CanvasArt Tech OÜ, registration number 16604482, located at Tornimäe tn 5, Kesklinna linnaosa, Tallinn, Harju maakond, 10145 ("CanvasArt Tech OÜ," "we," "us," or "the Company"), values the privacy of individuals who use our services. This Privacy Policy applies to the Art Gallery IQ website (www.artgalleryiq.com, the "Site") and the Art Gallery IQ mobile application (the "App"), collectively referred to as the "Services."
This Privacy Policy is designed to inform you about our practices regarding the collection, use, and disclosure of personal information that you may provide via the Services.
By using the Services, you consent to the collection and use of information as specified in this Privacy Policy. Your Personal Data is processed under this Privacy Policy in accordance with the General Data Protection Regulation (2016/679) ("GDPR") and the applicable national data protection laws ("Data Protection Law"). We act as data controllers of your Personal Data.
We may revise this Privacy Policy to reflect changes in the law, our personal data collection and use practices, the features of our Services, or advances in technology. Material changes will be prominently posted on the Site and/or within the App.
We collect both Personal Data and Anonymous Data. The information collected depends on how you interact with our Services.
When you interact with our Site, we may collect:
When you use the App, we may collect:
Photos and Videos: Artwork images you capture using the camera for AI-powered analysis, sales intelligence, and valuation. Photos are processed to provide artwork identification, market positioning, sales scripts, and valuation services. Images are stored locally on your device and transmitted to our AI service provider for analysis.
Device Identifiers: Anonymous device identifiers used to manage your subscription status. These identifiers are not linked to your personal identity.
Purchase History: Subscription and in-app purchase information to provide premium features. Payment processing is handled securely by Apple; we do not collect or store payment card details.
Booth and Inventory Data: Artwork records, pricing information, offer management data, sales tracking, and booth configuration data you enter into the App. This data is stored locally on your device.
Team Data: If you use team synchronisation features, we may process team member identifiers to enable shared booth access and collaborative inventory management.
KYC/AML Compliance Data: The App provides interactive compliance checklists for anti-money-laundering regulations. All compliance data you enter is stored locally on your device and is not transmitted to our servers.
The App does NOT collect:
The Personal Data you provide via the Site is used for:
The information collected via the App is used for:
We do NOT use App data for advertising or marketing purposes, tracking you across other apps or websites, or selling to third parties.
We use third-party AI services (via OpenRouter API) to analyse artwork images you submit and generate sales intelligence, talking points, sales scripts, and valuations. When you scan an artwork:
We maintain a proprietary database of over 143,000 verified auction records from major auction houses including Christie's, Sotheby's, and Phillips. This database is used to provide accurate market valuations and comparable sales data. No personal data is collected or shared in connection with auction database queries.
We use RevenueCat to manage in-app subscriptions. RevenueCat processes anonymous device identifiers to verify subscription status and does not collect personal information such as names or email addresses. For more information, see RevenueCat's Privacy Policy.
All payments for subscriptions are processed by Apple through the App Store. We do not have access to your payment card details. Apple's privacy practices are governed by their own privacy policy.
We may use your Personal Data collected via the Site to send promotional content and launch notifications if you have opted to receive such communications. You have the right at any time to stop us from contacting you for marketing purposes.
The App does not collect contact information and therefore does not send marketing communications.
Under the GDPR, you have the following rights regarding your Personal Data:
Since the App does not require an account and stores data locally on your device:
Website Data: We retain personal data as long as it is necessary and relevant for our operations, to comply with legal obligations, resolve disputes, and enforce our agreements.
App Data: Artwork images, inventory data, offer history, and compliance records are stored locally on your device until you delete them or uninstall the App. Subscription records are retained as required for financial and legal compliance.
We implement industry-standard security measures designed to protect your data from unauthorised access, alteration, or destruction, including:
Your Personal Data collected via the Site is stored on secure servers, with all reasonable steps taken to ensure secure treatment of your personal information.
For the App:
Our Services are not directed to children under 13 years of age. We do not knowingly collect Personal Data from children under 13. If you become aware that a child has provided us with Personal Data, please contact us at hello@artgalleryiq.com.
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what Personal Data we collect, request deletion, and opt out of sales. We do not sell Personal Data.
For any questions regarding this Privacy Policy or your Personal Data, please contact us at:
CanvasArt Tech OÜ
Tornimäe tn 5, Kesklinna linnaosa
Tallinn, Harju maakond, 10145
Estonia
Email: hello@artgalleryiq.com
You have the right to lodge a complaint with a Data Protection Authority (DPA) if you believe your Personal Data is being processed in a way that does not comply with the GDPR.
For Estonia, the relevant authority is: Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) — www.aki.ee
For transparency, here is a summary of the App's data practices:
| Data Type | Collected | Linked to Identity | Used for Tracking |
|---|---|---|---|
| Photos/Videos | Yes | No | No |
| Device ID | Yes | No | No |
| Purchase History | Yes | No | No |
| Inventory Data | Yes (local) | No | No |
| Offer/Sales Data | Yes (local) | No | No |
| KYC/AML Data | Yes (local) | No | No |
| Location | No | — | — |
| Contact Info | No | — | — |
This Privacy Policy was last updated on February 11, 2026.