Effective October 7, 2026
trueart llc ("trueart", "we") runs trueart.art. This policy says what we collect, why, who sees it, and what you can do about it. The short version: we collect what it takes to keep a record of an artwork and move money for a sale; we do not sell your information, show you advertising, or track you across other sites.
trueart exists to keep a lasting public history of an artwork. Some information is therefore public by design, and stays public after you sell the work or close your account:
And some is yours to control:
Never public: your email address, postal address, phone number, payment details and payout details.
You give us: your name and email; a profile, if you are an artist or a gallery; the artworks, images and descriptions you upload; delivery addresses for Marks and for works you buy; messages you send us or send a gallery through an enquiry form; the email address of a buyer when you record a private sale to them, so they can confirm it.
From a sale: what was bought, the price, fees, royalties and payouts, and delivery details. We never see or store your full card number or bank details — those go directly to our payment processor. Sellers give identity and bank information to that processor, not to us; we receive only whether the payout account is ready.
Automatically: sign-in cookies that keep you logged in; ordinary server logs (IP address, browser, pages requested) kept briefly for security and debugging; and error reports when something breaks, from which emails and card-shaped numbers are removed before they are stored. Scanning a Mark opens a public page and is not tied to you unless you are signed in. We use no advertising or cross-site tracking cookies and no third-party analytics.
Visits to a work's page. We count how many times each work's record is opened, and how many of those openings came from scanning its Mark, so the artist, owner or gallery keeping the work can see whether it is being looked at. A count is a number per work per day. The keeper sees totals, never who visited. To tell one visitor from several on the same day we keep, for two days and then delete, a scrambled code made from the day, the work, your IP address and your browser. It cannot be turned back into your address, and it is different for every work and every day, so it cannot follow you from one page to another or from one day to the next. Your own visits to works you keep are not counted. We do this ourselves, on our own servers; we still use no third-party analytics.
From others: a gallery or a collector may record a work and name you as its artist, or a seller may name you as a buyer, before you have an account. You are emailed when that happens, where we have your address, and the record becomes yours to confirm, correct or dispute when you sign in.
To run the service: keep the record, authenticate you, process sales, pay sellers and artists, post Marks, and answer you. To send transactional email — receipts, ownership claims, sale and payout notices — which you cannot opt out of while you have an account, because the service does not work without them. To prevent fraud and handle payment disputes. To compute estimated values from completed sales, in aggregate. To meet legal and tax obligations.
We do not sell personal information, share it for advertising, or use your images to train AI models.
For people in the UK or EEA, our legal bases are: performing our contract with you (accounts, sales, payouts, Marks); our legitimate interest in maintaining an accurate public record of artworks and in preventing fraud; and legal obligation (financial records).
The other side of a sale. A seller receives the buyer's name and delivery address to ship the work. A gallery receives the name, email and message of someone who sends it an enquiry. If you accept a gallery's first-look offer to sell a work for you, that gallery receives your name and email so it can collect the work.
Service providers that process data for us under contract: account sign-in and security; payment processing and seller payouts; database and web hosting; image storage and delivery; email delivery; error monitoring. These providers are in the United States.
When the law requires it, or to protect people from fraud or harm; and to a successor if trueart is merged or sold, under this same policy.
Artwork records: permanently — that is the service. Financial records: as long as tax and accounting law requires, typically seven years. Account details: until you close your account, then deleted or disconnected from your name except where they are part of a record or a financial record. Server logs and error reports: a short period, typically up to 90 days. The visitor codes used to count a day's visitors: two days. The daily counts themselves stay with the work's record.
You can edit your profile and your visibility choices at any time. You can ask us for a copy of your data, to correct it, or to close your account and delete what we are able to, by emailing support@trueart.art; we answer within 30 days.
What deletion cannot do: remove the public record of a work you made or owned, or financial records we must keep. If you were named as an owner we can change that step to "Private collection". An artist's name stays on the works they made — attribution is the record.
Depending on where you live (including the UK, EEA and some US states) you may also have the right to object to or restrict certain processing, to data portability, and to complain to your data-protection authority. We do not discriminate against anyone for using these rights.
trueart is operated from the United States and your information is processed there. Where the law requires a transfer mechanism, we rely on standard contractual clauses with our providers.
Access to the service is encrypted in transit, payment details never touch our servers, uploads are signed server-side, and access to personal data inside trueart is limited to the people who need it. No system is perfectly secure; if a breach affects you we will tell you as the law requires.
trueart is for adults. We do not knowingly collect information from anyone under 18; tell us if you believe we have.
We may update this policy; the current version and its effective date are always on this page. Questions: support@trueart.art, or trueart llc, 900 2nd Ave SE, Issaquah, WA 98027, USA.