Privacy Policy

1) Scope

This Privacy Policy (“Policy”) applies to the Artist Roster website (artistroster.com), mobile applications (available on iOS and Android), and all related services, features, and communications (collectively, the “Services”). It describes how Artist Roster collects, uses, shares, and protects your personal information when you use our Services, contact us, or interact with our email, push notification, or SMS programs.

2) Information We Collect

We collect the following categories of information:

• Account & Identity: name, email address, email verification status, account creation and activity timestamps. We use email-based authentication (one-time passcodes); we do not collect or store passwords.
• Artist Profile: artistic medium, style, subject matter, career level, location (city, state, country), biography, exhibition history, and other professional details you provide when setting up your profile.
• Portfolio Content: artwork images, titles, descriptions, dimensions, materials, year created, pricing, availability status, and associated tags or categories that you upload to the platform.
• Preferences & Settings: notification preferences, search filters, saved artists or collections, and display preferences.
• Device & Technical: push notification token, device model, operating system platform (iOS/Android), app version, IP address, and activity timestamps.
• Search & Interaction Data: search queries, profile views, portfolio interactions, and other usage patterns within the platform.
• Purchase Information: in-app purchase records including purchase tokens from Apple App Store or Google Play, purchase timestamps, and transaction status. Payment processing is handled entirely by Apple, Google, or Stripe; we do not collect or store payment card details.
• Communications: messages you send us via email or in-app channels; opt-in/opt-out preferences and delivery logs for email, push notifications, and SMS.

3) Sources of Information

We collect information from the following sources:

• Directly from you: when you create an account, set up your artist profile, upload portfolio content, adjust your preferences, or contact us.
• Automatically from your device: device identifiers, platform information, IP address, and activity timestamps collected when you use the app.
• From platform providers: in-app purchase validation data from Apple App Store and Google Play.

4) How We Use Your Information

• Provide platform services: display your artist profile and portfolio to other users, power search and discovery features, and facilitate connections between artists and buyers, curators, galleries, and organizations.
• Personalize your experience: tailor search results, recommendations, and content based on your profile, preferences, and activity.
• Process transactions: validate in-app purchases, manage subscriptions, and deliver purchased features.
• Communicate with you: send push notifications (new opportunities, profile activity), transactional emails, and marketing messages (with your consent where required).
• Provide customer support: respond to inquiries and resolve issues.
• Ensure safety and security: use bot-prevention measures (reCAPTCHA) during authentication, monitor for abuse, and protect against fraud.
• Improve our Services: analyze usage patterns and feedback to enhance features and user experience.
• Comply with law: meet legal obligations, enforce our terms, and protect rights and safety.

Legal bases (where applicable, e.g., EU/UK): contract performance, consent, legitimate interests, legal obligations.

5) How We Share Your Information

We share your information with the following categories of third parties, solely for the purposes described in this Policy:

• Other Users: your artist profile, portfolio content, and professional details are visible to other users of the platform as part of the discovery and search features. You control what information is included in your profile.
• Cloud Infrastructure (Amazon Web Services): our Services run on AWS. Your data is stored and processed using AWS cloud services. AWS acts as a data processor under our instructions.
• Push Notification Services (Expo): we share your device push token, notification content, and device metadata with Expo to deliver push notifications to your device.
• Email Services (Amazon SES): we share your email address and message content with Amazon Simple Email Service to deliver transactional and marketing emails.
• Bot Prevention (Google reCAPTCHA Enterprise): during registration and login, we use Google reCAPTCHA to prevent abuse. Google may collect device and interaction data as described in the Google Privacy Policy.
• App Store Platforms (Apple & Google): in-app purchase transactions are processed by Apple App Store and Google Play. We receive purchase validation tokens from these platforms.
• Business Transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset.
• Legal & Protection: we may disclose information to comply with applicable law, respond to legal process, enforce our terms, or protect rights, safety, and security.

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We do not use third-party analytics, advertising, or tracking SDKs in the mobile app.

6) Sensitive Data & Permissions

Our app may request the following permissions that involve sensitive data:

• Location Data: your location is collected via text input during profile setup (not via device GPS). This data is used for search and matching features and is shared with AWS Location Service for geocoding.
• Camera & Photo Library: with your permission, we access your camera or photo library to allow you to upload artwork images to your portfolio. We do not access photos beyond what you explicitly select for upload.
• Push Notifications: with your permission, we send push notifications for new opportunities, profile activity, and platform updates. You can control which notifications you receive in your profile settings, or disable them entirely via your device settings.

7) International Transfers

Your information may be processed in the United States and other countries where our service providers operate, which may have different data protection laws than your jurisdiction. We use appropriate safeguards (e.g., standard contractual clauses, data processing agreements) as required by applicable law to protect your information during international transfers.

8) Data Retention

• We retain your personal information for as long as your account is active and as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.
• Unverified accounts (where email verification is not completed) are automatically deleted after a set period.
• When you delete your account, we delete your profile, portfolio, and associated data. Some information may be retained in backups or as required by law.

9) Your Choices & Rights

• Notification Preferences: manage notifications directly in the app under Profile > Notifications. You can also disable push notifications entirely via your device’s system settings.
• Marketing Emails: opt out of marketing emails via unsubscribe links in each email.
• SMS: opt out by replying STOP. Reply HELP for assistance.
• Account Deletion: you can delete your account directly within the app under Profile > Delete Account. You can also visit our Account Deletion page or email us for assistance.
• Access & Correction: request access to or correction of your personal information by contacting us at support@theartistroster.com.
• Cookies: manage cookie preferences via your browser settings (web only).
• GDPR (EU/UK): you may have rights to access, correct, delete, restrict or oppose processing, data portability, and withdraw consent.
• California (CCPA/CPRA): you may request access, deletion, correction, and to opt out of sale/share of personal information.
• We may verify your identity before completing certain requests.

10) Security

We employ administrative, technical, and physical safeguards to protect your data. These include encryption at rest and in transit, secure credential storage on your device, API key management via secrets management services, and bot-prevention measures during authentication. No system is 100% secure, and we cannot guarantee absolute security.

11) Children's Privacy

The Services are not directed to children under 13 (or under the applicable age of digital consent in your region). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us so we can promptly delete it.

12) SMS & Push Notification Disclosures

• Push Notifications: by enabling notifications, you agree to receive recurring push notifications including new opportunities, profile views, and platform updates. Frequency depends on your notification preferences.
• SMS: by opting in, you agree to receive recurring messages from Artist Roster at the number provided. Message frequency varies by your plan and preferences. Message and data rates may apply.
• Opt out of push notifications via the app (Profile > Notifications) or device settings. Opt out of SMS by replying STOP. Reply HELP for help.
• Participation in messaging programs is not required to use or purchase our services.

13) Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information.

14) Changes to This Policy

We may update this Policy from time to time. We will post the updated Policy with a new “Last update” date at the top. If we make material changes, we may notify you via the app or email. Your continued use of the Services after changes are posted means you accept the updated Policy.

15) Contact & Data Controller

Data Controller: Artist Roster

Email: support@theartistroster.com

For California requests, include “CCPA Request” in the subject line.