Privacy Policy

1. Introduction

At ArtComms, we take your privacy seriously. This Privacy Policy describes how we collect, use, and share your personal information when you use our platform.

2. Information We Collect

We collect information that you provide directly to us:

• Account Information: When you create an account, we collect your username, email address, and password.
• Profile Information: Artists may provide additional details such as a bio, portfolio images, and social media links.
• Commission Data: We store details about commissions, including project descriptions, reference images, and communication logs between artists and clients.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our service.
• To facilitate connections and communication between artists and clients.
• To notify you about changes to our service or updates to your commissions.
• To prevent fraud and ensure platform security.

4. Information Sharing and Third Parties

We do not sell your personal data. We do not share your data with third parties for their marketing purposes. We share your information only with selected service providers to facilitate the core functions of our platform:

• With Other Users: When you enter a commission agreement, necessary project and contact information is shared with the other party (Artist or Client) to facilitate the commission.
• Mailgun (Email Delivery): We share your name and email address with Mailgun to send transactional notifications and any system updates or artist newsletters you have explicitly subscribed to.
• Stripe (Payment Processing): If you choose to make or receive payments on ArtComms, payment processing is handled securely by Stripe. Sensitive financial data—such as credit card details, bank information, tax identification, or legal identity verifications—is processed and stored entirely by Stripe on their secure servers. ArtComms does not store or process your raw financial credentials on our servers.
• Didit (Age Verification): To access or sell mature (NSFW) content, we use Didit for secure, privacy-preserving age verification. Any biometric data (such as facial scans used for 3D liveness check and age estimation) or government identification documents you submit during the Didit verification process are processed entirely on Didit's secure servers. ArtComms does not receive, view, or store your biometric data, ID scans, or documents. We only receive a simple callback notification indicating whether the verification succeeded or failed to toggle age authorization status on your profile.
• Legal Requirements: We may disclose information if required by law or to protect the rights and safety of our users.

5. Data Retention, Account Deletion, and Compliance

We implement reasonable security measures to protect your data. We retain your personal information as long as your account is active. You may request deactivation and deletion of your account at any time through your Account Settings.

Grace Period: When you request account deletion, your account is placed in a pending deactivation state for 24 hours, during which your profile and listings are completely hidden from the public. You can log back in at any time within this 24-hour window to cancel the request and fully restore your account.

Anonymization and Retention for Legal Obligations: After the 24-hour grace period, your account is deactivated. Because commissions form a binding contract between artists and clients, we do not perform a hard delete of shared transactional history. We retain invoice references, commission descriptions, message logs, and payment metadata. This data is retained on the legal basis of compliance with tax laws, financial audit requirements, and to preserve contract proof for the other party.

For general client users, all personal identifiers on their central account are permanently erased or replaced with anonymous placeholders (e.g. "Deleted User"). However, because a commission constitutes a binding mutual agreement, the client's name and email address are preserved strictly within the private transaction logs and invoice history of the specific artists they contracted with. For users who are registered artists, their display name is updated to reflect deactivation (e.g. "[Name] (Deactivated)"), but their original username and URL slug are preserved rather than scrambled, ensuring that clients can continue to reference the active/completed contracts and project files associated with their orders. All other personal data (such as biography, portfolio images, and billing credentials) is permanently erased.

6. Cookies

We do not use any third-party tracking or advertising cookies (such as Google Analytics or Facebook Pixel). We only use first-party, strictly necessary cookies to keep you logged in to your account (session management) and to remember your preferences (like language settings). You can control or disable cookies through your browser settings, though doing so may prevent you from logging in or using parts of the service.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].