Privacy Notice

ArtBFF may hold your account details, studio settings, artwork records, compressed display and thumbnail images, optional private AR archive files you choose to attach to an artwork (Artivive animation videos and official QR images, stored exactly as uploaded), document designs, event and wall plans, collector records, invoice and customer billing details, newsletter content, delivery events, support messages and basic technical logs needed to keep the service secure and reliable.

New artwork uploads are prepared in your browser. ArtBFF is designed to store compressed working and thumbnail copies—not your newly uploaded full-resolution original. The original remains on your device. Older beta records may show an option to remove a legacy private original if one was saved by an earlier version. The optional AR archive is the exception: an Artivive animation video or QR image you choose to attach to an artwork is stored privately as-is, and you can download or remove it at any time.

Information is used to provide the workspace, authenticate accounts, create artwork records, invoices and documents, build event plans, import and organise contacts, deliver requested newsletters, prevent unwanted email, diagnose failures, protect the service and respond to support requests.

ArtBFF does not sell artist or collector personal information.

You remain responsible for the collector information you upload and for having a lawful reason to use it. ArtBFF records consent and suppression information to help you honour unsubscribes, bounces and complaints. Suppression records may be retained after a contact is deleted so the address is not accidentally emailed again.

When a visitor uses an artist's public QR contact form, the details they choose to submit go directly into that artist's private contact list. The artist controls any follow-up. A marketing email permission request is optional, unticked by default and recorded separately pending confirmation; existing opt-outs, complaints and delivery suppressions stay in place.

Invoice customer details are stored only to create and manage the invoices you choose. You are responsible for entering them accurately, limiting access appropriately and keeping or deleting records as required by laws applying to your business.

ArtBFF relies on specialist providers for hosting, database and file storage, authentication, transactional and marketing-email delivery, payment processing, error monitoring and related infrastructure. Stripe processes card and payment details for subscriptions; ArtBFF receives the customer, subscription and invoice information needed to provide access and support billing. Those providers may process information in Australia, the United States and other countries where they or their subprocessors operate, subject to their security and privacy commitments.

Artwork files and studio records are restricted to the authenticated account using database and storage access rules. Reasonable administrative and technical safeguards are used, but no online service can promise absolute security.

Workspace information is generally kept while the account is active and for a reasonable period needed for recovery, security, legal obligations and dispute resolution. Email suppression records are retained as described above. When an account is permanently deleted, its workspace content is removed, with only the records that must be kept for legal, billing, security or anti-spam reasons retained for as long as those reasons require.

ArtBFF records feature usage and counts of records created so the service can be operated, supported and improved. A usage event may contain only your account identifier, a random session identifier kept only for the current browser session (used to connect a landing-page visit to the signup it produced), an allow-listed event name, the page path with any query string removed, the offer or campaign you arrived through, whether you signed up with Google or email, the time, and simple numeric or true/false values such as “this account now has twelve artworks”.

ArtBFF does not inspect artwork or contact-list content for analytics. Artwork titles, images, prices, collector names, collector email addresses, addresses, notes, uploaded files, floor-plan layouts, document text, campaign content and filenames are never placed in analytics records. Reports available to ArtBFF show pseudonymous account references, masked email addresses and numeric counts only.

ArtBFF does not use Google Analytics, advertising or social pixels, session replay, heatmaps, screen recording, keystroke recording or any other third-party tracker. Usage records are held in ArtBFF's own database, kept for twelve months and then reduced to anonymous monthly totals or deleted. When an account is closed, its raw usage records are deleted or stripped of any link to that account.

Nobody at ArtBFF routinely browses private studios. If you ask for help, you can choose “Grant ArtBFF support access” in Settings. That grant is read-only, expires automatically after 24 hours, and you can revoke it instantly at any time. A clear banner is shown in your workspace for as long as it is active.

Every grant records who was given access, which account, the reason, and when it started and ended. You can end the access before it expires and the audit record remains.

You can update most studio, artwork and contact information inside ArtBFF, and download an export of your workspace from Settings at any time. You may also ask for access to, correction of, export of or deletion of personal information, subject to legal and anti-spam retention requirements. To permanently delete your account and everything in it, use the deletion instructions in Settings or write to the address below from your sign-in address; deletion is confirmed back to you and is not reversible. Newsletter recipients can unsubscribe without signing in by using the link in every live marketing email.

ArtBFF handles personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles. In the event of a data breach that is likely to result in serious harm, affected account holders will be notified as the Notifiable Data Breaches scheme requires.

Privacy questions, requests or complaints can be sent to privacy@artbff.com. Complaints are acknowledged and answered as quickly as possible, normally within 30 days. If you are not satisfied with the response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

This notice is effective as of 3 September 2026. It may change as the product and its providers develop. Material changes will be shown in the product or sent to the account email, and the effective date will be updated.