Artaver is undergoing maintenance and is still in demo mode. Some things may not work correctly for a little while, such as payments — thank you for your patience.

Artaver✦

The fine print, in plain words

Privacy Policy

Artaver makes money when art sells. It has never made money from your data, and the architecture reflects that: no ad scripts, no trackers, no profile of you sold to anybody.

§01

What we collect

  • When you create an account: your name, email address, and a password (stored only as a one-way hash — we cannot read it, and neither can anyone who obtains our database).
  • When you buy: your shipping address and order history. We never see or store your card number. Payment details go directly to Stripe, our payment processor.
  • When you sell: your studio details, listings, and the payout account you connect through Stripe. Your bank details are held by Stripe, not by us.
  • When you use the site: a per-day count of page visits. No cookies for tracking, no third-party analytics scripts, no advertising pixels.
  • When you post in The Salon: your posts, comments, likes, follows, and anything you upload.

§02

What we don't do

  • We do not sell your data. Not to advertisers, not to data brokers, not to anyone.
  • We do not run third-party advertising or tracking scripts.
  • We do not build advertising profiles or share your browsing behaviour with other companies.
  • We do not email you marketing you did not ask for. The newsletter is opt-in and every message can unsubscribe you.

§03

Photographs and metadata

  • Every image you upload is re-encoded on our server before it is stored. This strips EXIF metadata — including GPS coordinates, which phone cameras routinely embed in photographs.
  • This matters: a photograph of a work taken in an artist's home can otherwise carry the location of that home. We remove it automatically, on every upload, without asking.

§04

Who we share it with

  • Stripe, to process payments and pay artists. Stripe is the merchant processor and handles all card and bank details.
  • Cloudinary, which stores and delivers the images you upload.
  • Neon, which hosts our database, and Vercel, which hosts the site.
  • That is the entire list. Each is a service provider acting on our instructions, not a party we sell data to.
  • We will disclose information if legally compelled — for example a valid court order — and where we are permitted to tell you, we will.

§05

What is public

  • Your listings, studio page, reviews you leave, and anything you post in The Salon are public by design.
  • Provenance Ledger entries are permanent and public. Collectors appear on them by number — for example “Collector No. 0042” — not by name, unless you choose to make your collection public in Settings.
  • Works sold on Artaver appear on The Canvas alongside the studio that made them. See the Terms & Conditions for what that involves.

§06

Your control

  • Download everything: Settings → Your data gives you a complete JSON copy of everything we hold about you.
  • Close your account: Settings → Close this account. Your name, email, addresses, and Salon content are deleted, and the login is permanently disabled.
  • Completed orders, payments, and provenance entries survive that deletion. They are financial and public records that other people — artists, collectors, tax authorities — depend on. They no longer carry your personal details.
  • Correct anything: change your name, email, picture, and privacy settings yourself at any time in Settings.

§07

Security

  • Passwords are hashed with bcrypt. Sessions are signed, httpOnly cookies.
  • Two-factor authentication is available to every account in Settings, and we strongly recommend it for artists receiving payouts.
  • Every account carries a session version. Resetting your password signs you out of every device at once — the recovery route if an account is ever compromised.
  • No system is perfect. If you find a vulnerability, tell us at /.well-known/security.txt and we will respond.

§08

How long we keep things

  • Account data: until you close your account.
  • Order and payment records: retained after account closure, stripped of personal detail, because tax and accounting rules require it.
  • Visit counts: aggregated per day, with nothing identifying a person.
  • Password reset links: one hour, single use.

§09

Children

  • Artaver is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will remove it.

§10

Changes and contact

  • If this policy changes materially, we will say so on the site rather than quietly editing the page.
  • Questions, corrections, or requests about your data: artaver@artaver.com.

Last updated July 2026 ✦ Questions? artaver@artaver.com ✦ Terms & Conditions