undone.

13. Reddit Data You Provide

ArtDrop does not fetch Reddit profiles or comments from a username. If you upload your own Reddit data export for writing analysis, ArtDrop processes the comment text for that request. The uploaded CSV is not saved as a file, and suggested voice rules are saved only when you apply them.

14. Your Rights

You can ask support to review a request for:

The self-service export includes customer-facing application and license records tied to the signed-in email, including account and authentication metadata, saved configuration and templates, usage and drop history, credit records, audit metadata, and connected-store metadata. Reusable credentials, raw license keys, one-time tokens, session identifiers, and another person's data are redacted or replaced with reference values. If any required source is unavailable, ArtDrop reports that the complete export is temporarily unavailable and does not download a partial file.

The export does not include file-backed artwork or data controlled by Shopify, Etsy, a print provider, or another connected service. Use those services' export tools for data they control. Email support@getartdrop.com with the subject "Privacy Request" if you need help with a broader request.

15. Children

ArtDrop is not directed at children under 13. We do not knowingly collect personal data from children.

16. Changes to This Policy

If we update this policy, we will post the revised version here with a new "Last updated" date. Continued use of ArtDrop after an update constitutes acceptance.

18. Affiliate and Referral Data

Participation in the affiliate program is optional and subject to the Affiliate Program Agreement. An affiliate statistics link gives anyone who has it access to that affiliate's aggregate clicks, conversions, commissions, override earnings, and payout history. It does not show referred-customer personal details. Keep the link private and contact support if it is exposed. We may review referral and transaction signals to enforce program rules, investigate fraud or self-referral, handle refunds and disputes, and administer payouts.

19. Contact

Privacy questions or requests: support@getartdrop.com

Postal mail:
StanHattie LLC
741 35th St
Des Moines, IA 50312
United States