Privacy Policy

1. Information We Collect

We collect personal data in the following categories when you use Human Art Launch:

• Account & Authentication Data: When you sign in via Google OAuth, we receive your verified email address, public profile name, unique OAuth account identifier, and public profile picture. We do not receive or store your third-party account passwords.
• Artist Profile Information: Information you voluntarily provide on your public profile, such as your customized username, biography, website link, social media links, and display preferences.
• Artwork Media & Submission Details: Image files you upload (finished artwork and process verification images), artwork title, artistic medium, tools used, creation time, description, and tags.
• Community Interaction Data: Votes cast, comments published, content reports submitted, and timestamps of your platform interactions.
• Technical & Log Data: Standard server logs, IP addresses (hashed for vote rate-limiting and sybil prevention), browser user-agent, operating system, and essential session identifiers.

2. How We Use Information

We use the personal data we collect for the following operational purposes:

• To provide, maintain, and operate the Service.
• To publish your artist profile and display your artwork in daily showcases.
• To process daily showcase votes and determine podium rankings.
• To detect and prevent automated bot voting, fraud, unauthorized access, and abuse.
• To respond to user inquiries, support requests, and copyright reports.
• To comply with applicable legal obligations and statutory requirements.

3. Legal Basis for Processing (GDPR Article 6)

If you reside in the European Economic Area, UK, or Switzerland, we process your personal data under the following legal bases:

• Contractual Performance: Processing required to provide the Service under our Terms of Service, including managing your account, publishing submissions, and recording votes.
• Legitimate Interests: Processing necessary to maintain platform security, prevent vote manipulation and bot abuse, detect unauthorized AI-generated content, and ensure reliable CDN delivery.
• Legal Compliance: Processing required to comply with valid legal obligations or copyright takedown requests.
• Consent: Where you have explicitly opted in for specific communications, which you may withdraw at any time.

4. Who We Share Data With

We share data with a small set of vetted service providers to operate the Service. We do not sell personal data, we do not share it with advertising networks, and we do not permit our processors to use your data for their own marketing:

• PostgreSQL: Managed database storage for account profiles, artwork metadata, votes, and comments.
• Cloudinary: Image and media storage CDN for artwork, process shots, and profile avatars.
• Dodo Payments: Payment processing and billing. Dodo Payments acts as an independent controller for payment card details.
• Google (NextAuth): OAuth sign-in and account authentication.
• Google Analytics 4 (Google LLC): Aggregate web traffic measurement using first-party analytics cookies.
• Law Enforcement & Courts: Disclosed only when legally compelled by court order, subpoena, or applicable law.

5. Cookies & Local Storage

We use strictly necessary session cookies (such as authjs.session-token) to maintain your login session, browser local storage to save your visual theme preference (light or dark mode), and first-party analytics cookies through Google Analytics 4 to measure aggregate traffic trends.

We do not use third-party advertising cookies or cross-site tracking pixels.

6. Data Retention & Security

We retain your account and artwork data for as long as your account remains active. If you delete an artwork or delete your account, your content is removed from public view immediately and permanently purged from active databases within 30 days.

We implement industry-standard security safeguards, including TLS encryption in transit, encrypted storage at rest, and strict database connection controls to protect your personal data from unauthorized access or disclosure.

7. Your Privacy Rights

Depending on your jurisdiction, you hold the following privacy rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Edit or correct your profile data at any time via your settings.
• Right to Erasure: Request the deletion of your account and associated artwork submissions.
• Right to Data Portability: Request an export of your artwork submission history in a standard electronic format.
• Right to Object or Restrict: Object to or request limitations on the processing of your data under applicable legal circumstances.

To exercise any of these rights, contact our privacy team at [email protected].

8. California Privacy Disclosures (CCPA / CPRA)

For California residents, the California Consumer Privacy Act provides specific transparency:

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected over the preceding 12 months.
• Right to Delete: Request deletion of your personal information collected by us, subject to legal exceptions.
• No Sale or Sharing: We do not sell personal information or share personal information for cross-context behavioral advertising.
• Non-Discrimination: We do not deny services, charge different prices, or provide a different level of quality for exercising privacy rights.

9. Artwork Protection and AI Dataset Policy

Your artwork, process shots, and creative descriptions remain your property:

• No Generative AI Training: We do not use your artwork, process images, or descriptions to train artificial intelligence or machine learning models.
• No Data Brokerage: We do not sell or license uploads, profile data, or voting activity to commercial data brokers or AI laboratories.
• Scraping Defenses: We publish standard machine-readable directives (noai, noimageai) to prohibit automated crawlers from harvesting uploaded media.

10. Children's Privacy (Under 13)

Human Art Launch is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has provided personal data to us or created an account, contact us at [email protected] and we will take immediate steps to delete the account and associated records.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect updates to our data practices or platform functionality. When updates occur, we will revise the "Last Revised" date at the top of this document. Continued use of Human Art Launch after updated policies take effect constitutes your agreement to the revisions.

12. Contact Information

For questions regarding this Privacy Policy or to submit a data request, contact: