Privacy Policy

ArtDoon processes account details (including name, email, password hash, plan, verification, and Terms acceptance); profile fields; uploaded artwork and media; artwork, print, Space, and Exhibition settings; publication status; and support correspondence.

The service may also process IP address, request time, browser or device information, requested URL, errors, and authentication activity. A necessary cookie associates anonymous work with its browser, and a separate cookie maintains a signed-in session.

We use data to provide and secure requested features under our contract with you; answer support, privacy, copyright, and content reports; prevent misuse and diagnose faults in our legitimate interests; and comply with legal obligations.

Necessary cookies are not used for cross-site advertising. When enabled, ArtDoon uses Cloudflare Web Analytics to count visits and pageviews and measure page performance. Its beacon does not use cookies or local storage. It records page paths, referrers, and aggregate browser, device, and country information; it does not record signup or checkout events. ArtDoon does not sell personal data.

A published Profile or Exhibition is available to anyone with its URL and may expose the profile, contact, artwork, media, wall text, print, and exhibition details you choose to publish. Search engines and visitors may copy or cache it. Unpublishing cannot recall copies already made.

We disclose data only as needed to operate ArtDoon: infrastructure and database hosting, private object storage, content delivery, Cloudflare Web Analytics, transactional email, security and diagnostics, and professional advisers. Uploads may use an S3-compatible provider and email uses Amazon SES when configured. Third-party media such as YouTube is governed by that provider's policy when loaded.

Providers may process data outside your country. Where European data is transferred without an adequacy decision, an approved transfer mechanism and safeguards will be used where required. Production providers, locations, and transfer mechanisms must be confirmed before public launch.

Private review invitations grant access to the invited exhibition and its media until expiry, revocation, review being disabled, or publication. Invited reviewer labels identify an invitation, not a verified account. Review comments stay private to the artist and invited reviewers, including after publication, and are retained with the exhibition until it or the account is deleted. Export includes review comments. Invitations and review history are not copied when duplicating an exhibition.

Account and project data is kept while the account is active. Account deletion removes active data and associated content; residual copies may remain temporarily in backups, logs, email systems, or caches. Security and legal records may be kept longer when necessary. Concrete production retention periods must be documented before launch.

Safeguards include hashed passwords and single-use tokens, HTTP-only session cookies, access checks, private upload storage, and encrypted transport in production. No online service can guarantee absolute security.

Profile settings let you correct details, change your password, download an account export, permanently delete your account, or unpublish an Exhibition. ArtDoon accounts are for people aged 18 or older.

Depending on where you live, you may have rights to access, correct, erase, restrict, or object to processing; receive portable data; withdraw consent; and complain to your data-protection authority. Use the Contact page or email mail@artdoon.com. We may verify your identity.

We may update this policy as the service, providers, or law changes. Material changes will be communicated where required.