Privacy Policy

Last updated: April 2026

What Data We Collect

When you sign up for Artaway, we collect information you provide directly: your name, email address, and password for account authentication. If you create a profile as an artist or host, we collect your location, craft or tagline, biography, disciplines or specialties, languages spoken, social media links, and portfolio or space photographs. Photos you upload are stored in Supabase Storage. We also store your notification preferences so you can control which emails you receive.

When artists apply to listings, we collect the application message, status updates, and timestamps. When artists and hosts communicate through the platform, we store messages between users. When users leave reviews, we collect the rating, review text, and timestamp. If you contact us through the feedback form, we collect your name, email address, and message.

We also collect limited usage analytics to understand how the platform is used and to improve the service.

How We Use Your Data

We use your information to provide and improve the Artaway platform. Your profile data allows us to match artists with suitable opportunities and hosts with appropriate artists. Your location information helps power our search and map features. Messages between users are stored to facilitate communication about potential exchanges, residencies, or gigs. Usage analytics help us identify which features are valuable and where to focus development efforts.

Third-Party Services

Artaway uses several third-party services: Supabase handles user authentication and stores your account data, messages, and uploaded photos in a PostgreSQL database and cloud storage. Brevo is our email service provider — it sends transactional emails on our behalf, including application notifications, message alerts, review notifications, and host reminder emails. Vercel hosts the Artaway website. Cloudflare provides security services and runs our CAPTCHA verification (Turnstile) to prevent fraud during signup. Nominatim (powered by OpenStreetMap data) provides geocoding services when you enter a location — your location strings are sent to Nominatim's servers to convert addresses to coordinates for mapping. Each service has its own privacy practices; please review their privacy policies for details on how they handle your data.

Data Retention

We keep your account information as long as your account is active. If you delete your account, we remove your profile data, messages, and listings. Reviews you have written may be anonymized and retained to preserve the integrity of the review system. You can request deletion of your data at any time by contacting us or by using the account deletion option in your dashboard settings.

Your Rights

You have the right to access, review, correct, or delete your personal data. To exercise these rights, please email us at hello@artaway.org. We will respond to your request within 30 days. We do not sell, trade, or rent your personal information to third parties.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at hello@artaway.org.