ArtTrust is built on discretion. This policy explains what we collect, why we collect it, and the choices available to you.
Information We Collect
ArtTrust collects information you provide directly — your name, contact details, professional credentials, and verification documents submitted during the application process. We also collect information required to operate private deal rooms, including participant identities, room metadata, and timestamps.
We collect limited technical information automatically, including device type, operating system, IP address, and diagnostic data used to keep the service secure and reliable. We do not read the contents of your encrypted deal rooms.
How We Use Information
We use information to verify members, operate deal rooms, facilitate communication between invited parties, maintain security, prevent fraud, comply with legal obligations, and improve the service. We do not sell your personal information.
Aggregated, de-identified data may be used to report on network integrity, uptime, and platform health.
Data Retention
We retain account and verification information for as long as your membership is active and for a reasonable period afterward to meet legal, tax, and audit obligations. Deal room contents are retained only for the lifetime of the room as configured by its participants; when a room is sealed or closed, its contents are removed according to our retention schedule.
Security
ArtTrust uses AES-256-GCM encryption at rest and TLS 1.3 in transit. Deal rooms operate under a zero-knowledge architecture: ArtTrust does not hold decryption keys for your room contents. Our infrastructure is subject to third-party security audits, and we maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information we handle.
No system is perfectly secure. We encourage members to use strong device protections and to report any suspected security issues to us immediately.
Your Choices and Rights
Depending on where you live, you may have the right to access, correct, export, or delete personal information we hold about you, and to object to or restrict certain processing. You may also withdraw consent where processing is based on consent.
To exercise these rights, contact us using the details below. We will respond within the timeframes required by applicable law. You may close your account at any time from the app or by contacting support.
Children’s Privacy
ArtTrust is intended for verified professional users and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to remove it.
International Processing
ArtTrust operates globally, and your information may be processed in countries other than the one in which you reside. When we transfer personal information across borders, we use appropriate safeguards — such as standard contractual clauses — to protect your information in line with applicable law, including the GDPR and CCPA.
Third-Party Services
We rely on carefully selected third-party providers for services such as hosting, identity verification, analytics, and communications. These providers process information only as needed to deliver their services and under confidentiality and security obligations. Links to external websites are provided for convenience; their privacy practices are governed by their own policies.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the app or by email. Continued use of ArtTrust after changes become effective constitutes acceptance of the updated policy.
Contact Us
Questions or requests about this policy can be directed to info@arttrust.io.