Privacy
Last updated: .
Who holds your data
The Art of Service Pty Ltd publishes this site. The contact for privacy is support@theartofservice.com.
What is collected, and where it lives
- The free check runs in your browser. The answers you type are not sent to us and are not stored.
- The site sets an anonymous identifier cookie so a visit can be joined to an account later, and an analytics event may record the page, the anonymous identifier and the referrer. The data is held in Supabase in Sydney, Australia.
- A purchase is handled by Stripe. Stripe collects the payment details and the email; we receive the email, the plan, the amount and the customer and subscription identifiers. We do not receive or store card numbers.
- An account holds the email, the plan, the entitlement and the audit log of account actions, in Supabase in Sydney.
- The change watch uses the account email to send the alert. It does not use a separate marketing list.
Cookies
We use a first-party anonymous identifier, a signed-in session cookie and a security cookie for two-step sign-in. We use Cloudflare Web Analytics, which is cookieless and records page views without identifying you. We do not use advertising cookies or third-party tracking pixels. Stripe sets its own cookies on its checkout page.
How long it is kept
The account and its entitlement are kept while the account is open. The audit log is kept for the life of the account. A deletion request removes the account, its sessions and its entitlement; the payment record remains with Stripe as required for tax and accounting.
Your choices
You can ask for a copy, a correction or a deletion by writing to support@theartofservice.com. You can cancel the watch from the account page. You can use the free check without an account and without giving an email.
What is not done
No sale of personal data. No advertising profiles. No LLM call at runtime: the pages and the free check are static files and a browser script, and no text you type is sent to a model.
Sign-in security, the audit log and deleting your data. Two-step sign-in is optional unless the owner of a Team account requires it for everyone on it; the authenticator key is stored encrypted and recovery codes only as one-way hashes. The account keeps an audit log of sign-ins and sign-outs, two-step sign-in changes and refused codes, opening, saving, deleting and exporting saved work, teammate invitations and role changes, security settings and plan changes. Each entry holds who, when, the kind of action and which saved record, with a one-way hash of the network address and the browser family; it never holds what you pasted or saved. On Team the owner and editors of the account can read and export it; on Solo you can read your own. Entries are deleted automatically after two years. You can delete a saved record, or your whole account and everything saved under it, yourself from the account page; deleting an account cancels an active subscription, and Stripe keeps its own record of past payments.