Privacy Policy

1. Introduction

proofmark.art ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data when you use our platform and services.

proofmark.art is an independently operated service based in London, United Kingdom. We are responsible for the processing described in this policy.

2. Information We Collect

Account information

When you create an account, we collect your email address, display name, and any profile information you choose to provide (bio, avatar, social links).

Artwork data

When you register artwork, we collect titles, descriptions, images, dimensions, media type, edition details, and any other metadata you provide for your certificates.

Payment information

Payments are processed by Stripe. We do not store credit card numbers or full payment credentials on our servers. Stripe may collect and store payment details in accordance with their own privacy policy.

Usage data

We collect product analytics such as pages visited, feature usage, browser type, device information, and session replay data to improve the Service and troubleshoot user experience issues. Sensitive inputs are masked in session replays.

3. How We Use Your Information

• To operate, maintain, and improve the Service.
• To create and display your Certificates of Authenticity and public verification pages.
• To process payments and manage subscriptions.
• To communicate with you about your account, updates, or support requests.
• To detect and prevent fraud or abuse.

4. Public Information

Certificates of Authenticity and their associated public verification pages are accessible without login. Information displayed on these pages — including artwork images, titles, creator name, and certificate details — is publicly visible by design. This is essential for collectors to verify authenticity.

Like any content displayed publicly on the web, published artwork images may be saved, copied, or captured by visitors. Publishing an image does not transfer your copyright or ownership rights to proofmark.art or to anyone who views or copies it.

5. Data Sharing

We do not sell your personal data or creative content. We do not use creative content for advertising or training AI models. We may share information with:

• Service providers — Stripe (payments), Supabase (hosting/auth), Render (infrastructure), and PostHog (product analytics and session replay) to operate and improve the Service.
• Legal requirements — When required by law, regulation, or legal process.
• Business transfers — In connection with a merger, acquisition, or sale of assets.

6. Data Retention

We retain your account and artwork data for as long as your account is active or as needed to provide the Service. Issued certificates may be retained for verification purposes even after account deletion. You may request deletion of your account and personal data by contacting us. Some information may remain temporarily in backups or be retained where required by law.

7. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), secure authentication via Supabase Auth, signed upload links, and access controls on our infrastructure. Published artwork images and public certificate details are not confidential information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Export your data in a portable format.

To exercise any of these rights, contact us at hello@proofmark.art.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics and replay cookies, if used, are limited to product improvement and troubleshooting. Public certificate pages may set an anonymous visitor cookie so repeated refreshes can be grouped in creator activity reports.

10. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

12. Contact

Questions or concerns about your privacy? Reach us at hello@proofmark.art.