Privacy Policy
Effective date: October 2026
On this page
- Who we are
- Information you give us
- Information collected automatically
- Payments and payouts
- How we use information
- What other users can see
- Service providers we share information with
- How long we keep information
- Security
- Your choices and rights
- International transfers
- Age requirement
- Changes to this policy
- Contact
Who we are
DOTDAT is an online marketplace where emerging artists sell original artworks to collectors. DOTDAT is operated by Apparel Brand Consultants LLC, a United States company ("DOTDAT", "we", "us"). This policy explains what personal information we collect when you use dotdatart.com, app.dotdatart.com and related services (the "Platform"), how we use it, who we share it with, and the choices you have.
Information you give us
Account details: your name, email address, username, password and the role you choose (artist or collector).
Artist profile: school, degree and graduation information, artist statement, biography, CV entries and other details you add, plus the artworks you list (images, titles, descriptions, medium, dimensions, prices).
Collector preferences: the art styles, price ranges and other choices you make during onboarding, and the works and artists you favorite or follow.
Orders and shipping: the shipping address and contact details you enter at checkout, the ship-from address artists set up for shipping, tracking numbers, and messages exchanged about an order.
Messages and support: messages you send to other users through the Platform, problem reports, cancellation requests and anything you send to us.
Applications: if you apply to join as an artist through our application form, the information you submit there (for example your name, school email and portfolio links).
Information collected automatically
Security and usage records: sign-in events, one-time code requests, IP address, browser and device information, and logs of actions such as purchases, confirmations and account changes. We use these to keep accounts secure, prevent fraud and fix problems.
Browser storage: we use your browser's storage and a small number of strictly necessary cookies to keep you signed in and remember interface settings. We do not use advertising cookies or third-party advertising trackers.
Payments and payouts
Payments are processed by Stripe. Card numbers are entered directly with Stripe and never reach DOTDAT. Artists receive payouts through Stripe Connect; Stripe collects the identity, tax and bank details it needs to verify artists and pay them, under its own privacy policy (stripe.com/privacy). We receive limited information from Stripe, such as payment status, the last digits of a card, and whether an artist account is ready to receive payouts.
How we use information
To run the marketplace: create and secure accounts, publish listings and profiles, process checkouts, help artists ship and collectors receive works, record ownership history, release artist payouts, and send the emails the Platform needs (sign-in codes, order updates, receipts).
To keep DOTDAT safe: verify eligibility, prevent fraud and abuse, enforce our Terms of Use, and resolve disputes.
To improve DOTDAT: understand what works and what does not, and fix bugs.
To meet legal obligations: tax, accounting, payment and law enforcement requirements.
We do not sell your personal information, and we do not share it for targeted advertising.
What other users can see
Artist profiles and listed artworks are public. Collectors are shown as "Private Collector" in an artwork's ownership history; your name is not shown publicly. Shipping and ship-from addresses are shared only with the other party to an order, so the work can be shipped and returned if needed.
Service providers we share information with
We share information only with companies that help us run the Platform, and only what they need: Supabase (database, authentication, file storage), Railway and Cloudflare (hosting and network), Stripe (payments, payouts, tax and identity verification), Resend (transactional email), Geoapify (address suggestions when you type an address), EasyPost (shipment tracking), Google Workspace (our email inbox) and Typeform (artist applications). If we enable automatically generated artist summaries, the profile text you provide may be sent to an AI provider to produce that summary.
We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.
How long we keep information
We keep account information while your account is open. Order, payment and ownership records are kept as long as needed for tax, accounting, dispute and legal purposes, and to preserve the provenance record of an artwork. Security logs are kept for a limited period. When information is no longer needed, we delete or anonymize it.
Security
We use encrypted connections (HTTPS), one-time email codes for sign-in and sensitive changes, database access rules that limit each user to their own private data, and restricted administrator access. No system is perfectly secure; if we learn of a breach that affects your information, we will notify you as required by law.
Your choices and rights
You can update most profile and account details in Settings. You can ask us to access, correct, export or delete your personal information, or to close your account, by emailing [email protected]. We may need to keep some records (for example completed orders) where the law requires it.
Depending on where you live (for example California, other US states, the European Union or the United Kingdom), you may have additional rights, including the right to object to or restrict certain uses and to complain to your local data protection authority. We will not discriminate against you for exercising your rights.
Where EU or UK law applies, we process information to perform our contract with you (running your account and orders), for our legitimate interests (security, fraud prevention, improving the Platform), to comply with legal obligations, and with your consent where we ask for it.
International transfers
DOTDAT is based in the United States and our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for these transfers.
Age requirement
DOTDAT is for people aged 18 and over. We do not knowingly collect information from anyone under 18; if you believe we have, contact us and we will delete it.
Changes to this policy
We may update this policy as the Platform evolves. We will post the new version here with its effective date, and tell you by email or in the app before significant changes take effect.
Contact
For privacy questions or requests, contact us at [email protected].