Privacy Policy

Slushie is an AI content studio operated by Artefaktx (“we”, “us”). This policy describes what we collect, why, and what we will never do with it. It is written to be read, not to hide things.

What we collect

Account data — your email address and a hashed password, held in our authentication provider (Supabase). Brand data — the brand profiles, voice baselines, drafts, edits, approvals, standing orders and published-post records you create in the studio. Connected-account credentials — tokens and app passwords you provide for publishing and analytics (social platforms, ad platforms, model providers). These are encrypted at rest (AES-256-GCM) and decrypted only server-side at the moment of use. Usage and cost records — a ledger of AI calls made on your behalf, kept so spending is always accountable.

What we do with it

Everything we collect exists to run your studio: generating and refining content you review, publishing where you have connected accounts, verifying that published content matches what you approved, harvesting engagement metrics, and improving your own brands’ results over time. Your brand data trains your studio’s memory — it is not pooled into other customers’ brands and it is not sold, rented or shared with advertisers.

Third parties we touch

Content generation uses model providers (Anthropic, OpenAI — or your own keys if you supply them). Publishing and metrics use the platforms you connect (for example Bluesky, Meta, Google) under their terms and only with the permissions you grant. Payments are processed by Stripe; we never see your card number. Hosting is on Vercel and Supabase. Each processor receives only what its function requires.

Ad-platform data

If you connect an ad account (Meta or Google Ads), we read campaign performance data — spend, impressions, clicks, conversions — solely to show you analysis of your own campaigns. We do not modify campaigns, we do not share this data with anyone, and disconnecting removes our access. Google user data handling complies with the Google API Services User Data Policy, including Limited Use requirements.

Retention and deletion

Data is kept while your account is active. Deleting a brand permanently removes its memory, drafts, credentials and records. You can export your data or request full account deletion at any time by emailing team@slushie.studio — deletion completes within 30 days.

Contact

Questions: team@slushie.studio.