Legal

Privacy Notice

Effective September 14, 2026

This notice describes the personal information ArtSala processes when artists use the studio service and when visitors browse an artist website, send an inquiry, or purchase artwork.

Information we collect

We process account details, login and security records, workspace content, artist contact details, support communications, subscription status, and operational logs. Daily studio activity and first-use milestones help us measure whether artists can get started and continue using the service; these measures do not record the contents of your pages or keystrokes. Artists may store information about collectors, venues, sales, and business relationships. For artwork checkout, we process the buyer’s name, email, shipping details, order contents, status, and fulfillment information.

How we use information

We use information to provide and secure the service, authenticate users, publish content selected by artists, deliver inquiries and essential transaction messages, process subscriptions, support artwork checkout, prevent abuse, reconcile provider events, provide support, and meet legal obligations.

Payments and service providers

Stripe processes new ArtSala subscription payments. Legacy subscriptions may continue through Recurly. Artwork purchases are direct payments to the artist’s connected Stripe account; ArtSala does not receive full card details. Supabase supports database and authentication functions, Vercel supports application hosting and domains, and Resend may deliver essential email. These providers process data under their own terms and privacy practices.

ArtSala Assistant and voice input

Assistant is optional. When you ask it to analyze an artwork or help with writing, we send the selected artwork image, relevant artwork details, your instructions, and applicable studio preferences or writing context to OpenAI. Voice input sends your recording to OpenAI for transcription. Avoid including information you do not want processed by that provider; you can use the studio by typing and editing your own content.

ArtSala processes audio in memory and does not save the recording on its servers. A failed recording remains in your browser tab so you can retry or discard it. Successful transcripts are encrypted for up to 24 hours to recover interrupted responses. Text you add to your studio, generation history, and usage records are retained with the related studio records. We record request counts, estimated processing cost, and whether suggestions are used to improve reliability and quality.

OpenAI processes submitted content under our API service arrangements and the OpenAI API data controls. Provider retention depends on the applicable service and account settings. Assistant does not publish your content or adopt suggestions without your action.

To help prevent inquiry spam, we use Cloudflare Turnstile to check public forms, filter likely unsolicited promotions, and remember each studio’s sender preferences. We validate submissions and temporarily store a keyed fingerprint of the request network address. Delivery retries use encrypted copies of the original message; those copies are removed after 30 days. The inquiry or support conversation remains in its normal studio history.

Artist website analytics

Published artist websites can record page views, estimated visits, broad traffic sources, device types, and approximate countries to help artists understand their audience. We derive a temporary identifier from the request network address and browser type. Identifiers are different for each artist website and reset daily; the analytics database does not retain raw network addresses, full browser details, referring URLs, or URL query parameters. Inquiries and confirmed orders are reported separately from browsing activity.

Analytics use no tracking cookies and do not link visits to inquiry or purchase identities. Daily aggregates are kept for up to two years. Temporary identifiers and duplicate checks are normally removed after about two days, and the previous day’s identifier secret is removed by the hourly cleanup. We honor Do Not Track and Global Privacy Control signals. Visitors can opt out using the Analytics privacy link on an artist website; that preference is saved in their browser. Artists can pause collection in their analytics dashboard.

Public and private information

Studio records are private unless the artist publishes selected content or shares it through a public feature. Public artist websites may be viewed and indexed by others. Unlisted artworks are accessible to anyone who has their direct link; they are omitted from artwork browsing and marked to discourage search indexing. Use Private for work that should not be shared. Buyers provide order information to the artist seller, who can use it for fulfillment, returns, customer service, and related legal obligations.

Retention and security

We retain information while an account is active and as reasonably needed for operations, recovery, dispute handling, financial records, security, and legal obligations. We use access controls, encrypted connections, least-privilege service credentials, and auditing for sensitive operations. No online service can guarantee absolute security.

Your choices

Artists can edit published content, update account details, export available data, and request account support. Depending on where you live, you may have rights to access, correct, delete, or restrict use of personal information. Some financial, security, and transaction records must be retained even after a request.

Contact and updates

Privacy requests may be sent through the support option in an ArtSala account or through our public support form if you cannot sign in. We may update this notice as the service changes; the effective date above identifies the current version.