Privacy Policy

This Privacy Policy explains how Primatura ("we," "us," or "our") collects, uses, and protects information in connection with the Primatura platform and all Primatura-powered gallery websites. It applies to two groups of people: gallery operators — businesses and individuals who use Primatura to build and operate gallery websites — and gallery visitors — members of the public who browse Primatura-powered gallery websites. Where provisions apply only to one group, that is indicated. By using the Primatura platform or a Primatura-powered gallery website, you acknowledge the practices described in this policy.

1. Information We Collect

From gallery operators (Primatura account holders):

Account information: When you register, we collect your name, email address, and payment information (processed securely by Stripe; we do not store full card numbers).

Gallery content: Artwork images, titles, descriptions, artist profiles, and other content you upload to your gallery.

Usage data: Pages visited, features used, and general interaction data used to improve the platform.

Technical data: IP address, browser type, and device information collected automatically via standard web server logs and analytics.

From gallery visitors (visitors to Primatura-powered gallery websites):

Contact form submissions: Messages submitted through the gallery website's built-in contact form, including name, email address, optional phone number, and message content. This data is stored and made accessible to the gallery owner through their dashboard.

Like counts: When a visitor clicks the Like button on an artwork page, an anonymous count is incremented in our database. No personal information is collected. See Section 8 for details on browser local storage used to support this feature.

Traffic data: Basic request data (IP address, browser type, pages visited) collected automatically via Cloudflare infrastructure for security and performance purposes. This data is not linked to individual visitor identities.

2. How We Use Your Information

• To provide, operate, and improve the Primatura platform
• To process subscription payments and send billing notifications
• To deliver contact form submissions to gallery owners
• To send transactional emails (password resets, account notices)
• To respond to support requests
• To detect and prevent fraud or abuse

We do not sell your personal data to third parties. We do not use your content for advertising purposes.

3. Gallery Visitor Data

When visitors browse your Primatura-powered gallery website, basic usage data may be collected via Cloudflare infrastructure for performance and security purposes.

Contact form submissions. When a visitor submits a contact inquiry through your gallery website, the following information is stored in our database: name, email address, optional phone number, and message content. This data is retained and accessible to the gallery owner and any team members with Editor-level access or above through their Primatura dashboard. It is not shared with other galleries or used for any purpose beyond delivering the inquiry to the gallery's authorized users.

Team member access. Gallery operators may invite team members to access their dashboard. Depending on their assigned role, invited team members may have access to gallery content, visitor contact submissions, order history, and other operational data. Gallery operators are responsible for managing team member access and ensuring that invited members handle any personal data in compliance with applicable privacy laws.

Like counts. When a visitor clicks the Like button on an artwork page, an anonymous like count is incremented in our database. No personal information identifying the visitor is collected or stored in connection with this action. See Section 8 for details on the browser local storage used to support this feature.

Share actions. When a visitor uses the Share button, the action is handled entirely within the visitor's browser — either via the device's native share interface or by copying a URL to clipboard. No data about share actions is transmitted to or stored by Primatura.

Visitor data and gallery owners. As a gallery operator, you are the data controller for visitor information collected through your gallery website. You are responsible for handling that data in compliance with applicable privacy laws, including providing appropriate notice to visitors about how their contact information is used.

4. Data Sharing

We share data only with the third-party services necessary to operate the platform:

• Stripe — payment processing
• Square — optional point-of-sale integration
• Supabase — database and authentication infrastructure
• Cloudflare — hosting, CDN, and DNS
• Resend — transactional email delivery
• Anthropic — AI processing for artwork analysis, business insights, and social media post generation (see Section 5)
• Prodigi — print-on-demand fulfillment (artwork images and order details transmitted when you enable the Print-on-Demand feature)

Each of these providers has their own privacy policy and data handling practices. We encourage you to review them.

5. Artificial Intelligence and Data Processing

Certain Primatura features use artificial intelligence technology provided by Anthropic. When you use these features, the following data may be transmitted to Anthropic for processing:

• Artwork image analysis: Artwork images and any associated metadata you upload are sent to Anthropic to generate descriptions, tags, and other content suggestions.
• Collection descriptions: Collection title and a list of included works (titles, artist names, media, and years) are sent to Anthropic to generate suggested collection page copy.
• Business insights: Aggregated gallery performance data, traffic statistics, and sales summaries are sent to Anthropic to generate narrative insights displayed in your dashboard.
• Performance trend analysis: Historical snapshots of platform and per-gallery metrics — including subscription counts, catalog sizes, sales volumes, and traffic data — are sent to Anthropic to generate weekly trend reports. This data is aggregated and does not include personally identifiable information about gallery visitors or buyers.
• Gallery performance insights: Your individual gallery's historical performance data is sent to Anthropic to generate personalized recommendations visible in your dashboard.
• Social media post generation: Artwork images and metadata are sent to Anthropic to generate suggested post copy for Facebook and Instagram.

We transmit only the data necessary to deliver each specific AI feature. We do not send personally identifiable information about gallery visitors or buyers to Anthropic for AI processing.

Artist content and consent: If you use AI features to analyze artwork created by artists you represent, you are responsible for ensuring you have the right to submit that artwork for AI processing. You should inform artists represented in your gallery that their work may be processed by AI systems as part of the platform's features.

No training on your content: Primatura does not use your gallery content to train AI models. Data transmitted to Anthropic for feature processing is handled in accordance with Anthropic's API data use policies. Anthropic's API terms provide that content submitted via the API is not used to train models by default. For details, see Anthropic's Privacy Policy.

AI features are optional: You may choose not to use AI-powered features. Doing so will not affect your access to any other part of the platform. No content is transmitted to Anthropic unless you actively use an AI-powered feature.

5a. Performance Analytics Data

Primatura automatically collects and stores daily snapshots of platform-level and per-gallery performance metrics as part of delivering insights and trend analysis features. This data includes:

• Subscription status and tier
• Catalog counts (works, artists, exhibitions)
• Sales and order volumes (in aggregate, without buyer identity)
• Email subscriber counts
• Website traffic metrics sourced from Cloudflare infrastructure
• Integration adoption status (e.g. whether Stripe or Square is connected)

This data is retained for up to 12 months and is used to generate the performance dashboards, business insights, and trend reports available in your account. Aggregated and anonymized versions of this data — which cannot be linked back to your individual gallery — may be used internally to understand platform health and improve the Services.

This data collection occurs automatically as part of the Services. You may request deletion of your historical analytics data by contacting us; doing so will affect the availability of trend and insights features that depend on it.

6. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription and close your account, we will delete your data within 90 days, except where retention is required by law or for legitimate business purposes such as resolving disputes.

7. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), secure credential storage, and access controls. However, no system is completely secure and we cannot guarantee absolute security.

8. Cookies and Browser Storage

Primatura uses session cookies for authentication. We do not use tracking cookies or third-party advertising cookies. Your browser settings allow you to control or disable cookies, though disabling them may affect platform functionality.

Browser local storage on gallery websites. Primatura-powered gallery websites use browser local storage — a standard browser feature distinct from cookies — in connection with the visitor Like feature. When a visitor clicks the Like button on an artwork page, a small entry is written to that visitor's browser local storage recording which works they have liked on that gallery site. This is used solely to prevent duplicate likes from the same browser and to restore the liked state when the visitor returns. The following applies to this local storage use:

• The entry contains only an identifier for the liked work (gallery slug and work slug). It does not contain any personally identifiable information.
• The entry is stored locally on the visitor's device and is never transmitted to Primatura's servers.
• Primatura cannot read, access, or delete local storage entries on a visitor's device. Visitors can clear this data at any time through their browser settings.
• The like count itself (an anonymous integer) is stored in Primatura's database associated with the artwork, not with any individual visitor.

No other browser local storage or session storage is used on gallery websites beyond what is described here and any storage used by third-party integrations you enable on your gallery (such as Stripe's checkout).

9. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data. To exercise these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Primatura is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice in your dashboard. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.

12. Contact

Questions or concerns about your privacy? Contact us at [email protected].