Legal
Privacy Policy
Provenance Platform · Last updated June 9, 2026
This document is provided for informational purposes. Obtain qualified legal review before relying on it in production.
Last updated: June 9, 2026
Provenance Platform ("we," "us," or "our") operates https://provenance.guru and related services, including creator websites on subdomains, certificates of authenticity, and subscription features. This Privacy Policy explains how we collect, use, and share personal information when you use our platform.
Information we collect
Account information: email address, password (hashed), username, and profile details you provide (name, bio, location, website, medium, profile photo).
Authentication data: if you sign in with Google OAuth, we receive basic profile information from Google as permitted by your Google account settings.
Content you upload: artwork images, titles, provenance records, exhibition details, press links, CVs, and other materials you submit to the platform.
Creator site data: handle, template choices, hero images, logos, taglines, and section visibility settings for your public artist or gallery website.
Billing information: subscription role, plan interval, and payment status. Payment card details are processed by Stripe; we do not store full card numbers on our servers.
Usage and analytics: pages visited, features used, referral data, and advertising performance metrics collected via Google Tag Manager and related analytics tools, subject to your cookie consent choices.
Technical data: IP address, browser type, device information, cookies, and localStorage entries (including language, theme, and consent preferences).
How we use information
Provide and operate the platform, including certificates, registries, exhibitions, operations tools, and creator websites.
Authenticate users, prevent fraud, and enforce our Terms of Service.
Process subscriptions and trials through Stripe.
Send transactional emails (welcome messages, notifications, billing confirmations).
Measure and improve product performance, including ad and analytics measurement where you have consented.
Comply with legal obligations and respond to lawful requests.
How we share information
Service providers: we use Supabase (database and authentication), Stripe (payments), Vercel (hosting), Google (OAuth and analytics/tag management), and email delivery providers to operate the service. These providers process data on our behalf under their own terms and privacy policies.
Public content: artwork, profiles, exhibitions, and published creator sites may be visible to other users and the public according to your visibility and publish settings.
Legal requirements: we may disclose information if required by law, court order, or to protect the rights, safety, and security of our users and the platform.
We do not sell your personal information for money. Where applicable law defines "sale" or "sharing" to include certain analytics or advertising uses, you may contact us to exercise opt-out rights.
Cookies and similar technologies
We use essential cookies for authentication, security, and site functionality. Non-essential analytics and advertising cookies are used only after you accept them via our cookie consent banner. See our Cookie Policy for details.
Data retention
We retain account and content data while your account is active and as needed to provide the service. You may delete content or request account deletion subject to technical and legal retention requirements (e.g. billing records, fraud prevention, dispute resolution).
Your rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data, object to or restrict certain processing, and withdraw consent for cookies/analytics.
To exercise these rights, contact us at privacy@provenance.guru. We will respond within the timeframes required by applicable law.
International transfers
We may process and store information in the United States and other countries where our service providers operate. We take steps designed to protect your information consistent with this policy and applicable law.
Children
Our services are not directed to children under 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. Contact us if you believe a child has provided us data.
Changes
We may update this Privacy Policy from time to time. We will post the revised version with an updated "Last updated" date. Continued use after changes constitutes acceptance of the updated policy where permitted by law.
Contact
Provenance Platform
Email: privacy@provenance.guru
Website: https://provenance.guru