Privacy Policy

Information We Collect

We collect information you provide directly to us, such as when you create an account, apply to become an artist, or make a purchase:

• Account information: name, email address, and password
• Artist profile data: biography, location, portfolio images, and social links
• Transaction data: purchase history, shipping addresses, and payment method details (processed by Stripe — we do not store raw card numbers)
• Communications: messages you send to us or through the platform

We also collect limited data automatically when you use the platform, including IP address, browser type, pages visited, and session duration, for security and analytics purposes.

Third-Party Services

We use the following third-party services, each with their own privacy policies:

• Stripe: Payment processing. Stripe collects and processes payment information directly. See Stripe’s Privacy Policy.
• PostHog: Product analytics. We use PostHog to understand how the platform is used. PostHog collects anonymized usage events. See PostHog’s Privacy Policy.
• Amazon Web Services (AWS): Infrastructure hosting. Your data is stored on AWS servers in the United States. See AWS’s Privacy Policy.
• Vercel: Frontend hosting and CDN delivery. See Vercel’s Privacy Policy.

We do not sell your personal information to any third party.

Cookies and Analytics

We use cookies and similar technologies to maintain your session, remember your preferences, and improve the platform experience. Specifically:

• Session cookies: Required for authentication and keeping you signed in
• Analytics cookies: Used by PostHog to measure platform usage in aggregate

You can disable cookies in your browser settings, though some features of the platform may not function correctly without them.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. Specifically:

• Account data is retained for the duration of your account and for up to 90 days after deletion
• Transaction records are retained for 7 years for tax and legal compliance
• Analytics data is retained for 12 months, after which it is aggregated or deleted
• Communications with support are retained for 2 years

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your personal data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Objection: Object to certain types of processing, including direct marketing

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us:

We may update this policy from time to time. When we do, we will update the “last updated” date at the top of this page and, where the changes are material, notify you by email or a notice on the platform.