Artemiis One logo
Artemiis One

Legal

Privacy Policy

This Privacy Policy describes how Artemiis One collects, uses, stores, shares, and protects personal and workspace data when you use our AI creative studio as an OWeb satellite application.

Last updated October 23, 2026Terms of Service

1. Introduction

Artemiis One provides AI image, video, audio, and related creative tools. We use shared OWeb OneID authentication and workspace isolation so you can sign in once across the OWeb ecosystem while keeping workspace data separated.

We designed this policy to meet common SOC 2 transparency expectations and U.S. application-to-person (A2P) messaging disclosure requirements where communications features are enabled through the OWeb platform. If you do not agree with this policy, please do not use Artemiis One.

2. Who we are

Artemiis One is operated by OneWeb LLC ("we," "us," or "our") as an OWeb ecosystem satellite application (app id open-generative-ai).

Privacy requests: privacy@artemiis.one. Support: support@artemiis.one.

3. Scope

This policy applies when you:

  • Visit or sign in to Artemiis One (web or desktop builds distributed by us)
  • Use studio features, agents, workflows, or connected OWeb apps from this product
  • Authenticate through OWeb OneID (auth.oweb.one) or SSO launch from the OWeb App Store
  • Receive operational or transactional SMS from OneWeb LLC or a workspace you belong to, when messaging is enabled

Third-party AI providers (for example MuAPI and underlying model hosts) process generation requests according to their own terms when you invoke those services.

4. Information we collect

Depending on how you use Artemiis One, we may collect:

  • Account & profile — name, email, user id, and authentication session data from OWeb OneID / Supabase Auth
  • Workspace data — workspace membership, role, preferences, and tenant-scoped settings stored in our shared One OS database with app-level isolation
  • Creative inputs & outputs — prompts, uploads, generated media metadata, and workflow state needed to provide the service
  • API configuration — selected API provider and workspace-scoped preference flags (see BYOK section for key storage)
  • Device & logs — IP address, browser type, timestamps, error diagnostics, and security logs
  • Messaging data (if enabled) — mobile numbers, opt-in/opt-out records, message content and delivery metadata for A2P programs you or your organization configure through OWeb communications

5. How we use information

  • Provide, operate, secure, and improve the studio and related features
  • Authenticate users and enforce workspace isolation
  • Process generations and workflows you initiate
  • Meter usage, prevent abuse, and investigate security incidents
  • Send transactional notices (security, billing-related, or product changes)
  • Comply with law and enforce our Terms of Service
We do not sell personal information. We do not use SMS opt-in data or workspace content for third-party advertising or data brokerage.

6. Bring-your-own-key (MuAPI)

Artemiis One supports bring-your-own-key access to MuAPI and related providers. Unless you use a team-managed proxy, your API key is stored in your browser's local storage under workspace-scoped keys and is sent directly to the provider you select to fulfill your generations. We do not persist your MuAPI secret on our application servers as part of the default BYOK flow.

You are responsible for safeguarding keys on devices you control and for rotating keys if a device is compromised.

7. AI processing

When you run a model, your prompts and media may be transmitted to MuAPI, Vercel AI Gateway, Comfy/RunPod, or other providers you enable solely to produce the output you requested. Do not submit personal data you are not authorized to process with AI tools.

8. SMS messaging & A2P

If you or your organization use OWeb-enabled SMS or voice features that contact mobile subscribers, the following disclosures apply for U.S. A2P 10DLC and carrier compliance:

  • Recipients must provide prior express consent for the specific program and sender before marketing or recurring automated texts
  • Disclosures should state that message frequency varies and that message and data rates may apply
  • Recipients may opt out at any time by replying STOP; reply HELP for assistance or contact support@artemiis.one
  • We maintain suppression records and do not share mobile opt-in data with third parties for their own marketing
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with third parties for their own marketing.

Carriers are not liable for delayed or undelivered messages. See also the SMS section in our Terms of Service.

9. Cookies & storage

We use cookies and browser storage for authentication sessions, locale preferences, and BYOK credentials you choose to save locally. You can clear site data in your browser; doing so may sign you out and remove saved API keys.

10. When we share information

  • With workspace members according to role and sharing settings
  • With infrastructure and AI subprocessors that process data on our behalf under contractual safeguards
  • When required by law or to protect security and rights
  • With your direction when you connect integrations or export content

11. Subprocessors

Primary categories of subprocessors include:

  • Supabase — authentication and workspace-scoped data storage (One OS)
  • Vercel — application hosting and serverless functions
  • MuAPI and model hosts — AI inference you invoke with your key or team proxy
  • Telephony providers (for example Twilio) — when OWeb communications are enabled

Enterprise customers may request an updated subprocessor list at privacy@artemiis.one.

12. Retention

We retain account and workspace data while your account is active and as needed for security, backups, and legal obligations. Messaging consent and opt-out records are retained as required for compliance. You may request deletion by contacting privacy@artemiis.one.

13. Security (SOC 2 aligned)

We maintain administrative, technical, and organizational controls designed around common SOC 2 trust principles, including:

  • Encryption in transit (TLS) and encryption at rest via our infrastructure providers
  • Logical access controls, least-privilege administration, and audit logging
  • Workspace tenant isolation for satellite application data
  • Vulnerability management and incident response procedures
  • Vendor risk review for subprocessors handling personal data

No security program can guarantee absolute security; please use strong passwords and protect your devices.

14. Your choices & rights

Depending on your location, you may request access, correction, deletion, or portability of personal data we control. Contact privacy@artemiis.one. If you are an end user contacted by a workspace customer, contact that organization first.

15. Children

Artemiis One is not directed to children under 13 (or 16 where applicable). We do not knowingly collect children's personal information.

16. Changes

We may update this policy. Material changes will be reflected in the "Last updated" date and, when appropriate, additional in-product notice.

17. Contact