GalleryCamp is operated by Joe Designs LLC, 110 2nd St SW Suite 501, Albuquerque, NM 87102, United States. This policy explains what personal data we handle, and why.
GalleryCamp handles personal data about two different groups of people, and our role is different for each. This policy keeps them apart.
| Who they are | Our role | |
|---|---|---|
| Gallery users | People who sign up for GalleryCamp: gallery owners, staff, artists running a studio | Controller. We decide what is collected and why. |
| Collectors and contacts | People a gallery deals with: collectors, consignors, viewing-room recipients, visitors to a gallery's website | Processor. The gallery decides. We act on its instructions. |
Part 1 — Gallery users
What we collect
- Account details. Your name, email address, password (stored only as a salted hash), profile photo, and, if you sign in with Google, your Google account id, name and email.
- Organization details. Gallery name, logo, address, brand settings, team members and their roles.
- Billing. Your plan, subscription status and invoices. Card details are collected and held by Stripe; we see only the brand, last four digits and expiry date.
- Usage and security. Sign-in sessions with the IP address and browser they came from; an audit log of changes made in your organization; server logs and error traces; usage of AI features, counted in tokens.
- What you send us. Support emails and feedback.
- Marketing site visits. Page views on gallerycamp.com through Umami, which sets no cookies and counts visits in aggregate rather than tracking individuals.
Why, and on what basis
| Purpose | Legal basis (where the GDPR applies) |
|---|---|
| Providing the Service, signing you in, running your organization | Performing our contract with you |
| Billing, invoices, tax records | Contract; legal obligation |
| Securing the Service, preventing abuse, fixing faults | Legitimate interests |
| Emails about your account, billing, and changes to these policies | Contract; legitimate interests |
| Understanding which parts of the marketing site are useful | Legitimate interests |
We do not sell personal data and do not use it for advertising.
How long we keep it
Account details are kept while your account exists and deleted when you delete it. Billing records are kept as long as tax law requires — typically seven years. Server logs are kept for a short period for security and debugging. A gallery's audit log is part of that gallery's records and keeps the name of the person who made each change.
Part 2 — Collectors and contacts
Galleries use GalleryCamp to manage their relationships with collectors and to present work to them. When a gallery records data about you, the gallery is the controller of that data, and GalleryCamp processes it on the gallery's behalf under a Data Processing Addendum. If you have questions about your data, or want to see, correct or delete it, contact the gallery. If you contact us, we will pass your request to the gallery.
What a gallery may record about you
- Contact and relationship records the gallery enters: name, email, phone, address, notes, interests, purchases, invoices, consignments and payments.
- Inquiries you send through a gallery's website or viewing room.
- Viewing-room engagement. When a gallery sends you a private viewing room with engagement recording switched on, it records which works you open, how long you spend on each, zooms, video plays, document downloads, favourites and inquiries, and the times you visited. Time is counted only while the page is visible in your browser. Each visit also records the IP address, browser and referring page.
- Room opens. The first time you open a viewing-room link, and how many times since, are recorded even when engagement recording is off.
- Website artwork views. When a gallery's website, built with GalleryCamp or connected through our API, shows an artwork, the view is recorded with the IP address, browser and referring page.
A viewing room that records engagement tells you so on the page: "[Gallery] can see which works you view here." A gallery can switch engagement recording off for any room.
We do not track whether you open emails. Emails sent through GalleryCamp — viewing-room invitations, inquiry confirmations — contain no tracking pixel. "Opened" in GalleryCamp means you opened the room's link, not the email.
What GalleryCamp does with it
Only what the gallery's use of the Service requires: storing it, showing it to that gallery's team, sending the emails the gallery asks us to send, and processing payments the gallery takes through Stripe. Collector data is never shared between galleries, never sold, and never used for our own marketing.
When you pay a gallery through GalleryCamp, your card details go directly to Stripe and are processed on the gallery's own Stripe account; GalleryCamp never sees your full card number.
Who we share data with
We use these service providers ("subprocessors") to run GalleryCamp. Each receives only what its function needs, under a written agreement that requires it to protect the data.
| Provider | What it does | Where |
|---|---|---|
| Fly.io, Inc. | Application hosting | United States |
| PlanetScale, Inc. | Database | United States |
| Tigris Data, Inc. | Storage for images and documents | United States, with cached copies in other regions |
| Stripe, Inc. | Subscription billing; collector payments on galleries' own accounts | United States |
| Bird (bird.com) | Sending email | United States |
| Anthropic, PBC | AI generation for the website builder | United States |
| OpenAI, L.L.C. | AI generation for the website builder | United States |
| Maple (maple.dev) | Error tracking and server logs | United States |
| Sizy (sizy.io) | Image resizing | United States |
| Automattic Inc. (Gravatar) | Profile images, looked up from a hash of an email address | United States |
| Google LLC | Sign in with Google, when you choose it | United States |
| Umami, self-hosted on limehosting.com | Cookie-less page-view counts | United States |
We may also disclose data when the law requires it, to protect people's safety or our rights, or to a successor if the business is sold — in which case this policy continues to apply.
International transfers
GalleryCamp is run from the United States, and data is stored there. Where we transfer personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses and the UK and Swiss equivalents, as set out in our DPA.
Security
Data is encrypted in transit (TLS) and at rest by our hosting and storage providers. Passwords and API keys are stored as hashes, never in plain text. Each gallery's data is separated by organization, and access within a gallery follows the roles its owner assigns.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive a copy of it, and to withdraw consent where we rely on it. Gallery users can export their organization's data and delete their account from within GalleryCamp. For anything else, email us. Collectors should contact the gallery first (see Part 2).
If you are in the EEA or UK, you also have the right to complain to your local data protection authority.
Cookies
See our Cookie and Tracking Notice.
Children
GalleryCamp is not intended for anyone under 18, and we do not knowingly collect their data.
Changes
If we change this policy in a way that matters, we will tell gallery users by email before the change takes effect. The date at the top shows when it was last updated.
Contact
Joe Designs LLC (GalleryCamp)
110 2nd St SW Suite 501
Albuquerque, NM 87102
United States
hello@gallerycamp.com