Privacy Policy

Effective Date: March 25, 2025

Art Market API is a platform owned and operated by ArtCollection.io LLC, a Delaware limited liability company ("Company," "We," "Our," or "Us"). We are committed to protecting your privacy. This Privacy Policy explains how We collect, use, disclose, and safeguard your information when you visit our website at artmarketapi.com, use our mobile applications, or access our services, including our art collection management platform, APIs, and related services (collectively, the "Services").

PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY ACCESSING OR USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT ACCESS OR USE THE SERVICES.

This Privacy Policy should be read in conjunction with our Terms of Service, available at https://artmarketapi.com/terms. We reserve the right to modify this Privacy Policy at any time. Material changes will be communicated to you via email or through prominent notice on our Services. Your continued use of the Services following the posting of changes constitutes your acceptance of such changes.

We collect information in several ways when you interact with our Services:

• Account Information: When you create an account, we collect your name, email address, password, phone number, and billing information.
• Profile Information: Information you add to your profile, such as your organization name, role, and professional details.
• Collection Data: Information about artworks in your collection, including artwork details, images, provenance, valuations, purchase history, and related documentation.
• Payment Information: Credit card numbers, billing addresses, and other payment details processed through our third-party payment processors (we do not store complete credit card numbers on our servers).
• Communications: Information you provide when you contact us, including support requests, feedback, and correspondence.
• API Credentials: Information related to your API access, including API keys and usage data.

• Device Information: IP address, browser type, operating system, device identifiers, and hardware information.
• Usage Data: Pages visited, features used, time spent on pages, search queries, click patterns, and navigation paths.
• API Usage Data: API calls made, endpoints accessed, request and response data (excluding sensitive personal information), rate limit usage, and error logs.
• Location Data: General geographic location based on IP address.
• Log Data: Server logs, including access times, error logs, and referring URLs.

• Authentication Services: If you sign in using a third-party service (e.g., Google, Apple), we receive information from that service as authorized by you.
• Analytics Providers: We receive aggregated analytics data from third-party analytics services.
• Business Partners: Information from galleries, auction houses, and other partners with whom we have data-sharing arrangements.

We use cookies, web beacons, pixels, and similar technologies to collect information and provide the Services:

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Services. You may also opt out of certain third-party cookies by visiting:

• Network Advertising Initiative: https://optout.networkadvertising.org
• Digital Advertising Alliance: https://optout.aboutads.info

We use the information we collect for the following purposes:

• Operate, maintain, and provide the Services;
• Process transactions and send related information;
• Provide customer support and respond to inquiries;
• Personalize and improve your experience;
• Develop new features, products, and services;
• Analyze usage patterns and optimize performance.

• Send transactional emails (account confirmations, password resets, purchase receipts);
• Send service-related announcements and updates;
• Send marketing communications (with your consent where required);
• Respond to your comments, questions, and requests.

• Detect, prevent, and address fraud, unauthorized access, and other illegal activities;
• Monitor and enforce compliance with our Terms of Service;
• Protect the rights, property, and safety of our users and the public;
• Comply with legal obligations and respond to lawful requests.

We may aggregate and anonymize information to create statistical data about art market trends, pricing analytics, and industry insights. Such aggregated data does not identify any individual user and may be used for business purposes, including providing market analytics services.

We do not sell your personal information. We may share your information in the following circumstances:

We share information with third-party vendors who perform services on our behalf, including:

• Payment processors (Stripe, PayPal);
• Cloud hosting providers (AWS, Google Cloud);
• Analytics providers (Google Analytics, Mixpanel);
• Customer support platforms;
• Email service providers.

These service providers are contractually obligated to use your information only to provide services to us and to maintain the confidentiality of your information.

In connection with any merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have regarding your information.

We may disclose your information if required to do so by law or in response to valid legal requests, including:

• Court orders, subpoenas, and other legal processes;
• Requests from government authorities;
• To protect the rights, property, or safety of Art Market API, our users, or others;
• To investigate potential violations of our Terms of Service.

We may share your information with third parties when you have given us explicit consent to do so.

We may share aggregated or de-identified information that cannot reasonably be used to identify you for any purpose, including research, marketing, analytics, and improving our Services.

We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis.
• Security Monitoring: We continuously monitor our systems for security vulnerabilities and unauthorized access attempts.
• Regular Audits: We conduct regular security assessments and penetration testing.
• Secure Infrastructure: Our servers are hosted in SOC 2 Type II certified data centers with physical security measures.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Information: Retained for the duration of your account and for seven (7) years thereafter for legal and tax compliance purposes.
• Collection Data: Retained for the duration of your account. Upon account deletion, we will delete or anonymize this data within ninety (90) days, unless retention is required for legal purposes.
• Transaction Records: Retained for seven (7) years for accounting and legal purposes.
• Log Data: Generally retained for up to two (2) years for security and operational purposes.
• API Usage Data: Retained for one (1) year for billing and operational purposes.

You have the right to request access to the personal information we hold about you and to receive a copy of that information in a portable format.

You have the right to request that we correct any inaccurate personal information we hold about you.

You have the right to request that we delete your personal information, subject to certain exceptions required by law or legitimate business purposes.

You may opt out of receiving marketing communications by clicking the "unsubscribe" link in any marketing email or by contacting us at privacy@artmarketapi.com. Please note that you will continue to receive transactional emails related to your account.

Some browsers have a "Do Not Track" feature that signals to websites that you do not want your online activity tracked. Due to the lack of a common standard for interpreting these signals, we do not currently respond to Do Not Track signals.

To exercise any of these rights, please contact us at privacy@artmarketapi.com. We will respond to your request within thirty (30) days. We may need to verify your identity before processing your request.

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers are located. These countries may have data protection laws that differ from those in your country.

When we transfer personal information outside of the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission;
• Transfers to countries with an adequacy decision;
• Other legally approved transfer mechanisms.

The Services are not intended for individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child under 18, please contact us at privacy@artmarketapi.com.

This section supplements the Privacy Policy above and applies solely to California residents. This notice is provided pursuant to the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA).

In the preceding twelve (12) months, we have collected the following categories of personal information:

1. Identifiers: Name, email address, phone number, IP address, account ID.
2. California Customer Records (Cal. Civ. Code § 1798.80(e)): Name, address, telephone number, financial information.
3. Commercial Information: Purchase history, subscription records, artwork collection data.
4. Internet or Network Activity: Browsing history, search history, interaction with our Services.
5. Geolocation Data: General location based on IP address.
6. Professional Information: Employment, business affiliation.
7. Inferences: Preferences, characteristics, and behavior derived from collected information.
8. Sensitive Personal Information: Account login credentials (when combined with required security questions or passwords).

• Directly from you when you create an account, use our Services, or contact us;
• Automatically through your use of our Services;
• From third-party partners, including authentication services and business partners.

We collect personal information for the business purposes described in Section 3 above, including providing Services, processing transactions, customer support, marketing, security, and legal compliance.

We may disclose personal information to the categories of third parties described in Section 4 above. In the preceding twelve (12) months:

• We have NOT sold personal information as defined under the CCPA/CPRA.
• We have NOT shared personal information for cross-context behavioral advertising purposes.

As a California resident, you have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: Although we do not sell or share personal information for behavioral advertising, you may submit an opt-out request.
• Right to Limit Use of Sensitive Personal Information: Request that we limit our use of sensitive personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your California privacy rights, you may submit a verifiable consumer request by:

• Emailing us at privacy@artmarketapi.com;
• Submitting a request through our online form at artmarketapi.com/privacy-request;
• Calling us at (510) 555-0100.

You may designate an authorized agent to submit requests on your behalf. We will verify the identity of the requester and the authorized agent before processing the request.

We will respond to verifiable consumer requests within forty-five (45) days. If we need more time, we will inform you of the reason and extension period in writing. We will not charge a fee for processing requests unless they are excessive or manifestly unfounded.

We do not offer financial incentives that are unjust, unreasonable, coercive, or usurious in exchange for personal information.

California Civil Code Section 1798.83 permits California residents to request information regarding the disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

This section supplements the Privacy Policy above and applies to residents of the European Economic Area (EEA), United Kingdom, and Switzerland.

We process your personal data on the following legal bases:

• Contract: Processing necessary for the performance of a contract with you (e.g., providing the Services).
• Consent: Processing based on your consent (e.g., marketing communications). You may withdraw consent at any time.
• Legitimate Interests: Processing necessary for our legitimate interests, including fraud prevention, security, and service improvement, where such interests are not overridden by your rights.
• Legal Obligation: Processing necessary to comply with legal obligations.

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of Access: Obtain confirmation of whether we process your personal data and access to that data.
• Right to Rectification: Request correction of inaccurate personal data.
• Right to Erasure: Request deletion of personal data in certain circumstances.
• Right to Restriction: Request restriction of processing in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing that produce legal effects concerning you.

ArtCollection.io LLC (operating as Art Market API) is the data controller for personal data collected through the Services. Our contact details are provided at the end of this Privacy Policy.

You have the right to lodge a complaint with a supervisory authority in your country of residence if you believe our processing of your personal data violates applicable law.

The Services may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

We may update this Privacy Policy from time to time. The "Effective Date" at the top of this page indicates when this Privacy Policy was last revised. If we make material changes, we will notify you by email or through a prominent notice on the Services prior to the changes becoming effective. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

ArtCollection.io LLC
(d/b/a Art Market API)
Attn: Privacy Officer
1201 Pine St. #361
Oakland, CA 94607

Email: privacy@artmarketapi.com
Website: https://artmarketapi.com

For data subject requests (access, deletion, correction), please email: privacy@artmarketapi.com

EU/UK Representative:
For users in the European Economic Area and United Kingdom, you may also contact our EU representative at: eu-representative@artmarketapi.com