1. Who processes your information
Relict Inc., Delaware, United States, operates RELICT and is responsible for the personal information it processes for its own Platform services. Contact info@relict.cloud for privacy requests. Artists, Escrow.com, Convelio, Stripe and other independent providers are responsible for information they process for their own services under their own privacy notices. RELICT does not control every use made by those independent parties.
2. Information we process
Depending on the services you use, we process:
- Account and contact information, including name, email, account identifiers, authentication information and settings.
- Artist profile and listing information, including supplied biographies, images, descriptions, condition and provenance statements, rights declarations and publication choices.
- Identity-check information, including information submitted for verification and the third-party verification result or reference. Documents may be handled by the verification provider; submitting a document does not mean it becomes public.
- Transaction information, including the work and price, parties, billing and delivery details, telephone number where needed for delivery, selected terms, acceptance records, provider transaction references, status information and correspondence.
- API and subscription information, including plan, invoices, payment-provider references, usage, quota and credential records. Payment providers handle payment credentials under their own arrangements; RELICT does not request that you email card details.
- Affiliate information, including referral attribution, qualifying subscription revenue, rewards, payout instructions and tax or identity details needed for a payout.
- Technical and security information, such as IP address, device and browser data, session information, logs, errors and suspected abuse signals.
- Support requests, rights complaints and the records needed to respond to them. Optional analytics and referral-cookie information are described in the Cookie Policy.
We receive information from you, from your authorized use of the Platform, from other transaction parties and from providers that supply relevant confirmation, compliance or service information. Do not submit information you have no authority to share.
3. Purposes and processing grounds
We use personal information to provide accounts and requested services; publish information you choose to list; facilitate direct Artist–Buyer agreements and provider integrations; record acceptance and transaction status; administer API subscriptions and affiliate payments; respond to support and rights complaints; protect the Platform; enforce agreements; and meet legal, accounting and recordkeeping obligations.
Where a processing ground must be identified, we rely on performance of a contract or requested pre-contract steps for account and service delivery; legitimate interests in security, fraud prevention, service administration, rights protection and maintaining appropriate records, balanced against affected individuals' interests; legal obligations where processing is required by law; and consent for optional cookies and other activities that require it. Consent can be withdrawn without affecting processing lawfully carried out before withdrawal. We do not treat acceptance of all optional tracking as a condition of using essential Platform functions.
4. Disclosure and public information
Public artist profiles, listings and content you designate for publication are available to visitors and may appear in search results, licensed feeds or API responses within the applicable content permissions. Private account, identity and transaction data are not made public merely because a work is listed. Consider carefully what you include in public content.
We disclose information as needed to hosting and infrastructure providers, including Hostinger where used; authentication, identity-verification, technical and support providers; Stripe for API subscriptions; Escrow.com for artwork payment and transaction services; Convelio for delivery arrangements; and the Artist or Buyer who needs information to enter and perform the direct sale agreement. Access is limited to the purpose and authorized function. Providers may act as service processors or as independent businesses depending on their role.
We may disclose information to professional advisers, auditors, courts, authorities and rights claimants where required or justified to comply with law, respond to valid process, investigate abuse, protect rights or resolve a claim. A complaint or counter-notice may need to be shared with the person affected by it. In a business reorganization or transfer, information may be transferred with appropriate protections and required notice.
We do not sell personal information for third-party advertising. Any future material change to that practice would require an updated notice and the choices required by applicable law.
5. International processing
RELICT operates from the United States and uses providers that may process information in other countries. A user's location does not necessarily determine where every record is stored. Where law requires safeguards for an international transfer, we use the applicable contractual or other lawful transfer mechanism.
6. Retention and security
We retain information for as long as reasonably needed for its stated purpose, the relevant service or transaction, applicable accounting or legal requirements, security, dispute resolution and enforcement. Different record types may have different retention periods. Closed accounts may leave transaction, consent, financial, security or claim records that we are lawfully required or entitled to retain. Backup copies are removed through the applicable backup cycle rather than necessarily at the moment a live account is deleted.
We use reasonable administrative, technical and organizational measures appropriate to the information and risks. No system is guaranteed to be completely secure. You should protect your credentials and report suspected compromise promptly. We respond to incidents and provide notifications where required by applicable law.
7. Your requests and choices
You may request access to, correction of or deletion of your personal information by emailing info@relict.cloud from your account address. You may also request a copy or portability of relevant information, restriction of processing or object to particular processing where those rights apply. You may withdraw optional consent through the available preference controls or by contacting us.
We may need proportionate verification of your identity and request scope. We will respond within the period required by applicable law and explain any lawful limitation. A deletion request does not require deletion of records needed for an unresolved transaction, legal obligation, security investigation or claim, but retained data remains limited to the applicable purpose. We do not charge merely for making an ordinary rights request, except where law permits a reasonable charge for an exceptional request.
You may contact the competent privacy authority where applicable. Exercising a privacy right does not itself require you to purchase another service. Artists and independent providers may need a separate request for information they control.
8. Children and changes
The Platform is intended for adults and is not directed to children under eighteen. If you believe a child has supplied personal information, contact us so we can review and take appropriate action. We may update this policy with a dated version and provide additional notice where required. A policy update does not retroactively convert optional consent into mandatory consent.