Privacy policy

Last updated: 14 October 2026.

Who we are

This policy is issued by Artiweave, which decides how the data described here is used. You can reach us at privacy@artiweave.ai.

What this policy covers

This policy covers the Artiweave service at artiweave.app, its console, and the data Artiweave receives from Google when a website's owner connects their Google Search Console account.

Data we receive from Google

When you connect a website, Artiweave asks Google for one permission only: read-only access to Search Console (https://www.googleapis.com/auth/webmasters.readonly). With it, and only for the Search Console properties you choose to connect, Artiweave reads:

Artiweave cannot change anything in your Search Console account, and it does not ask for access to any other Google data, such as your email, files or contacts.

Google also gives Artiweave a refresh token, so that it can read this data again without asking you each time. Artiweave keeps that token encrypted.

How we use it

We use the data we receive from Google only to provide Artiweave to you: to show you how your connected website performs in Google Search, to choose which changes to your website's pages to propose to you, and to measure whether a change you approved made a difference. We do not use it for advertising, and we do not sell it.

Artiweave's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not transfer this data to others except as needed to provide or improve Artiweave's features for you, to comply with the law, or as part of a merger or sale of the service with notice to you; we do not use it to serve advertisements; we do not use it to train generalised artificial intelligence or machine learning models; and no person reads it unless you have agreed, it is needed for security purposes such as investigating abuse, or the law requires it.

Who we share it with

We do not sell the data this policy describes. We share it only with the providers that run Artiweave for us, who process it on our instructions: Cloudflare, which runs the service on its network, and Neon, which hosts our database. We may also disclose data where the law requires it.

When Artiweave's features that draft changes to your website's pages are built, the content of your website's pages will also be sent to Anthropic, which provides the AI model that drafts them. Data we receive from Google, including Search Console data, is never sent to Anthropic or to any other AI model provider; our own software uses it only to choose which pages to work on and to measure the effect of each change.

Where it is kept

Data is stored in a PostgreSQL database hosted by Neon on Amazon Web Services in the London region (eu-west-2), in the United Kingdom. Requests to Artiweave are handled on Cloudflare's network, in the data centre nearest to the person making them.

How long we keep it, and deletion

We keep Search Console data and the refresh token while the website stays connected. You can disconnect at any time, and you can withdraw Artiweave's access to your Google account at any time at myaccount.google.com/permissions.

You can ask us to delete the data we hold about you or your website by writing to the contact address above. We will delete it, including the refresh token, within 30 days of your request. Copies in our database backups expire within 30 days.

Your account in the console

To sign in to the Artiweave console, you give your email address and receive a one-time code. We keep your email address and your role on each website you manage while you have access to the console, and the sign-in sets a cookie that keeps you signed in on the console only.

Visitors to artiweave.app

The pages on artiweave.app set no cookies of their own and load no scripts, trackers or third-party content. Cloudflare, which serves them, may set a strictly necessary security cookie to protect the site from automated abuse.

Security

Data travels only over encrypted connections. Each customer's data is kept apart from every other customer's in our database, and secrets such as refresh tokens are stored encrypted.

Changes to this policy

If we change this policy, we will publish the new version here with a new date, and tell you before a change that affects data we already hold takes effect.

Contact

Questions or requests about your data: privacy@artiweave.ai