Privacy Policy

1. Information We Collect

Account Information. When you create an account, we collect your email address and any profile information you choose to provide, such as your name, bio, location, website URL, and profile photo. Email verification is required for all new accounts.

Collection Data. When you use The Collection, we store information about the artworks you add, including titles, artist names, medium, dimensions, year, images, notes, links, estimated values, purchase dates, purchase prices, sales contacts, location, condition, provenance, and documents. You control the visibility of each of these fields individually.

Usage Data. We collect basic, anonymized usage analytics to understand how the platform is used and to improve the experience. This includes page views, feature usage, and general interaction patterns. We do not use third-party advertising trackers.

Device Information. When you use our iOS app or website, we may collect basic device and browser information such as device type, operating system version, and screen size to ensure the platform displays and functions correctly.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve The Collection platform
• Display your public artworks and profile to other users
• Send transactional emails, including welcome emails and the weekly digest (if enabled)
• Power AI features such as artwork analysis, value estimates, and artist enrichment
• Enforce our Terms of Service and protect the community
• Respond to your support requests and communications
• Generate anonymized, aggregated analytics to improve the platform

3. AI Features & Data Processing

The Collection offers AI-powered features including artwork analysis, value estimation, and artist enrichment.

How it works. When you use an AI feature, relevant data (such as artwork images, titles, artist names, and medium) is sent from our backend servers to a third-party AI provider for processing. All AI requests are routed through our own backend — your device never communicates directly with the AI provider.

Data minimization. We send only the minimum data necessary to generate the analysis. Private fields such as purchase price, location, and provenance are never sent to the AI unless explicitly part of the feature request.

No AI training. Your data is not used to train AI models. Under our agreements with our AI provider, data sent for processing is not retained for model training purposes.

4. Data Storage & Security

Infrastructure. Your data is stored in a secure, enterprise-grade database platform hosted in the United States with encryption at rest and encryption in transit via TLS/SSL.

HTTPS everywhere. All connections to The Collection — both the website and API — are encrypted with HTTPS. All communication between our servers and third-party services also uses HTTPS.

Row Level Security. We enforce Row Level Security (RLS) at the database level, meaning access policies are enforced by the database itself, not just application code. This ensures that your private data cannot be accessed by other users, even in the event of an application-level vulnerability.

Access controls. Only the platform administrator has elevated database permissions. No other user or team member has access to your private data.

5. Your Privacy Controls

We believe you should have granular control over your privacy. The Collection provides the following controls:

Artwork-level privacy. You can mark any artwork as fully private. Private artworks are completely hidden from all other users, feeds, and search results.

Field-level privacy. For each artwork, you can independently control the visibility of: notes, links, estimated value, purchase date, and sales contact. Toggle any of these to private and they will only be visible to you.

Always-private fields. Certain sensitive fields are always private and are never displayed to other users under any circumstances: purchase price, location, condition, provenance, and documents.

Anonymous posting. You can post artworks without your name being shown to other users.

Block users. You can block specific users to prevent them from seeing your content and interacting with you.

Report users. You can report users for inappropriate behavior, and our team will review reports promptly.

Hide from search. You can make your profile undiscoverable, so other users cannot find you through search.

6. Third-Party Services

We use a small number of trusted third-party services to operate The Collection:

Database & Authentication. A secure, enterprise-grade platform stores your account information, collection data, and uploaded images. Hosted in the United States.

Web Hosting. Our hosting provider serves the collctn.art website and may process your IP address and request metadata as part of standard web hosting.

Transactional Email. An email delivery service receives your email address to send welcome emails and the weekly digest.

AI Features. A third-party AI provider processes artwork data (images, titles, artist, medium) when you use AI features. Data is sent server-side only and is not used for model training.

7. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We only share your data in the following circumstances:

• With the third-party service providers listed above, strictly to operate the platform
• When you choose to make artworks or profile information public
• If required by law, legal process, or government request
• To protect the rights, safety, or property of The Collection, our users, or the public
• In connection with a merger, acquisition, or sale of assets (you would be notified)

8. Your Rights

You have the following rights regarding your data:

Access. You can view all personal information we hold about you through your account settings.

Correction. You can update or correct your personal information at any time through the app.

Export. You can request a complete export of your data, including all artwork information, images, and account details. Contact us and we will provide your data in a standard, machine-readable format.

Deletion. You can request permanent deletion of your account and all associated data. Upon receiving your request, we will delete your data within 30 days, except where we are required by law to retain certain records.

Opt out. You can opt out of the weekly digest and other non-essential communications at any time through your account settings or by using the unsubscribe link in any email.

9. Children's Privacy

The Collection is not intended for users under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a user under 18, we will take steps to promptly delete their account and all associated data. If you believe a minor has created an account, please contact us immediately.

10. Data Retention

We retain your data for as long as your account is active and as needed to provide the Service. If you delete your account, we will remove your personal information and collection data within 30 days.

Anonymized, aggregated analytics data that cannot be linked back to you may be retained indefinitely to help us understand platform usage trends. Backups containing your data may persist for up to 90 days after deletion before being fully purged.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. If we make material changes, we will notify you via the app or email before the changes take effect. Continued use of The Collection after the updated policy becomes effective constitutes your acceptance of the revised terms. We encourage you to review this policy periodically.

12. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact us at hello@collctn.art. We aim to respond to all privacy-related inquiries within 7 business days.