Privacy Policy

We collect information you provide directly, such as your name, email address, and phone number when you create an account or contact us. Some authentication methods (Google, Apple, Instagram) may also provide your profile picture and the email address associated with that account. When you upload artwork, we collect the image itself along with the title, description, dimensions, medium, pricing, and any other details you provide.

We also collect usage data automatically, including browsing behavior, device information (model, operating system, language), session timestamps, and aggregate analytics signals.

When you use the in-product reporting and blocking features, we record the content or user reported, the reason category you selected, the timestamp, and any free-text details you submit. We retain blocked-user lists per account so that blocked artists' content remains hidden from you. These records are used to operate the moderation system and may be shared with law-enforcement or regulatory authorities where required by law.

Galleria.Art is not directed to children under 13 years of age, or under 16 years of age in the European Economic Area where applicable national law sets the threshold at 16. We do not knowingly collect personal information from children under these ages. If a parent or legal guardian becomes aware that their child has provided personal information to us without consent, please contact privacy@galleria.art so we can delete the information. If we discover that we have collected personal information from a child below the applicable age threshold, we will delete that information promptly and terminate the associated account.

This section reflects our compliance with the U.S. Children's Online Privacy Protection Rule (COPPA, 16 CFR Part 312) and Article 8 of the EU General Data Protection Regulation (Regulation (EU) 2016/679).

Galleria.Art is operated from Brazil by Pllay AI. We use trusted infrastructure providers — including Supabase (database and storage), Vercel (web hosting), and Apple (iOS app distribution and in-app payment processing) — that operate data centers in multiple regions, including the United States, the European Union, and others. As a result, your personal information may be processed in countries outside your country of residence, including in jurisdictions whose data-protection laws differ from your own.

We rely on appropriate transfer mechanisms recognized under applicable data-protection law, including the European Commission's Standard Contractual Clauses for transfers from the European Economic Area, where required. We take reasonable steps to ensure that processors handling your data adopt confidentiality and security commitments equivalent to those described in this Privacy Policy.

If you have questions about international transfers of your data, contact privacy@galleria.art.