Privacy Policy

Last Updated: January 28, 2026

CanvasArtTech OÜ, registration number 16604482, located at Tornimäe tn 5, Kesklinna linnaosa, Tallinn, Harju maakond, 10145 ("CanvasArtTech OÜ," "we," "us," or "the Company"), values the privacy of individuals who use our services. This Privacy Policy applies to the Art Collector IQ website (www.artcollectoriq.com, the "Site") and the Art Collector IQ mobile application (the "App"), collectively referred to as the "Services."

This Privacy Policy is designed to inform you about our practices regarding the collection, use, and disclosure of personal information that you may provide via the Services.

1. Consent and GDPR Compliance

By using the Services, you consent to the collection and use of information as specified in this Privacy Policy. Your Personal Data is processed under this Privacy Policy in accordance with the General Data Protection Regulation (2016/679) ("GDPR") and the applicable national data protection laws ("Data Protection Law"). We act as data controllers of your Personal Data.

2. Changes to Our Privacy Policy

We may revise this Privacy Policy to reflect changes in the law, our personal data collection and use practices, the features of our Services, or advances in technology. Material changes will be prominently posted on the Site and/or within the App.

3. Information We Collect

We collect both Personal Data and Anonymous Data. The information collected depends on how you interact with our Services.

3.1 Information Collected via the Website

When you interact with our Site, we may collect:

• Email and mailing addresses
• First and last name
• Browser type, operating system, IP address, domain name, and a date/time stamp for your visit
• Details of your visits to our Site, including communication data and the resources that you access and use

3.2 Information Collected via the Mobile App

When you use the App, we may collect:

Photos and Videos

• Artwork images you capture using the camera for AI-powered analysis and valuation
• Photos are processed to provide artwork identification and valuation services
• Images are stored locally on your device and transmitted to our AI service provider for analysis

Device Identifiers

• Anonymous device identifiers used to manage your subscription status
• These identifiers are not linked to your personal identity

Purchase History

• Subscription and in-app purchase information to provide premium features
• Payment processing is handled securely by Apple; we do not collect or store payment card details

Environment Scanning Data

• When using the AR (Augmented Reality) room preview feature, the App scans your physical environment
• This data is processed locally on your device and is not transmitted to our servers

3.3 Information NOT Collected by the App

The App does NOT collect:

• Your name, email address, or contact information (no account required)
• Your location data
• Your contacts or address book
• Health or fitness data
• Browsing history

4. How We Use Your Information

4.1 Website Usage

The Personal Data you provide via the Site is used for:

• Account creation and user verification
• Providing reports and data analytics services
• Sending newsletters and communications to which you have subscribed
• Processing payments through secure payment processing services
• Enhancing the quality of our services and offering a personalized experience

4.2 Mobile App Usage

The information collected via the App is used for:

• Core Functionality: Processing artwork photos to provide AI-powered analysis and valuations
• Subscription Management: Verifying your subscription status to enable premium features
• AR Features: Enabling the room preview feature to visualize artwork in your space
• Local Storage: Saving your artwork collection and notes on your device

We do NOT use App data for:

• Advertising or marketing purposes
• Tracking you across other apps or websites
• Selling to third parties

5. Third-Party Service Providers

5.1 AI Analysis Services

We use third-party AI services to analyze artwork images you submit. When you scan an artwork:

• The image is transmitted securely to our AI service provider
• The image is processed to generate analysis results
• Images are not retained by the AI provider after processing

5.2 Subscription Management (RevenueCat)

We use RevenueCat to manage in-app subscriptions. RevenueCat:

• Processes anonymous device identifiers to verify subscription status
• Does not collect personal information such as names or email addresses
• For more information, see RevenueCat's Privacy Policy at https://www.revenuecat.com/privacy

5.3 Payment Processing

All payments for subscriptions are processed by Apple through the App Store. We do not have access to your payment card details. Apple's privacy practices are governed by their own privacy policy.

6. Marketing and Communications

We may use your Personal Data collected via the Site to send promotional content and newsletters if you have opted to receive such communications. You have the right at any time to stop us from contacting you for marketing purposes.

The App does not collect contact information and therefore does not send marketing communications.

7. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your Personal Data:

• Right of Access: Request access to your Personal Data
• Right to Rectification: Request correction of inaccurate Personal Data
• Right to Erasure: Request deletion of your Personal Data
• Right to Restrict Processing: Request restriction of processing your Personal Data
• Right to Data Portability: Request transfer of your Personal Data
• Right to Object: Object to certain processing of your Personal Data
• Right to Withdraw Consent: Withdraw consent at any time where we rely on consent to process your Personal Data

Exercising Your Rights for App Data

Since the App does not require an account and stores data locally on your device:

• To delete your data: Simply delete the App from your device, which removes all locally stored artwork data
• To delete subscription data: Contact us at info@artcollectoriq.com, and we will request deletion from our subscription provider

8. Data Retention and Security

8.1 Retention Periods

Website Data: We retain personal data as long as it is necessary and relevant for our operations, to comply with legal obligations, resolve disputes, and enforce our agreements.

App Data:

• Artwork images and collection data are stored locally on your device until you delete them or uninstall the App
• Subscription records are retained as required for financial and legal compliance

8.2 Security Measures

We implement industry-standard security measures designed to protect your data from unauthorized access, alteration, or destruction, including:

• Encryption of data in transit using TLS/SSL
• Secure server infrastructure
• Regular security assessments

9. Data Storage and Transfers

Your Personal Data collected via the Site is stored on secure servers located in London, with all reasonable steps taken to ensure secure treatment of your personal information.

For the App:

• Your artwork collection is stored locally on your device
• When artwork images are transmitted for AI analysis, they may be processed by servers located in various jurisdictions
• Any international transfers comply with GDPR requirements through appropriate safeguards

10. Children's Privacy

Our Services are not directed to children under 13 years of age. We do not knowingly collect Personal Data from children under 13. If you become aware that a child has provided us with Personal Data, please contact us at info@artcollectoriq.com.

11. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what Personal Data we collect, request deletion, and opt out of sales. We do not sell Personal Data.

12. Contact Information

For any questions regarding this Privacy Policy or your Personal Data, please contact us at:

CanvasArtTech OÜ Tornimäe tn 5, Kesklinna linnaosa Tallinn, Harju maakond, 10145 Estonia

Email: info@artcollectoriq.com

13. Data Protection Authority

You have the right to lodge a complaint with a Data Protection Authority (DPA) if you believe your Personal Data is being processed in a way that does not comply with the GDPR.

For Estonia, the relevant authority is: Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) Website: www.aki.ee

14. App-Specific Privacy Summary

For transparency, here is a summary of the App's data practices:

This Privacy Policy was last updated on January 28, 2026.