Privacy Policy

Your email address, sometimes a phone number, your display preferences (currency, units, theme, language, time zone) and your notification preferences. You sign in with a one-time code sent to your email; we hold no password. When you create your account we also note what led you to it: the kind of page or button you signed up from, the store app, or the campaign whose link you followed. We record it once and never change it. We also note the country your connection comes from when you create your account, and your device's time zone, so our emails reach you at a sensible hour and can suggest your language.

Your plan, the identifiers of your customer and subscription records at Stripe, your invoices, and the checkouts you start, including whether they were completed. Payment card details are entered on pages served by Stripe and never reach our servers.

Works in your collection (including acquisition prices, notes and the images you upload), the artists you follow, the works, lots and sales you bookmark, the screens you save, and the comparables you attach to a holding. Your collection is confidential: it is never published, never sold, and never used in anything we publish. Files you upload to import works (photographs, schedules, invoices, appraisals, spreadsheets) are sent to Anthropic to extract the works they describe (section 6); we hold them only for the duration of that call and do not store them. When you share a portfolio with another member, the people you invite see it under your display name; you see their email addresses, the access you gave them, whether they accepted and when they last viewed it. You can change or remove their access, or hand the portfolio to another member, at any time.

The contact form asks for your name, email address, company and message, and optionally a phone number and the kind of organisation you work in. We also record the page you wrote from and your IP address, which the spam check uses.

Your API keys, a log of requests (endpoint, parameters, time, IP address) and your metered usage. This is the telemetry the Terms describe in section 4.5. If you start the free API trial, we also record when it starts and ends, how much of it you have used and how quickly, how many API keys you hold, which of our pages led you to it and, once you use it up, the endpoints you called most. We also keep the IP address the trial was started from for 24 months, so that one person cannot take the trial again and again under different accounts.

Which pages you visit and what you do on them, your device, browser and screen size, your approximate location derived from your IP address, and how you move through a page, with anything you type masked and your collection and account pages excluded. Events never contain your name, email or any free text beyond a search query. Section 5 explains how this works and how to say no.

Whether an email we sent was delivered, bounced, was reported as spam or led to an unsubscribe. We do not use open or click tracking pixels. Section 6 has the detail.

IP addresses, browser identifiers, the paths requested, response times and errors, kept to run and secure the Service.

The app uses the camera or photo library only when you choose to add a work, and the operating system asks you first. It reads no contacts.

If you turn on push notifications, the app registers your device with us: the push token the operating system issues for it, the platform, the app version, and the language and time zone of the device, so that we send each alert in your language and between 8 am and 9 pm where you are. We keep a record of the alerts we send you (their text and the page they open) and, when an alert shows an artwork, the address of the image the device fetches from our image service. Alerts are about the artists, artworks and sales you chose, the market index and your own account; each topic has its own switch in Account → Notifications, and the operating system's own switch applies as well. Signing out removes the device.

Sign-in codes, receipts, notices about your plan or API keys, and other messages that are part of running your account. You receive these as long as you have an account.

A weekly digest and, if you switch them on, daily alerts about the artists, works and sales you follow. They start when you follow something. Every alert carries a one-click unsubscribe link, and Account → Notifications lets you choose what you get, pause, or stop entirely.

Anyone can sign up for the market brief with an email address. We send it only after you confirm the address through a link we email you; an address that is not confirmed is deleted after 30 days. Every issue carries an unsubscribe link.

When you near or reach your plan's monthly or yearly allowance, we email you to say so, with a link to the plan that would suit you. If you start a checkout for a plan and do not complete it, we email once to ask whether something got in the way. A member on the free plan may also receive one offer on a paid plan, once. These emails use your account, your plan and how much of it you have used, never what you browsed. Every one of them has a one-click link to stop them, and you can switch them off in Account → Notifications under “Usage and upgrade emails”. Stopping them does not stop your account emails or your alerts.

Our emails are delivered by SendGrid (Twilio Inc., United States). We record whether an email was delivered, bounced, was reported as spam or led to an unsubscribe, and keep those records for 12 months. We do not use open or click tracking pixels, and every link in our emails leads to our own domain. The chart image in an email is served by us with a key unique to that email, and we may record the first time it is loaded.

An unsubscribe or a spam report is honoured everywhere at once: we keep the address on a suppression list so that we do not email it again, and that list outlives your account. Account emails (6.1) are the exception, as they are part of the Service. Every marketing email carries our postal address.

Wherever you live, you can ask us to tell you what personal data we hold about you, to correct it, to delete it, to give you a copy, to stop using it for a purpose you object to, and to stop emailing you. Write to [email protected] from the address on your account, or tell us how to verify that you are who you say. We answer within one month, free of charge, and we never treat you differently for exercising a right. You may use an agent; we will ask for proof of their authority.

Under the General Data Protection Regulation and the UK GDPR you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw a consent at any time without affecting what was done before. The legal basis for each purpose is in section 4. You may also complain to the data protection authority of the country where you live, work or where the issue arose; we would be grateful for the chance to resolve it first.

Under the Federal Act on Data Protection you have the rights of access, rectification, erasure and portability, and the right to object. Exercise them as in 11.1.

If you live in a US state with a consumer privacy law, you have the right to know what personal information we collect and how we use and disclose it, to delete it, to correct it, to opt out of its sale or sharing for targeted advertising, and not to be discriminated against for exercising these rights. We do not sell personal information, we do not share it for targeted advertising, and we do not collect sensitive personal information as those laws define it, so there is nothing to opt out of; we honour the Global Privacy Control signal for analytics anyway (section 5). You may appeal a decision we make on a request by replying to it.

In the past twelve months we have collected the categories in section 3 (identifiers, commercial information, internet activity, approximate geolocation, professional information you give us, and the content you add) from you, from your device, from the companies in section 7 and, for the people in our catalogue, from public sources; we have disclosed them to the companies in section 7 for the business purposes in section 4.

To delete your account, send a request from the account screen, on the website or in the app, or email [email protected] from your account address. Either way we delete the account and everything you added within 30 days and email you when it is done. A subscription bought in the App Store is not ended this way: cancel it in your Apple settings. What remains afterwards: invoices as long as the law requires; your address on the suppression list if you asked us not to email you; server logs for their 3 years; and backups until they expire.