Data Retention & Deletion Policy

Auric Artisan follows a minimal-retention approach. We retain personal data only when it is necessary to operate the Platform, provide requested tools, maintain security, respond to support requests, comply with legal obligations, or resolve disputes.

The Platform provides color science tools, articles, web analysis, theme generation, palette extraction, visual simulations, and exploratory utilities. Data retention depends on the feature used and whether the data is needed for operation, security, or support.

• Purpose limitation — Data is kept only for the purpose it was provided or generated
• Storage limitation — Data is deleted, minimized, or anonymized when it is no longer needed
• Infrastructure status — Account, paid subscription, and API features may be available, limited, or unavailable depending on deployment and rollout status
• Accountability — Retention practices are reviewed as the Platform evolves

• Contact and support data (name, email address, message content, and related correspondence) — Retained as needed to respond and maintain records
• Tool inputs (URLs, color values, images, palettes, theme settings, page metadata, or uploaded materials) — Processed to provide requested results and retained only where necessary
• Generated outputs (analysis reports, extracted palettes, generated themes, exports, simulations, or previews) — May be temporarily stored, cached, or delivered to the user
• Usage analytics (aggregated or anonymized) — May be retained to improve performance, reliability, and user experience
• Security logs (IP addresses, request metadata, abuse signals, and error logs) — May be retained for security, debugging, and abuse prevention
• Billing records — If paid services are available, required billing records may be retained according to tax, accounting, payment-provider, and financial regulations

Some Auric Artisan tools process user-provided inputs to generate results. This may include web analysis, security-oriented checks, Lighthouse-like performance analysis, responsive design review, palette extraction, theme generation, color science calculations, visual simulations, and Ishihara-style exploratory plate generation.

Processing data may include submitted URLs, page metadata, screenshots, extracted colors, rendered previews, generated themes, uploaded images, configuration values, logs, and temporary files needed to complete the request.

Users should avoid submitting sensitive personal data, confidential credentials, medical records, payment information, or private access tokens into exploratory tools unless a feature specifically asks for that information and explains why it is required.

Where account features are enabled, users may request account deletion through available account controls or official support channels. Users may also request deletion of applicable personal data submitted through contact forms, support channels, or tool-related workflows.

When a valid deletion request is received:

• Review — We verify the request and identify applicable records
• Active systems — Eligible personal data is removed, minimized, or anonymized within a reasonable period
• Backups and logs — Backup copies and security logs may persist until normal rotation or deletion cycles complete

Some data is automatically deleted, rotated, minimized, or anonymized based on feature-specific rules:

• Temporary processing data for web analysis, palette extraction, image processing, PDF generation, exports, previews, and simulations may be deleted after processing is complete
• Cached reports, generated themes, screenshots, and extracted assets may be removed when no longer needed for delivery, debugging, or abuse prevention
• Session tokens, cookies, and local preferences may expire according to browser settings or Platform configuration
• Security and abuse-prevention logs may be retained for a limited period to protect the Platform

Certain data may be retained beyond normal retention periods when required for legal, tax, financial, security, or compliance reasons, including:

• Records required by applicable laws or valid legal requests
• Data related to active disputes, investigations, abuse prevention, or platform security
• Financial records, if paid services are introduced in the future
• Cybersecurity records where retention is required by applicable security regulations

Once the legal or operational need expires, the data is deleted, minimized, or anonymized where practical.

Depending on your location and applicable law, you may have rights to access, correct, export, restrict, object to, withdraw consent for, appeal, or request deletion of personal data. These rights may apply under laws such as GDPR, India’s DPDP Act, CCPA/CPRA, or other privacy laws.

Requests should be submitted through available account controls, the contact page, or official support channels listed on the Platform.

We aim to respond to valid requests within the timeframe required by applicable law.

Data is protected using reasonable technical and organizational measures such as access controls, secure transport, logging, monitoring, and encryption where appropriate.

Security controls may vary by feature and infrastructure stage. Additional safeguards may be introduced as account systems, paid services, and advanced platform infrastructure evolve.

More details are available in our Security Policy.

This policy may be updated periodically to reflect new tools, infrastructure changes, account availability, paid services, legal requirements, or operational improvements.

Material changes may be communicated through the Platform or other appropriate channels. Continued use after an update means you accept the revised policy.