Last updated: August 8, 2026
At Artcolex ("we", "our"), we respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and protect your data when you use our gallery management platform at artcolex.com.
Data controller: Artcolex Address: Ankara, Turkey Email: info@artcolex.com For EU users, data processing activities are conducted in accordance with GDPR for the purposes stated in this policy.
We collect the following data to provide our services: • Account information: Name, email address, gallery name, profile image. • Artwork and collection data: Title, artist, price, dimensions, images, and other catalog information. • Contact and customer data: Buyer name, email, phone information. • Sales and financial data: Sale date, price, currency (credit card or bank details are not stored by Artcolex). • Usage data: Session information, IP address, browser type, page view statistics. • Support data: Messages and attachments shared in support tickets.
We process your data for the following purposes and legal bases: • Performance of contract: Creating your account, providing artwork management, sales tracking, share links, and reporting services. • Legitimate interests: Ensuring service security, resolving technical issues, improving service quality. • Legal obligation: Fulfilling tax, accounting, and legal reporting obligations. • Consent: Email notifications and service updates (you can unsubscribe at any time).
We work with the following third-party processors to deliver our services: We work with third-party service providers that supply hosting, database, payment processing, and email infrastructure to deliver our services. Payments are processed by Paddle (paddle.com). Paddle acts as the Merchant of Record; your credit card details are not stored by Artcolex. These providers only access your data for service purposes and cannot use your data for their own purposes. Artcolex does not sell, rent, or share your personal data with third parties for commercial purposes.
Your personal data may be collected, used, and stored in countries outside your home country. Privacy laws in the locations where we process your data may not be as protective as the laws in your home country. By using our Service, you consent to this transfer.
• Active account data: Retained for as long as your account is active. • After subscription cancellation: Your data is retained for 1 year and then permanently deleted. • Account deletion request: All data is permanently deleted within 30 days. • Data required by law (invoices, payment records): Retained for the applicable legal retention period (5 years for VAT records). • Artcolex's right to close accounts: Artcolex may close a user's account and delete all associated data in circumstances it deems necessary (such as violation of Terms of Service, illegal content, or platform security), with at least 30 days' prior email notice to the user.
We implement reasonable technical measures to protect your data, including SSL/TLS encryption, role-based access control (RBAC), per-gallery data isolation, and encrypted password storage. However, no method of data transmission or storage over the internet is 100% secure. Despite our reasonable efforts, we cannot guarantee the absolute security of your data.
Under GDPR and applicable data protection laws, you have the following rights: • Right of access: Learn what data we process about you. • Right to rectification: Request correction of inaccurate or incomplete data. • Right to erasure ("right to be forgotten"): Request deletion of your data. • Right to restriction: Request that processing be stopped under certain conditions. • Right to data portability: Receive your data in a machine-readable format. • Right to object: Object to processing based on legitimate interests. • Rights related to automated decision-making: Object to decisions based solely on automated processing. To exercise these rights, email info@artcolex.com or use the "Delete Account" option on the Settings page. Requests will be responded to within 30 days. If we need to decline your request due to a valid reason such as legal obligation, public interest, or legitimate interest, we will inform you of the reason for the refusal.
Artcolex only uses essential cookies: • Session cookies: Required to maintain your login state. The service cannot function without these cookies. • Preference cookies: Used to remember your preferences such as language selection. No third-party cookies are used for analytics, advertising, or marketing purposes. You can manage cookies through your browser settings; however, disabling essential cookies may prevent the service from functioning.
Artcolex is not directed at individuals under the age of 18, and we do not knowingly collect data from such individuals. If we become aware that we have collected data from a person under 18, we will delete it immediately.
If Artcolex is involved in a merger, acquisition, sale of assets, or restructuring, your personal data may be transferred as part of that transaction. You will be notified by email before such a change takes place, and the new party will be required to comply with the obligations under this Privacy Policy. In the event of permanent discontinuation of the Service, users will be notified by email at least 90 days in advance. During this period, you may export your data. After this period, all data will be permanently deleted.
We may update this privacy policy from time to time. For significant changes, we will notify you by email and update the "Last updated" date at the top of the policy. Continued use of our service constitutes acceptance of the updated policy.
For questions about our privacy policy or data processing activities: Email: info@artcolex.com
Artcolex · info@artcolex.com