Security and data

What we store, how we protect it, and what we never do with it.

No artificial intelligence

Artima Socials contains no artificial intelligence. It does not generate, rewrite, summarise, classify or analyse content or people, and it makes no automated decisions. We do not use any data to train AI or machine-learning models, and we do not send data to AI providers. If you connect your own tools, including AI assistants, through our API or MCP, they act on your behalf and under your responsibility.

API and MCP access only on your instruction

You can connect your own tools through our API or MCP server. That access happens only on your instruction: you set it up, with keys you create and can revoke at any time. You are responsible for the tools you authorise and what they do with the data.

LinkedIn member data stays in the app

LinkedIn comments and reactions are currently unavailable. Other members’ data may be shown only inside Artima Socials to people associated with the relevant Page or profile. It is never exported: not through the API or MCP, not in webhooks, and not in data exports.

Access tokens

  • When you connect an account, you sign in on the network's own page. We never see your password for the network.
  • The access tokens the networks give us are stored encrypted (AES-256-GCM).
  • Tokens and passwords are never written to our logs.
  • When you disconnect an account, we delete its stored access tokens.

Where your data is

The application server runs in Falkenstein, Germany; Cloudflare stores and delivers media and may process it outside the EEA. The Sub-processors page lists every provider we use and where it processes data.

Deleting your data

You can have your data deleted at any time. Data deletion describes each way and how long it takes.

Reporting a security issue

Write to security@artima.ai. Please don't report vulnerabilities in public.