Privacy

What you can count on while the full policy is being drafted:

• Every collection is private by default. Your tour URL is not indexed by search engines, isn’t shared anywhere, and isn’t visible to anyone you haven’t sent the link to.
• Documents you upload (COAs, condition reports, USPAP appraisals) live in a private storage bucket. Reads require time-limited signed URLs minted server-side; we do not expose document URLs to logs, search, or the public web.
• We do not sell, share, or surface your collection or its metadata to third parties. The only people who can see what you’ve added are you, anyone you authorize on your workspace, and anyone you send a tour link or PIN to.
• When you delete a piece or a document, the underlying file is removed from storage as well — not just the database row.

The full policy will land here. If you have a specific question in the meantime, email queetcy@collectour.art.