Privacy Policy
Last updated: April 1, 2026
1. Introduction
ArtCirq Inc. ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our art inventory management platform ("the Service"). Please read this policy carefully.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your name, email address, gallery/business name, and password (stored in hashed form). If you sign up via OAuth, we receive your name and email from the authentication provider.
2.2 Business Information
You may provide business details including company name, address, phone number, tax ID, and banking information (for Stripe Connect). This information is used to generate invoices, certificates, and facilitate payment processing.
2.3 Inventory Data
You upload and manage art inventory data including artwork titles, artist names, descriptions, dimensions, pricing, provenance, images, and related metadata. This data is stored securely and is only accessible to authorized members of your gallery.
2.4 Client Information
If you use our CRM features, you may store client names, email addresses, phone numbers, addresses, and purchase history. You are responsible for obtaining appropriate consent from your clients before storing their information.
2.5 Usage Data
We automatically collect information about how you interact with the Service, including pages visited, features used, browser type, IP address, and device information. This data is used to improve the Service and diagnose technical issues.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process payments and manage subscriptions
- Generate documents (labels, certificates of authenticity, appraisals, invoices)
- Facilitate integrations with Shopify, Stripe, and other third-party services
- Send transactional emails (welcome messages, invoices, team invitations)
- Provide customer support and respond to inquiries
- Monitor usage patterns and optimize performance
- Detect and prevent fraud or unauthorized access
4. Data Sharing & Disclosure
We do not sell your personal information. We may share your data with:
- Payment processors: Stripe processes payment data under their own privacy policy
- Integration partners: Shopify receives inventory data you choose to sync
- Cloud infrastructure: Our hosting and storage providers process data on our behalf
- Legal requirements: We may disclose data if required by law, court order, or government request
When you create client views or shared links, the inventory information in those views becomes accessible to anyone with the link. You control what information is shared.
5. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure password hashing using bcrypt
- Role-based access controls within gallery accounts
- Regular security audits and monitoring
- Secure cloud infrastructure with automated backups
While we strive to protect your data, no method of transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials.
6. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will retain your data for 30 days to allow for recovery, after which it will be permanently deleted. Some data may be retained longer if required by law or for legitimate business purposes (e.g., financial records for tax compliance).
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Portability: Request your data in a machine-readable format
- Restriction: Request that we limit processing of your data
- Objection: Object to processing of your data for certain purposes
To exercise any of these rights, contact us through our website. We will respond within 30 days.
8. Cookies & Tracking
We use essential cookies to maintain your login session and remember your preferences. We may use analytics tools to understand how the Service is used. We do not use advertising cookies or sell tracking data to third parties.
9. Third-Party Services
The Service integrates with third-party services that have their own privacy policies:
We encourage you to review the privacy policies of any third-party services you connect to your ArtCirq account.
10. Children's Privacy
The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
11. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: