Privacy Policy

1. Who this policy covers

This policy covers ArtsFolio users, tenant administrators, artists, invited users, public site visitors, buyers, collectors, email-list subscribers, people who submit contact forms, and people who authenticate through Google, Facebook, or another supported identity provider.

2. Information you provide

ArtsFolio may collect account information, names, email addresses, passwords or password hashes for local accounts, OAuth identifiers, tenant names, site slugs, custom domains, public profile text, artwork records, artwork images, event and exhibition information, contact details, email signup records, buyer and order information, support messages, administrative settings, and content uploaded or entered into tenant sites.

3. Information collected automatically

ArtsFolio may collect IP address, user agent, request path, referrer, timestamps, session identifiers, security events, audit logs, device/browser information, approximate location derived from IP address, page views, artwork views, contact-form metadata, email signup metadata, and operational diagnostics needed to run and secure the service.

4. Public content

Published tenant content is public. This may include artwork images, titles, descriptions, prices, availability, artist statements, biographies, contact links, events, and other public page content. Public content may be viewed, indexed, cached, shared, copied, or archived by visitors and third-party services outside ArtsFolio control.

5. Directory and home-page discovery

If a tenant opts into ArtsFolio directory or discovery features, ArtsFolio may use public tenant names, summaries, public URLs, thumbnails, and public artwork images on ArtsFolio home pages, directory pages, discovery modules, social previews, and platform marketing surfaces. Tenants can opt out where tenant admin controls are provided, but external caches and prior references may persist.

6. OAuth login data

When you sign in with Google, Facebook, or another supported identity provider, ArtsFolio may receive identifiers, email address, email-verification status, display name, profile information, and authentication tokens needed to complete login. ArtsFolio uses this information to create or access your ArtsFolio account, link identities, prevent duplicate accounts, and secure authentication. ArtsFolio does not use Google or Facebook login data for unrelated advertising.

7. Payments and sales data

When sales features are used, ArtsFolio may process order records, cart records, artwork details, prices, fees, commission information, fulfillment status, buyer contact information, shipping information, payout/accounting metadata, refund or chargeback metadata, and payment status. Payment-card details may be handled by third-party payment processors rather than stored directly by ArtsFolio.

8. Contact forms and email lists

When visitors submit tenant contact forms or join tenant email lists, ArtsFolio stores the submitted information for the tenant to review and act on. Tenant administrators can see and manage their own messages and subscriber records. ArtsFolio may also queue notification emails to tenant administrators unless a duplicate active signup does not require another notification.

9. Cookies, sessions, CAPTCHA, and security tools

ArtsFolio uses cookies and similar technologies for login sessions, CSRF protection, form safety, list-filter preferences, CAPTCHA or human-confirmation checks, fraud prevention, rate limiting, and operational security. Platform forms may use Cloudflare Turnstile. Tenant forms may use ArtsFolio built-in CAPTCHA and anti-spam controls.

10. How ArtsFolio uses information

ArtsFolio uses information to provide tenant sites, authenticate users, operate admin tools, process contact messages, manage email signups, support sales workflows, show public content, provide analytics, maintain audit logs, send operational emails, provide support, improve product reliability, prevent abuse, comply with legal obligations, and enforce Terms.

11. How information is shared

ArtsFolio may share information with tenant administrators, invited tenant users, buyers and sellers as needed for transactions, service providers that host or operate the platform, email providers, payment processors, OAuth providers, CAPTCHA/security providers, analytics/diagnostic providers, professional advisers, law enforcement or legal recipients when required, and successor entities in connection with a business transfer. ArtsFolio does not sell personal information to advertisers.

12. Tenant responsibility

Tenant administrators are responsible for how they use exported contact messages, email lists, buyer information, and other tenant-controlled data. Tenants must comply with applicable privacy, consumer protection, tax, email-marketing, and sales laws when using data collected through their sites.

13. Retention

ArtsFolio retains information for as long as needed to provide the service, support tenant sites, maintain security and auditability, comply with legal and financial obligations, resolve disputes, enforce agreements, and maintain backups. Deleted content may remain in backups, logs, transaction records, audit records, or security records for a limited period or where retention is legally or operationally necessary.

14. Data deletion instructions

You may request deletion of your ArtsFolio account data, OAuth-linked identity data, contact-form submissions, email-list subscriber records, or tenant content by contacting ArtsFolio at info@artsfol.io or through the ArtsFolio contact page. Use the subject line “Data deletion request” and include the email address associated with the account, the tenant/site involved, and the data you want deleted. ArtsFolio may need to verify your identity or tenant authority before deleting data.

If you used Facebook Login and want ArtsFolio to delete data received from Facebook, send a request to info@artsfol.io with the subject “Facebook data deletion request” and include the email address used for login. If you used Google Login and want ArtsFolio to delete data received from Google, send a request with the subject “Google data deletion request.” You may also disconnect ArtsFolio from your Google or Facebook account through those providers, but provider-side disconnection does not automatically delete ArtsFolio records already created in ArtsFolio.

Some information may be retained when necessary for security, fraud prevention, transaction records, tax/accounting records, chargebacks, dispute resolution, audit logs, backups, legal compliance, or legitimate platform operations. When deletion is not possible, ArtsFolio may restrict, anonymize, or minimize information where practical.

15. Your choices

You may update account information, change tenant public content, unpublish content, opt out of directory features, unsubscribe from email lists where unsubscribe tools are available, ask a tenant to remove subscriber/contact records, request account deletion, or contact ArtsFolio for help. Browser settings may allow you to block some cookies, but required cookies are necessary for login and form protection.

16. Security

ArtsFolio uses technical and organizational measures intended to protect information, including authentication controls, session protections, CSRF protections, audit logs, restricted admin areas, database-backed permissions, and operational monitoring. No system is perfectly secure, and ArtsFolio cannot guarantee that unauthorized access, disclosure, or loss will never occur.

17. Children

ArtsFolio is not intended for children under 13. Children should not create accounts, administer tenant sites, purchase artwork, or submit personal information through ArtsFolio without appropriate consent where required by law.

18. International users

ArtsFolio is operated from the United States. If you use ArtsFolio from another country, information may be processed in the United States or other locations where service providers operate.

19. Changes to this Privacy Policy

ArtsFolio may update this Privacy Policy as the platform, laws, vendors, or data practices change. The effective date will be updated when material changes are made.

20. Contact

Questions, privacy requests, and data deletion requests can be sent to info@artsfol.io or through the ArtsFolio contact page.