Privacy policy.
The short version: we collect what's needed to run the marketplace, share it only with the partners that move it forward, and never sell it.
What we collect
We collect what's needed to run the marketplace: your account info (name, email, password hash via Firebase), the artworks you list or buy, your order history and messages, the shipping address you provide at checkout, payment details processed by Stripe, and basic analytics (page views, device type). That's it.
How we use it
To authenticate you, list artworks, process payments and payouts, buy shipping labels and track deliveries, send transactional emails, mediate disputes, and improve the site. We do not sell, rent, or trade personal data.
Third parties
We share the minimum needed with the partners that move the marketplace: Firebase (Google) for authentication, Stripe for payments and payouts, EasyPost and the carrier you ship with (e.g. USPS, UPS, FedEx) to buy labels and track deliveries, Amazon Web Services (SES for transactional email, S3 for image storage), and a privacy-respecting analytics provider. Each is bound by their own privacy terms. Your shipping address is shared with the seller and the carrier so your order can be delivered.
Data retention
We keep your account and order records for as long as your account is active and as long as we're required to for tax, accounting, and dispute-resolution purposes. When you delete your account we remove or anonymize personal data that we're not legally required to retain.
Security
Payments are handled entirely by Stripe we never store full card numbers. Passwords are managed by Firebase Authentication and never stored in plaintext. Access to personal data is limited to what's needed to operate the platform. No system is perfectly secure, but we take reasonable measures to protect your information.
Your rights
You can request a copy of your data, correct it, or delete your account from your dashboard or by writing to hello@paintedbyus.com. We respond within 30 days.
Changes
If this policy changes materially, we'll notify registered users by email. The current version is dated below.