Neri Art.

Privacy Policy

Effective date: [PLACEHOLDER: date]

1. Who we are

Neri Art is operated by [PLACEHOLDER: legal entity name], the data controller for the personal data described here. Contact us about privacy at [PLACEHOLDER: contact email].

2. What we collect

  • Account data — your email address, display name, handle, an optional bio, and an optional avatar photo. We also record whether you have marked your shop as taking a break, and since when; that your shop is on a break is shown publicly on your profile.
  • Sign-in providers — if you sign in with Apple or Google, we receive your name and email address from that provider, and we store the provider's account identifier to link your sign-in to your account.
  • Listings — the artwork details and photos you upload when you sell, including any collections you group them into. The collection names you choose are shown publicly on your profile, alongside the listings themselves. If you offer buyers hand-over in person instead of postage, the general area you name for hand-overs is part of the listing too, and is shown publicly on it.
  • Messages — private messages you exchange with other users about listings, plus automatic order updates (payment received, shipped, marked as received) that we record into the conversation for both parties. These updates repeat facts already shown on the order itself.
  • Orders — records of your purchases and sales. Payment is processed by Stripe; we never see or store your card details. We also record the moment you confirm that a purchase arrived, and the moment a purchase was first reviewed (that second one starts the 30-day clock on changing your review, below). Both sit on the order record.
  • Delivery address — when you buy something, we collect the address the artwork is to be sent to: recipient name, street address, town or city, county, postcode and country. We keep a copy of it against that order so the seller knows where to post the artwork. You can also choose to save the address to your account so it is filled in next time; saving is optional, and you can view, change or delete a saved address at any time from within the app.
  • Reviews you write — after a purchase you can rate the seller from one to five stars and write a few words about the sale. Reviews are public. Yours appears on that seller's profile and is readable by anyone, including people who do not have a Neri Art account, shown next to your display name, your handle and your profile photo. We also average a seller's ratings into a score shown on their profile and on each of their artworks. You can change or withdraw your review for 30 days after you first write it; after that it is fixed, and only our moderators can take it down.
  • Problems you report about an order — if something goes wrong with a purchase you can tell us what happened: the category you pick and what you write. This is not a review and is not public: it goes to our staff, and the seller is not shown it. We record what we decide and email that decision to you.
  • Activity — the listings you favourite and view, used to personalise your For You feed.
  • Artists you follow — you can follow an artist, and we record which artists you follow and when. Your following list is shown to you in the app and used to rank a followed artist's work higher in your For You feed. The list of artists you follow is private to you; what an artist's other visitors see is covered under "Sharing" below.
  • Push notification tokens — if you allow notifications, your device is issued a token by Apple and we store it against your account so we can send you notifications. It is deleted when you sign out on that device, when you delete your account, or when Apple tells us the device is no longer registered. See "Sharing" for what a notification contains and what Apple sees.
  • Server logs — when the app talks to our servers, request logs include your IP address. We use these logs for security, abuse prevention and rate limiting; they are held briefly by our hosting provider and are not used for profiling.

Neri Art contains no advertising and no third-party tracking SDKs.

3. How we use it

  • To provide the marketplace: accounts, listings, messaging, and orders.
  • To personalise the For You feed using your favourites and view history.
  • To process payments through Stripe.
  • To get purchases delivered: your delivery address is recorded against the order and passed to the seller so they can post the artwork to you.
  • To show buyers what other buyers thought: a review you write is published on the seller's profile and counted into their average rating.
  • To sort out problems after a purchase: a problem you report about an order is read by our staff, who record what was decided and email it to you.
  • To notify you: if you allow notifications, we push them to your device when you get a message, when you make a sale, when an order ships, when someone favourites your artwork, when a piece you favourited drops in price, when an artist you follow lists a new artwork (at most one such notification per artist per day), and when a buyer reviews you.
  • For safety and moderation: users can report listings, messages and reviews, and block other users. When content is reported — including a private message — the reported content is quoted in the report and may be reviewed by our staff.

4. Sharing

Your delivery address is given to the seller you buy from. Once your payment completes, the seller sees the address you entered at checkout — recipient name and all — in their own account in the app, because they are the person who has to post the artwork to you. Sellers are ordinary users of Neri Art, not our staff or our suppliers. Before your payment completes the seller cannot see it, and no other user can see it at any point. We do not show delivery addresses in our own moderation tools.

We otherwise share personal data only with the providers that run the service:

  • Stripe — payment processing. Your delivery address is sent to Stripe with the payment, as the shipping address for the transaction.
  • Supabase — database hosting and image storage.
  • Railway — application hosting.
  • Resend — transactional email: account-verification and password-reset codes, order receipts, sale notifications to sellers, notifications to a seller that they have been reviewed (quoting the review, which is public anyway), our decision on a problem you reported about an order (quoting what you told us), moderation decisions affecting your account, and internal moderation notifications, which can include reported content (such as quoted messages). Delivery addresses are never put in email — a seller is told a sale has happened and reads the address in the app.
  • Apple — push notification delivery. If you allow notifications, we send them straight to Apple's Push Notification service for your device; there is no third-party push provider in between. The text of a notification passes through Apple to get to you, and it appears on your lock screen, so treat it as readable by anyone holding your phone. That text can contain: the handle of someone who messaged you and the first 140 characters of their message; the title of an artwork and its price when it sells, ships, is favourited, or drops in price; the display name of an artist you follow and the title of their new artwork when they list one; a tracking number if the seller gave one; and, when a buyer reviews you, their display name, the star rating, the artwork title and up to the first 90 characters of the review (which is published on your profile anyway). Delivery addresses are never put in a notification — a seller is told a sale has happened and reads the address in the app.

Reviews are published to the whole internet. A review you write about a seller appears on that seller's public profile, with your display name, handle and profile photo beside it, and can be read by anyone — no Neri Art account needed. Please write reviews on that basis. A problem you report about an order is the opposite: it is private, goes only to our staff, and is not shown to the seller.

Follower counts are public; follower lists are not. The number of people who follow an artist is shown on that artist's public profile, readable by anyone. The list of who those followers are is never shown to anyone — not to other users, and not to the artist themself. The artists you follow are likewise visible only to you.

Listing photos and avatars are stored in a public storage bucket: anyone who holds an image's URL can view that image, even without a Neri Art account.

We never sell your personal data.

5. Deletion

You can delete your account at any time from within the app. Deletion anonymises your account immediately, and a delivery address saved to your account, along with the push notification tokens for your devices, is erased at the same moment. Your follows are removed at the same moment, in both directions: the record of which artists you followed, and other users' follows of you. Order records are retained as required for legal and financial purposes. Some content connected to your account is also retained:

  • Messages you sent remain visible to your conversation partners, attributed to "Deleted user".
  • Listings for artwork you sold, and their photos, remain visible — buyers' purchase records show them, and the photos are at public URLs.
  • Reports and the snapshots of reported content they contain are retained as safety records.
  • Reviews you wrote stay published on the sellers' profiles, attributed to "Deleted user" — a review is part of that seller's reputation, and their other buyers rely on it. Reviews other people wrote about you also remain.
  • Problems you reported about an order, and what we decided about them, are retained as the record of a dispute.
  • The delivery address recorded against an order you have already placed is not erased by deleting your account: it expires on its own schedule (see "How long we keep things" below). Where the order was paid, that is so a seller who has not yet posted your artwork can still send it to you; where it was never paid, the address is simply cleared at the end of that order's own window rather than at deletion.
  • We request deletion of your Stripe payment account where possible. Where Stripe cannot delete it, Stripe retains that data under its own legal obligations — see Stripe's privacy policy.

6. How long we keep things

  • Account data — until you delete your account.
  • Order records — retained after account deletion for legal and financial record-keeping.
  • Delivery addresses — an address saved to your account is kept until you change or delete it, or until you delete your account. The separate copy recorded against an order is erased 90 days after the order ships, 90 days after payment if it never shipped, or 90 days after the order was placed if it never completed. The order's other details (what was bought, the amounts, the dates) are kept as a financial record; the address is not part of that record.
  • Order timestamps — the moment you confirmed a purchase arrived, and the moment it was first reviewed, are kept with the order record. The seller can see the first of those on the order.
  • Push notification tokens — until you sign out on that device, delete your account, or Apple tells us the device is no longer registered, whichever comes first.
  • Password-reset codes — at most 24 hours past their expiry.
  • Sign-in session records — at most 30 days after they expire or are revoked; kept while a session is active.
  • Reports — until reviewed, and for a reasonable audit period afterwards.
  • Reviews — published until you withdraw yours (you have 30 days from first writing it) or a moderator removes it. A removed review disappears from the seller's profile and from their average, and the record of it is kept as a moderation record.
  • Problems reported about an order — kept with the order, including what we decided, as the record of the dispute.
  • Server logs — briefly, per our hosting provider.
  • Backups — our database provider keeps backups on a rolling schedule, so deleted data can persist in backups for a short period before aging out.

7. Your rights (UK GDPR)

You have the right to access your personal data, to have it rectified or erased, and to receive a portable copy of it. To exercise any of these rights, contact [PLACEHOLDER: contact email]. You also have the right to complain to the Information Commissioner's Office (ICO).

You can download a copy of your data yourself from the app, under Profile → Download my data. It includes any delivery address saved to your account and the delivery address recorded against each of your own purchases. It does not include buyers' delivery addresses from your sales: those are other people's personal data, and a copy of your data must not disclose it. You can still see each buyer's address on the order itself, in the app, where there is a parcel to post.

The same download includes reviews you have written and reviews other people have written about you — those are about you, and while they are up they are public, so a copy of them tells neither party anything new. There is one exception to say plainly: a review that a moderator has removed is included too, marked as removed, even though it is no longer on anyone's profile. We include it because it is still the author's own words and still a fact about the seller, and because we have already emailed about the removal — but "it is public already" is not the reason in that case, and we would rather say so than let the sentence cover it.

It also includes problems you have reported about your own purchases, together with what we decided. It does not include problems other people have reported about you as a seller: those are someone else's account of what happened, they are handled by our staff rather than shown to the seller, and a copy of your data is not a way around that.

Your download covers both sides of your account — what you bought and what you sold — and four things are deliberately narrower on the selling side, because they are somebody else's data rather than yours:

  • the delivery address on an order appears on your purchases only, never on your sales (see above);
  • the moment an order was first reviewed appears on your purchases only. On a sale it would say "your buyer reviewed you, at this instant" — and because that moment is recorded even when the review is later withdrawn, including it would tell you about a review you can no longer see;
  • problems reported about an order appear only where you were the buyer who reported them;
  • the artists you follow appear; the users who follow you do not. The follower list is shown to no one in the app, including you — only the count on your profile is public — and a copy of your data is not a way around that either.

The download also lists the devices you have registered for push notifications.

8. Changes

We may update this policy from time to time; material changes will be announced in the app. Effective date of this version: [PLACEHOLDER: date].