Privacy Policy · Last updated 2026-08-24
What we keep, and why.
Archivald holds records that are private by nature — what you own, what it cost, what it is worth, who has what in a household that is coming apart. This page says plainly what we collect, what we do with it, who else touches it, and how to have it removed.
1. Who is responsible
Insight Personal Finance, LLC, operating archivald.com, is responsible for the personal data described here. Write to us at hello@archivald.com.
2. What we collect
Your account. Your email address, the name you give us, and your settings. Sign-in is by a link sent to your email, or through Google if you choose it; we never see a password because there is none.
Your records. Everything you enter: pieces and their photographs, documents, costs, prices, valuations, locations, sales, exhibitions, notes; the contacts in your address book (galleries, buyers, framers, the people you name as beneficiaries); invoices and consignment agreements; and, in Settle, the household list and who would like what. We store this because it is the service. We do not read it except to keep the service working, and then as little as the job needs.
Use of the site. Aggregate page views through Plausible, which sets no cookies and keeps no personal identifiers, and the ordinary server logs (IP address, browser, the page requested) that any website keeps for a short time to stay secure and debuggable.
3. What we do with it
- Keep your records and show them to you and the people you share them with.
- Generate the documents you ask for.
- Email you sign-in links, invitations you trigger, and notices about your account or these policies.
- Understand, in aggregate, which parts of the site people use.
We do not sell your data, share it with advertisers, or use your records to build anything other than your own documents. We do not send marketing email unless you ask for it.
4. Features that read your material
Three features ask an AI model to read something and fill in fields for you: adding a piece from a web page, from a screenshot, and pulling works off an invoice. When you use one, the page, image or document you supplied is sent to Anthropic’s Claude API, read once, and the fields come back for you to check. Anthropic does not use material sent through its API to train its models. Nothing is sent unless you use the feature, and nothing the model suggests is saved until you save it.
5. Who else touches your data
We use a small number of providers to run Archivald. Each handles only what its job needs, under its own privacy terms.
| Provider | What it does | Where |
|---|---|---|
| Supabase | The database, sign-in and file storage behind every record. | Canada (AWS, Montréal) |
| Netlify | Hosts the site and runs the code that builds your documents. | United States |
| Resend | Sends sign-in links and invitations to your email. | United States |
| Plausible | Counts page views in aggregate. No cookies, no personal data. | European Union |
| Anthropic | Reads a web page, screenshot or invoice to prefill a record — only when you use those features. | United States |
| Discogs | Looks up and syncs vinyl records — only if you connect Discogs. | United States |
| Sign-in, if you choose to sign in with Google. | United States | |
| YouTube / Vimeo | Plays a video you attach to a piece, on that piece’s page. | United States |
People you invite. Members of your account see what you see. Someone you share a single collection with sees that collection. The other person in a Settle list sees the list and each person’s choices. You control these invitations and can withdraw them.
The law. We will disclose data if a court or the law requires it, and will tell you unless we are forbidden to.
6. Cookies
Archivald sets one cookie: the one that keeps you signed in. Your light-or-dark preference is kept in your browser’s local storage. There are no advertising or tracking cookies, which is why there is no cookie banner.
7. Where your data lives
Your records are stored in Canada. The site is served, and your documents are built, in the United States; Plausible’s counts are kept in the European Union. If you are outside those places, your data crosses a border to reach them.
8. How long we keep it
For as long as you have an account. When you close it, we delete your records and files; copies may persist in backups for a limited period before they too are gone. Server logs are kept for a short time and then discarded. We keep what the law obliges us to keep — invoices you have issued through us, for instance — for as long as it obliges us.
9. Security
Data travels encrypted. Every record is tied to the account that made it and guarded at the database by rules that let only that account, and the people it has invited, read it. Files are served by signed, expiring links. Access on our side is limited to what keeping the service running requires.
10. Your rights
You may ask to see what we hold about you, have it corrected, receive a copy, or have it deleted. Much of this you can do yourself inside the app; for the rest, email hello@archivald.com and we will act within 30 days. If you are in a place whose law gives you further rights — the EU, the UK, California among them — those rights apply, and you may complain to your local authority.
11. Children
Archivald is for adults. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.
12. Changes
If this policy changes in a way that matters, we will email the address on your account before the change takes effect. See also the Terms of Service.