A quiet approach to data.

Account information — name, email, password hash, and profile details you provide when you create an account.

Artist and listing content— images, titles, descriptions, pricing, and provenance details for works you list.

Transaction information— records of purchases, subscriptions, and payouts. Card numbers are handled by our payment provider and never stored on Opuora servers.

Usage information — pages viewed, features used, device and browser details, and approximate location derived from IP, used to operate and improve the service.

Communications — messages you send us or that pass through the platform between artists and collectors.

To operate the platform, authenticate accounts, and process payments and payouts.

To communicate with you about your account, transactions, and material updates to the service.

To improve the platform — including performance, discovery, and safety — and to prevent abuse.

To send editorial or marketing messages you have opted into. You can unsubscribe from marketing emails at any time.

Where applicable law requires a legal basis for processing, we rely on: performance of our contract with you (to run your account and process transactions), our legitimate interests (to secure and improve the platform), your consent (for optional communications and non-essential cookies), and legal obligations (such as tax and anti-fraud requirements).

We do not sell personal information. We share information with service providers that help us run Opuora — including hosting, database and authentication, email delivery, and payment processing — under contracts that require them to protect it. We may also disclose information if required by law or to protect the rights and safety of Opuora and its members.

We keep information for as long as your account is active or as needed to provide the service. After account closure we retain limited records to meet legal, tax, and anti-fraud obligations, then delete or anonymize the rest.

You can access, correct, export, or delete your account information from your account settings, or by writing to legal@opuora.com. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to object to certain processing and to lodge a complaint with your local data-protection authority.

Opuora uses encryption in transit, hashed passwords, and access controls on production systems. No online service can guarantee perfect security, but we work to protect the information you trust us with, and we require the same of the providers we work with.

Opuora operates internationally. Your information may be processed in countries other than the one where you live, including the United States. Where required, we use appropriate safeguards for those transfers.

Opuora is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided information, write to legal@opuora.com and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be announced in-product or by email.

Privacy questions and data requests: legal@opuora.com.