Privacy Policy

1. Introduction

Musée ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at musee.gallery.

2. Information We Collect

Information you provide:

• Account information (email address, display name, password)
• Profile information (bio, avatar, city, state)
• Content you upload (artwork, descriptions, tags)
• Comments and interactions (guest book entries, likes)
• Payment information (processed by Stripe — we do not store card numbers)

Information collected automatically:

• Device information (browser type, operating system)
• Usage data (pages visited, features used, interaction timestamps)
• IP address and approximate location

3. How We Use Your Information

We use your information to:

• Provide and maintain the Platform
• Process transactions and manage your wallet
• Send notifications about activity on your account
• Display your profile and artwork to other users
• Enforce our Terms of Service and Community Guidelines
• Improve the Platform and develop new features
• Communicate important updates about the service

4. Information Sharing

We do not sell your personal information. We may share information with:

• Stripe: Payment processing (subject to Stripe's Privacy Policy)
• Supabase: Database and authentication services
• Vercel: Hosting and content delivery
• Law enforcement: When required by law or to protect rights and safety

5. Data Security

We implement reasonable security measures to protect your information, including encryption in transit (HTTPS), secure authentication through Supabase, and row-level security policies on our database. However, no method of electronic transmission or storage is 100% secure.

6. Your Rights

All users:

• Access and update your profile information at any time
• Delete your account through the Settings page
• Export your data by contacting us

California residents (CCPA):

• Right to know what personal information is collected and how it is used
• Right to request deletion of personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

European residents (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, contact us at privacy@musee.gallery.

7. Cookies & Local Storage

We use local storage to save your theme preference (light/dark mode) and authentication session. We do not use third-party tracking cookies. Stripe may set cookies for payment fraud prevention.

8. Children's Privacy

Musée is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn that we have collected such information, we will delete it promptly.

9. Data Retention

We retain your information for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law (e.g., financial transaction records).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or platform notification. The "Effective date" at the top indicates the latest revision.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@musee.gallery.