Privacy Policy

Summary

CanvasCircle is a free art listing platform. We collect the minimum information needed to run the Service: an email address and password to log you in, a display name and optional contact details for your public profile, the listings you create, the listings you save, and basic technical data needed to keep the site secure. We don't sell your data. We don't run ads. We don't track you across other sites.

1. Who we are

"CanvasCircle," "we," "us," and "our" refer to the operator of canvascircle.art. You can reach us at gjscuderi@gmail.com.

2. Information we collect

Information you give us

• Account information: email address, password (stored only as a hash), display name.
• Profile information you choose to add: contact email shown to buyers, location, Facebook profile URL.
• Listings: artist, title, description, dimensions, photos, price, condition, and other fields you fill in.
• Communications: messages you send us through the "Contact Admin" feature or by email.

Information we collect automatically

• Usage data: which listings you view and save, search and filter activity, device and browser type, IP address, approximate location derived from IP, and timestamps.
• Technical logs: errors, security events, request metadata. We use these to keep the site running and secure.
• Cookies and local storage: we use a small number of cookies and browser storage entries to keep you signed in, remember filter preferences on the catalog, and measure basic aggregate usage. We do not use third-party advertising or cross-site tracking cookies.

3. How we use your information

• To provide the Service: show you the catalog, sign you in, save your listings and saves, send transactional emails (welcome, password reset, admin replies, broadcast announcements you've opted into).
• To moderate listings and prevent abuse, fraud, and security issues.
• To respond to your inquiries and support requests.
• To improve the Service based on aggregate usage patterns.
• To comply with legal obligations and enforce our Terms of Use.

4. Service providers we share data with

We use a small set of third-party services to operate CanvasCircle. We share only what's needed for them to do their job. Each one is bound by its own privacy and security commitments.

• Supabase — database, authentication, file storage, and serverless functions. Stores your account, profile, listings, images, and saved-listing records. supabase.com/privacy.
• Cloudflare — hosting, content delivery, and basic security/DDoS protection for the website. Sees IP addresses and request metadata. cloudflare.com/privacypolicy.
• Resend — sends transactional and broadcast emails (welcome, password reset, admin replies, announcements). Sees recipient email and message contents. resend.com/legal/privacy-policy.

We do not sell your personal information to anyone, and we do not share it with advertisers.

5. What other users see

Some information you provide is intentionally public on the Service: your display name, your listings (including photos and descriptions), and any contact details you choose to publish on your profile (Facebook URL, contact email). Don't put anything in those fields you don't want visible to the public.

Your account email (the one you sign in with) and password are never shown publicly.

6. How we protect your information

We use HTTPS for all traffic, store passwords only as hashes, restrict database access using row-level security policies, and limit administrative access to authorized personnel. No system is perfectly secure, but we apply commercially reasonable safeguards. If we ever learn of a breach affecting your data, we'll notify you as required by law.

7. How long we keep your information

We keep your account information and listings for as long as your account is active. If you delete a listing, we remove it from public view; backup copies may persist for a short time before being purged. If you close your account, we delete or anonymize your personal information within a reasonable time, except where retention is needed to resolve disputes, prevent fraud, or comply with legal obligations.

8. Your rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

• Access the information we hold about you.
• Correct inaccurate information.
• Delete your information.
• Object to or restrict certain processing.
• Portability — receive a copy of your data in a portable format.
• Withdraw consent for processing where we rely on consent.

You can exercise most of these rights yourself from the seller portal (edit your profile, delete listings, close your account by emailing us). For anything else, email gjscuderi@gmail.com and we'll respond within a reasonable time.

California residents: the California Consumer Privacy Act (CCPA) gives you rights to know, delete, correct, and limit the use of your information, and to not be discriminated against for exercising them. We do not "sell" or "share" personal information for cross-context behavioral advertising as defined by the CCPA.

EU/UK residents: the GDPR/UK GDPR gives you the rights listed above, plus the right to lodge a complaint with your local data protection authority. Our legal basis for processing is typically (a) performance of our contract with you (running the Service), (b) legitimate interests (security, abuse prevention, improving the Service), or (c) consent (where we ask for it).

9. Children

CanvasCircle is not directed to children under 18 and we don't knowingly collect personal information from anyone under 18. If you believe a child has used the Service, contact us and we'll remove the account.

10. International users

The Service is operated from the United States. If you use the Service from outside the U.S., you understand that your information may be transferred to and processed in the U.S. and other countries where our service providers operate, which may have different data protection rules than your country.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Effective date" at the top and, for material changes, give reasonable notice through the Service or email.

12. Contact us

Privacy questions or requests: gjscuderi@gmail.com.