Privacy Policy

The hub collects only what it needs to do its job: artist email addresses, names, studio numbers, profile info artists choose to share, event RSVPs, and issue reports you submit. Everything is stored in cloud infrastructure. We don’t sell anyone’s data, ever.

From artists:

• Email address (required for sign-in)
• Display name and studio assignment (set by management)
• Profile info you add: business name, medium, website, shop URL
• Notification preferences
• Directory visibility preferences (what appears on the public directory)
• RSVPs, announcement read receipts, issue reports you submit

All Community data is stored in a Supabase project (Postgres database + file storage) registered in the Community’s name. Outbound email is sent through Resend; outbound SMS through Twilio. These are industry-standard service providers chosen for their security posture and clear data handling commitments.

Data is encrypted in transit (HTTPS) and at rest (managed by the cloud providers).

The hub uses row-level security in the database to enforce who can read what:

• The public can see artist directory profiles marked as public: name, building, studio number, mediums, and links artists choose to share.
• Signed-in artists can see the full hub, post events, and submit issue reports.
• Management can see all artist records, the issue queue, and the outbound message audit log.

• We don’t sell, rent, or trade resident data.
• We don’t use resident data to train AI models or generate insights for third parties.
• We don’t embed third-party trackers, analytics pixels, or advertising tags.
• We don’t share the Community’s data with anyone outside the cloud infrastructure providers listed above.

You can, at any time:

• Update your profile info and visibility preferences in your hub settings.
• Request a copy of your personal data, or its deletion, by contacting management.

Privacy questions? Email j.sundby@gmail.com.