Privacy Policy

1. Who we are

KreatoArt ("we", "our", "us") is a platform that helps artists manage commissions and showcase their work. This policy explains how we handle your personal data when you use our service at kreato.art.

2. Data we collect

We collect the following information:

• Account data: email address and password when you register as an artist.
• Profile data: display name, bio, avatar, social links, and other information you provide during onboarding.
• Portfolio content: images and descriptions you upload to your portfolio.
• Commission data: information about commissions including client names, emails, descriptions, and reference images.
• Fan subscriptions: email addresses of users who subscribe to receive notifications from artists.
• Usage data: basic analytics such as page views and feature usage, collected through Vercel Analytics.

3. How we use your data

We use your data to:

• Provide and maintain the KreatoArt service.
• Display your public artist profile and portfolio.
• Send email notifications to fans when you open commissions or update your portfolio.
• Send commission status updates to your clients.
• Improve our service based on usage patterns.
• Communicate with you about your account or service updates.

4. Data sharing

We do not sell your personal data. We share data only with:

• Supabase: database and authentication provider (hosted in EU).
• Vercel: hosting and deployment platform.
• Resend: email delivery service for notifications.
• Stripe: payment processing (only if you use premium features).

5. Data retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are legally required to retain it.

6. Your rights

Under GDPR, you have the right to:

• Access, correct, or delete your personal data.
• Export your data in a portable format.
• Object to or restrict processing of your data.
• Withdraw consent at any time.

To exercise these rights, contact us at privacy@kreato.art.

7. Cookies

We use essential cookies only, required for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

8. Fan subscribers

When you subscribe as a fan to an artist, we store your email address to send you notifications. You can unsubscribe at any time using the link included in every email. Your email is only visible to the artist you subscribed to.

9. Security

We use industry-standard security measures including encrypted connections (TLS), secure password hashing, and row-level security on our database. However, no method of transmission over the internet is 100% secure.

10. Children

KreatoArt is not directed at children under 16. We do not knowingly collect data from children under 16.

11. Changes

We may update this policy from time to time. We will notify registered users of significant changes via email.

12. Contact

For any privacy-related questions, contact us at privacy@kreato.art.