Privacy Policy

Who we are

One Click Artist ("we", "us") operates the website at www.oneclickartist.net and the catalog, printing, mockup, and store-publishing service, including the Shopify app used to connect a store (the "Service").

This policy explains what personal information we collect, why we collect it, who we share it with, and how you can access or delete it. It applies to artists, galleries, and other businesses that create an account, and to anyone who visits the public pages of the site.

The person in charge of the protection of personal information is the operator of One Click Artist, reachable at support@oneclickartist.net.

In short

We keep the account, catalog, and store credentials you give us so the Service can run. We do not keep personal information about the people who buy from your store. We do not sell personal information.

Information we collect

Account. When you sign up, our sign-in provider (Clerk) collects what is needed to create your login, such as your name, email address, and the method you choose (for example email or Google). We store your preferences: language (English or French), currency (USD or CAD), and settings for registry numbers, listing text, print templates, frames, and mockups.

Catalog and files. You enter artwork information: titles, registry numbers, dimensions, prices, artist names, mediums, availability, images, extra product photos, price lists, and print-template files. We store those records so we can show your catalog, generate documents and mockups, and publish the listings you request.

Billing. A paid subscription is required to open the catalog. Payments are processed by Stripe. We store a Stripe customer id, your plan, billing interval, subscription status, renewal timing, and the brand and last four digits of the card on file. We do not store the full card number. Stripe receives the payment details you enter at checkout, together with the name and email on your account.

Shopify. If you connect a Shopify store, we store the shop domain and encrypted access credentials. You authorize us to read and update products, sales-channel publications, inventory, and locations. We use that access to create and update the listings you publish, and to notice when a piece's availability changes. Each artwork also stores the product id and sync status for that store.

WooCommerce. If you connect a WooCommerce site, we store the site address and encrypted REST API keys. We register notices so the site can tell us when a product is updated, deleted, or has its stock changed. We keep the product id and the stock fields needed to mark an artwork available or sold. We do not subscribe to order or customer notices.

Dropbox. On a Pro plan you may connect Dropbox to back up the catalog. We store an encrypted access token and, if Dropbox provides it, the email address on that Dropbox account, plus your backup settings: file format, whether to include images, and the time and result of the last backup. Files are written to the One Click Artist folder in your Dropbox.

AI scan. When you scan an artwork photo, we send that image, together with the artist names and medium names already in your account, to Google's Gemini API. It returns suggested fields: title, registry number, width, height, artist, and medium. If you turn on title cleanup, the suggestion may also correct spelling and capitalization in English or French. We do not send your catalog to Google for any other feature, and we do not use your photos to train our own models.

Technical information. Our servers keep operational logs, such as the time of a request, an error message, a shop domain on a store notice, and an account id. We also use the cookies described below. We do not use advertising cookies or third-party analytics cookies.

Information we do not collect

We do not collect personal information about your buyers or the visitors to your store. We do not receive their names, email addresses, shipping addresses, or payment cards.

A sale can change a product's stock. We use that stock change to mark the artwork sold in your catalog. The notice we keep is about the product, not about the buyer.

Shopify sends mandatory privacy notices when a buyer asks for a copy of their data or asks for it to be deleted, and when a shop must be redacted. Because we do not store buyer personal information, a buyer request does not match any record we hold. A shop-redaction notice, or uninstalling the Shopify app, deletes the Shopify connection we store for that shop.

How we use information

We use personal information to:

• create and protect your account
• provide the catalog, price lists, mockups, print files, and store publishing you ask for
• charge the subscription you choose and show your plan in the app
• keep a connected store in step with the artworks you publish
• run a Dropbox backup when you turn that on
• suggest catalog fields when you use scan
• remember your language and currency
• debug, secure, and maintain the Service
• answer support and privacy requests
• meet legal, tax, and accounting duties

We do not use your information, or your store's product data, for advertising. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Why we are allowed to use it

We use your information to perform our contract with you: the subscription and the features you turn on. Connecting a store, connecting Dropbox, and sending a photo to scan are actions you take so that feature can run. We use limited technical data to keep the Service secure. We keep some billing records because tax and accounting law requires it.

You can withdraw consent for an optional connection by disconnecting it in the app. Withdrawal does not undo processing that already happened, and the feature that needed the connection will stop.

Who we share information with

We share personal information with service providers that process it for us, and only as needed to run the Service:

• Clerk, for sign-in and account identity
• Stripe, for subscription payments
• Supabase, for the database and stored files
• Vercel, for hosting the application
• Google, for the Gemini API, only when you use scan
• Shopify, for a store you connect
• the WooCommerce site you connect
• Dropbox, only when you connect a backup

We may also disclose information if the law requires it, or to protect the Service, our users, or the rights of others. If the business is sold or merged, account information may transfer with it. We will tell you if that change materially affects this policy.

These providers may process information in the United States and in other countries, where privacy laws can differ from the laws where you live. They are engaged to protect the information and to use it to provide their service to us.

How long we keep it

We keep account, catalog, and connection data for as long as your account is open and we need it to provide the Service.

Disconnecting Shopify or WooCommerce deletes the API credentials we store. We may keep the shop domain or site address so we can tell when you later connect a different store. Uninstalling the Shopify app, or a Shopify shop-redaction notice, also deletes that connection. Your catalog in One Click Artist remains until the account is deleted. Listings already published stay in the store.

Disconnecting Dropbox deletes the token we store. Files already copied into your Dropbox stay there until you delete them.

When you ask us to delete your account, we delete the login, catalog, uploaded files, templates, store credentials, Dropbox connection, and the Stripe customer. We may keep billing records for as long as tax and accounting laws require. Copies in our own system backups are overwritten on a rolling basis.

Security

Store and Dropbox credentials are encrypted before we save them. Traffic to the Service uses HTTPS. No method of storage or transmission is perfectly secure.

Your rights

Depending on where you live, you can ask us to:

• confirm whether we hold personal information about you, and get a copy
• correct information that is wrong
• delete your information
• stop using information where the use depends on your consent
• receive certain information in a portable form

Email support@oneclickartist.net from the address on your account and say what you want. We may need to confirm the request is yours. We answer within 30 days. You can also correct language, currency, and catalog fields yourself in the app.

You can complain to a privacy regulator. In Canada, that includes the Office of the Privacy Commissioner of Canada. In Québec, you may also contact the Commission d'accès à l'information. If you live elsewhere, you may contact the regulator where you live. This policy does not take those rights away.

We do not make decisions about you that produce a legal or similarly significant effect based solely on automated processing. Scan only suggests catalog fields. You decide whether to keep them.

Cookies

We use cookies the Service needs in order to work:

• a sign-in session, so you stay logged in
• a language preference, kept for about one year, so the public site stays in English or French and shows USD or CAD
• a sidebar preference, so the app layout stays as you left it
• short-lived cookies, kept for about ten minutes, while you connect a Shopify store

If you block these cookies, sign-in and store connection may fail. We do not use cookies to advertise to you or to follow you across other websites.

Children

The Service is a business tool and is not directed at anyone under 18. We do not knowingly collect personal information from children.

Changes

We will post changes on this page and update the date above. If a change materially affects how we use personal information, we will also tell you by email or in the Service when we have a way to reach you.

Contact

Privacy questions and requests: support@oneclickartist.net.

The Terms of Service are part of how the Service is offered.