Privacy policy

This policy describes what personal data Ochrine collects, what it uses it for and who it shares it with, when you visit ochrine.com or use the app.

What we collect

What you give us directly

• Account: name, username, email, password, account type (artist, gallery, collector).
• Profile: photo, biography, nationality, social networks and website, when you fill them in.
• Artworks: images, title, technique, dimensions, price and whatever else you publish.
• Payment: where there is a paid plan or an entry fee, card details are collected and held by the payment processor, not by us. We receive only the confirmation and the last digits.
• Support: what you write when you contact us.

What we collect automatically

Usage data: pages viewed, artworks opened, device, browser, IP address and interaction with the service. Collected through cookies and similar technologies — see the cookie policy.

What we use it for

• Providing the service: running your account, publishing your catalogue, processing exhibition applications and payments.
• Communicating: notifications about your account, applications and payments, and support when you ask for it.
• Improving: understanding how the service is used, in aggregate, so we can fix and develop it.
• Security: detecting and stopping fraud, abuse and unauthorised access.
• Legal obligations: complying with the law and responding to legitimate requests from authorities.

What is public

Your profile and the artworks you publish are public by nature: that is what the platform does. Anyone, with or without an account, can see them, and search engines may index them. Your email, your password and your payment details are never public.

Who we share it with

• Suppliers who run part of the service on our behalf: hosting, image storage, email delivery, payment processing, analytics.
• Galleries you apply to, which receive the application and the data needed to assess it.
• Authorities, where the law requires it.
• In a corporate transaction — merger, acquisition or insolvency — data may transfer as part of the assets.

We do not sell your personal data.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your data, to object to certain processing, or to withdraw consent. You can delete your account from the app itself; for anything else, write to us.

Retention

We keep data for as long as the account exists. After you delete it, we remove or anonymise whatever is no longer needed, except what we are required by law to keep — tax records of payments, for example.

Children

The service is not intended for children and we do not knowingly collect data about them. If you know of an account in those circumstances, contact us.

International transfers

Your data may be processed outside the country you live in, by our suppliers. Where we transfer data outside the European Economic Area, we do so under recognised mechanisms such as the European Commission's standard contractual clauses.

Security

No security measure is perfect. We use encrypted connections, passwords stored with a key-derivation function, and restricted access to data, but we cannot guarantee absolute security.

Changes

We may update this policy. The version in force is always on this page, with the date at the top.

Contact

To exercise your rights or ask a question: contact@ochrine.com.