Privacy Policy

1 Information We Collect

When you use artM, we collect the following categories of information to provide and improve our services:

Account Information

Your email address, display name, and encrypted password. This data is stored in a private Google Spreadsheet accessible only to the application administrator.

Facebook Profile Data

Your Facebook profile URL. When you use Facebook Login, we also access your public profile name and email. This is required to participate in auctions and communicate with counterparties.

Auction & Bidding Data

Your bid amounts, bid history, auction participation records, and any artwork you upload or purchase through the platform.

Uploaded Content

Images, artwork names, descriptions, prices, and category metadata uploaded by administrators. Images are stored in Google Drive with public sharing enabled for display purposes only.

2 How We Use Your Information

To create, authenticate, and manage your artM account.

To process your bids and facilitate live auction functionality.

To connect buyers and sellers via Facebook Messenger when an auction is won.

To display your bids and auction activity on the platform.

To maintain platform security and prevent fraud.

To improve the platform experience and fix technical issues.

We do not:

Sell, rent, or share your personal data with third parties beyond what is necessary to operate the platform. We do not use your data for targeted advertising.

3 Data Storage

Your data is stored securely using Google's cloud infrastructure:

Google Sheets

User accounts, bids, and metadata stored in a private spreadsheet.

Google Drive

Artwork images stored in a private folder with view-only public sharing.

All data is processed through Google Apps Script, which executes on Google's secure servers. Data in transit is encrypted via HTTPS.

4 Facebook Integration

artM integrates with Facebook for authentication and communication. Here's exactly what we access and why:

Permission	Purpose	Stored?
public_profile	Display name for your profile	Yes
email	Account identification and communication	Yes
Profile link	Shared with buyers/sellers for contact	Yes
Friend list	Not accessed	Never
Post on your behalf	Not requested	Never

We comply with Facebook Platform Policies. Your Facebook credentials are never stored on our servers — authentication is handled entirely by Facebook.

5 Your Rights

You have the following rights regarding your personal data:

Access

Request a copy of all personal data we hold about you.

Correction

Request correction of inaccurate or incomplete data.

Deletion

Request deletion of your account and all associated data.

Withdraw Consent

Remove your Facebook URL or disconnect Facebook at any time.

To exercise any of these rights, contact us at marilapherashvili@gmail.com

6 Data Retention

Account data is retained as long as your account is active.

Bid history is retained for auction integrity and dispute resolution.

Uploaded artwork images remain until the admin deletes them or the artwork is removed from the platform.

Upon account deletion request, all personal data is removed within 30 days.

7 Security

We implement reasonable security measures to protect your data:

HTTPS Encryption

All data in transit is encrypted

Access Controls

Only admins access the database

Google Infrastructure

Enterprise-grade hosting

While we take every precaution, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

8 Children's Privacy

artM is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If we discover that a child under 13 has provided us with personal data, we will delete it immediately. If you believe a child has provided personal information, please contact us.

9 Changes to This Policy

We may update this Privacy Policy periodically. When we do:

We will update the "Last updated" date at the top of this page.

For material changes, we will notify you via email or a prominent notice on the platform.

Continued use of artM after changes constitutes acceptance of the updated policy.

10 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please reach out:

Data Protection Inquiries

marilapherashvili@gmail.com

We aim to respond to all requests within 30 days.