1. Who is responsible for your data

Curatones is the data controller for the personal data described in this policy. You can reach us at contact@curatones.com.

2. What we collect, and why

We only collect the personal data needed to run the platform, or that you choose to give us:

• Account details: your name, email address and password (stored only in a protected, hashed form), or your Google account name and email if you sign in with Google. We use them to create and secure your account. Legal basis: performance of our contract with you.
• Profile details: the handle, profile picture, bio, location and other information you choose to show on your public profile, Salons and artworks. Legal basis: performance of our contract with you.
• Artist and curator information: artwork details and images, and, once you connect Stripe, the payout information Stripe collects to pay you. Legal basis: performance of our contract with you and our legal obligations.
• Orders and reservations: the artworks you reserve or buy, delivery address and phone number, and the payment status of your order. Legal basis: performance of our contract with you and our legal obligations (accounting).
• Messages: what you send us through the contact form or by email. Legal basis: our legitimate interest in answering you.
• Newsletter and platform emails: your email address, if you sign up to hear from us. Legal basis: your consent, which you can withdraw at any time.

We never receive your full card number: payments are handled entirely by Stripe.

3. Cookies and similar technologies

Curatones uses a secure session cookie to keep you signed in, and stores your display preferences in your browser. These are strictly necessary for the platform to work as you expect, so they do not require consent. We do not use advertising cookies.

4. Email tracking

Where we send you news or product updates, our email provider may measure whether emails are opened and which links are clicked. We use this only to improve our emails and understand which topics interest you. Account and order emails (sign-in links, reservations, payment notices) are service messages and are sent regardless.

5. Who we share data with

We do not sell, rent or trade your personal data. We share it only with the service providers that help us run Curatones, who act on our instructions, and with the other people involved in a sale:

• Stripe, to process payments and pay out artists and curators.
• Airtable, where the platform's data is stored.
• Our shipping partners, for the delivery details needed to deliver an artwork.
• The artist of a work you buy receives what they need to prepare the shipment. Your public profile and Salons are visible to anyone.

Some of these providers are based outside the European Economic Area. Where that is the case, transfers rely on safeguards such as the European Commission's standard contractual clauses.

6. How long we keep your data

We keep your account data for as long as your account is open. If you ask us to delete your account, we delete or anonymise your personal data, except what we must keep by law, for example order and accounting records, which are kept for the legally required period. Newsletter addresses are kept until you unsubscribe, and are deleted after 3 years of inactivity, in line with CNIL recommendations.

7. Your rights

Under the GDPR you have the right to access your data, to have it corrected, to have it erased, to restrict or object to its use, to receive a copy in a portable format, and to withdraw your consent at any time (every marketing email contains an unsubscribe link). To exercise any of these rights, write to contact@curatones.com. We will answer within one month.

8. Right to lodge a complaint

If you believe your data is not handled properly, you can complain to the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr, or to the data protection authority of your own country.

9. Changes to this policy

We may update this policy as the platform evolves. The date at the top shows when it last changed, and we will tell you about significant changes by email or on the platform.