Privacy policy

Draft for review by counsel. Bracketed notes are for the lawyer.

What this policy covers

How Interartive collects, uses, shares and protects information about people who visit interartive.com, use our apps (including Interartive Capture for iPhone and iPad), build exhibitions, buy passes, make offers or sell art.

What we collect

You give us: name, email, password (stored only as a hash) or sign-in through Google/Apple; profile details; your works, photos, 3D models, statements and labels; exhibition details; offers, bids and messages in sale chats; guest-book notes; your US state and ZIP code when you buy or sell; your mobile number if you add it, and your agreement to receive texts; organization details; feedback and support requests.

We collect automatically: pages and exhibitions visited, time spent and which works were approached or opened (for artists' analytics, counted per exhibition); device and browser type; approximate location (country, from your IP address, to keep buying and selling to the United States); cookies needed to sign you in, remember your language and keep the site secure. [We do not use advertising cookies at launch.]

From others: payment status from Stripe (we never see or store full card numbers); delivery status of texts from Twilio; information people include about you in reports.

Voice: live voice inside exhibitions is relayed in real time between participants and is not recorded.

How we use it

To run the service (accounts, exhibitions, passes, offers, chats, reminders); to send the emails and texts you chose; to keep people safe (fraud and scam detection, duplicate-image checks, reports, enforcing our rules); to show artists how visitors engage with their exhibitions in aggregate; to translate statements and labels automatically into other languages; to improve Interartive; to comply with law and keep accounting records.

Other users, as the product shows: your public profile, exhibitions and works; your name, state and trust signals (member since, confirmed contact, sales, ratings) with the other side of an offer; messages with the people in a chat.
Service providers acting for us: hosting and storage [provider], payments (Stripe), email ([Resend]), texts (Twilio), machine translation ([provider]), error monitoring [if any]. They may use the data only to provide their service.
When required: to comply with law or valid legal process, to protect people's safety, to enforce our terms, or as part of a merger or acquisition (with notice).
We do not sell personal information and do not share it for cross-context behavioral advertising. [Counsel: CPRA "sale/share" language.]

How long we keep it

Account data while your account is open; exhibitions until you delete them; sale and pass records for [7] years for tax and accounting; reports and safety records as long as needed; texts and email logs for [12] months; backups roll over within [35] days.

Your choices and rights

Change what we send by email or text in Settings › Notifications; reply STOP to any text. Download or delete your account from Settings [to build]. Depending on where you live (for example California, Colorado, Connecticut, Virginia, and other states), you may have rights to access, correct, delete or port your data and to opt out of certain processing; contact [privacy@interartive.com]. We do not discriminate against people who use these rights.

Children

Interartive's public service is not directed to children under 13, who may not create accounts. School programs run under agreements with schools [COPPA / FERPA — counsel].

Security

Passwords are hashed; sign-in codes are single-use and expire; uploads are checked; staff access to reported chats is logged. No system is perfectly secure; tell us about vulnerabilities at [security@interartive.com].

Changes and contact

We will post changes here and notify you of material ones. Contact: [privacy@interartive.com], [postal address].