Privacy Policy

Last updated: March 2026

1. Data We Collect

We collect information you provide directly: your name, email address, profile details, and content you upload. We also collect usage data such as pages visited, device information, and IP addresses.

2. How We Use Your Data

Your data is used to operate the platform, process payments, moderate content, communicate with you, and improve our services. We do not sell your personal information to third parties.

3. Cookies

We use essential cookies for authentication and session management. No third-party advertising cookies are used. You can manage cookie preferences through your browser settings.

4. Third-Party Services

We share data with the following trusted providers:

  • Supabase — Database hosting and authentication
  • Stripe — Payment processing
  • Sightengine — Automated content moderation

Each provider processes data according to their own privacy policies and applicable data protection regulations.

5. Data Retention

We retain your data for as long as your account is active. You can delete your account at any time from your settings, which will permanently remove your personal data, rooms, and uploaded media within 30 days. Some data may be retained longer where required by law or for legitimate business purposes (e.g., transaction records for tax compliance).

6. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and all associated data
  • Export your data upon request
  • Withdraw consent for optional data processing

To exercise any of these rights, visit your account settings or contact us. If you are in the EU, you have additional rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

7. Children

Gallery Room is not intended for users under the age of 13. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of the platform after changes constitutes acceptance.

9. Data Processing for Payments

Payment data is processed by Stripe and is subject to Stripe's privacy policy. We do not store your full credit card details. Transaction records are retained for tax and legal compliance purposes even after account deletion.

10. Contact

For privacy-related inquiries, contact us at hello@galleryroom.com.