Privacy Policy
Last updated: [DATE] Effective date: [DATE]
1. Who we are
ANTEroom ("ANTEroom," "we," "us," or "our") operates the website at [YOUR-DOMAIN.COM] and the subscription service described there (the "Service"). The Service sends working visual artists short, personalized lists of grants, exhibitions, mural and public art commissions, and residencies matched to their practice.
ANTEroom is operated by [LEGAL ENTITY NAME, e.g. "ANTEroom LLC, an Ohio limited liability company"] located in [CITY], Ohio, United States.
If you have questions about this policy or about how we handle your information, contact us at [SUPPORT@YOUR-DOMAIN.COM].
2. The short version
We collect the information we need to match you with relevant opportunities, to bill you, and to support you. We do not sell your personal information. We do not share your artist profile with galleries, funders, or any other third party for their own marketing. The vendors we rely on to run the Service (payment processing, hosting, email delivery) receive only what they need to do their job.
The rest of this policy explains that in detail.
3. Information we collect
3.1 Information you give us
Account information. When you create an account, we collect your name and email address, and we store an authentication credential (a password hash or a login link token). We never store your password in readable form.
Artist profile and intake information. The core of the Service is matching, so we ask you about your practice. Depending on what you choose to tell us, this may include your primary medium or media, your location or the regions you are willing to work in, your career stage, your education, your exhibition or commission history, your residency history, your budget or fee expectations, your availability, and any eligibility characteristics you choose to share that affect which calls you qualify for (for example, whether you are a resident of a particular county or state, or whether you meet an emerging artist definition).
Some of the eligibility fields you may choose to provide could be considered sensitive in your jurisdiction, for example information relating to your age, disability status, veteran status, or racial or ethnic background, because some opportunities restrict eligibility on those bases. Providing this information is always optional. We use it only to determine which opportunities you are eligible for, and to explain to you why a given opportunity did or did not appear on your list. You can remove it at any time from your profile settings, and doing so will only affect the accuracy of your matches.
Payment information. Subscriptions are processed by Stripe. Your card number, expiry, and security code go directly to Stripe and are never transmitted to or stored on our servers. We receive and store a Stripe customer identifier, your subscription tier and status, the billing period, the last four digits and brand of your card, and your billing country and postal code.
Communications. If you email us, reply to a shortlist, or submit feedback, we keep that correspondence and any information in it so we can respond and improve the Service.
3.2 Information we collect automatically
Usage information. We record how you interact with the Service: pages viewed, opportunities opened or saved or dismissed, shortlist delivery and open events, approximate time of access, and similar activity. We use this to improve matching quality and to fix problems.
Device and connection information. Our hosting provider and our analytics receive your IP address, browser type and version, operating system, device type, referring page, and general geographic region derived from your IP address.
Cookies and similar technologies. See Section 7.
3.3 Information from other sources
We compile opportunity listings from public sources such as arts council websites, foundation and grantmaker websites, municipal and county public art programs, museum and gallery open calls, residency program pages, and published calls for entry. That is information about opportunities, not about you.
If you sign up or log in through a third party service, that service may share your name, email address, and profile image with us in accordance with your settings there.
4. How we use your information
We use the information described above to:
- Determine which opportunities you are eligible for and rank them for relevance to your practice
- Create and deliver your shortlists at the frequency your plan provides
- Create and maintain your account and authenticate you
- Process your subscription payments, issue receipts, handle renewals, and manage cancellations and refunds
- Respond to your questions and provide support
- Send you service messages such as billing notices, changes to these terms, and security notices
- Monitor and improve match quality, verification accuracy, and the Service generally
- Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service
- Comply with our legal obligations, including tax and accounting requirements
We do not use your artist profile to train any general purpose machine learning model, and we do not make your profile available to third parties for their own marketing.
4.1 Automated processing and AI
Matching is partly automated. We apply a deterministic eligibility check against the stated requirements of each opportunity, and we use a ranking step to order the results by fit. That ranking step may involve sending relevant portions of your artist profile, together with the opportunity descriptions, to a third party AI provider ([e.g. Anthropic]) that processes it on our behalf and returns a ranking. That provider acts as our service provider, is contractually restricted to processing the data for our purposes, and does not use it to train its models.
Automated matching decides which opportunities appear on your list. It does not produce any legal or similarly significant effect on you, and it does not replace your own judgment about whether to apply. You can always ask us to review a match by contacting support.
5. How we share information
We share personal information only in these circumstances:
Service providers. We use vendors to operate the Service. Each receives only the information it needs and is bound to use it only on our instructions. As of the date above these include:
| Provider | Purpose | What it receives |
|---|---|---|
| Stripe | Payment processing and subscription billing | Name, email, payment details you enter, billing address, transaction records |
| Vercel | Website and application hosting | IP address, request and device data, application logs |
| [Supabase] | Database and authentication | Account data, artist profile, saved opportunities |
| [Resend] | Sending shortlist digests and service email | Name, email address, delivery and open events |
| [Analytics provider] | Product and traffic analytics | Usage and device information, in aggregated or pseudonymous form |
| [Anthropic] | Ranking step in the matching pipeline | Relevant artist profile fields and opportunity descriptions |
Legal and safety. We may disclose information if we reasonably believe disclosure is required by law, subpoena, or other legal process, or is necessary to protect the rights, property, or safety of ANTEroom, our users, or the public.
Business transfer. If ANTEroom is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.
With your direction. We will share information at your request or with your consent.
We do not sell your personal information, and we do not share it for cross context behavioral advertising as those terms are defined under California law.
6. Advertising and social platforms
If we run advertising on platforms such as Meta or TikTok, those platforms may place a tag or pixel on our marketing pages that records that a visit or a signup occurred. Where required, we ask for your consent before those tags load. These tags allow us to measure whether our advertising works. You can control this through the cookie settings on our site and through the ad settings in your account on those platforms.
7. Cookies
We use a small number of cookies and similar technologies:
- Strictly necessary cookies keep you logged in, keep your session secure, and remember your cookie choices. These cannot be turned off without breaking the Service.
- Analytics cookies help us understand how the Service is used so we can improve it.
- Advertising cookies, if enabled, measure the effect of our advertising.
Where required by law, we ask for your consent before setting anything other than strictly necessary cookies, and you can change your choice at any time through [the cookie settings link in our footer]. Most browsers also let you block or delete cookies directly.
8. How long we keep information
We keep your account and artist profile for as long as your account is open. If you cancel, we keep your profile for [12 MONTHS] so you can reactivate without starting over, then delete or anonymize it. You can ask us to delete it sooner.
We keep billing and transaction records for as long as required by tax and accounting law, which is generally seven years in the United States. We keep support correspondence for [24 MONTHS]. We keep aggregated or de-identified usage data, which cannot be linked back to you, indefinitely.
9. Your choices and rights
Wherever you live, you can:
- Access and correct your account information and artist profile directly in your account settings
- Download a copy of your profile and saved opportunities by contacting support
- Delete your account and associated personal information by contacting support at [SUPPORT@YOUR-DOMAIN.COM]
- Unsubscribe from marketing email using the link in any such email. Note that you will still receive essential service messages such as billing notices for as long as you have an active subscription.
- Cancel your subscription at any time through the customer portal linked in your account
9.1 If you are in California
The California Consumer Privacy Act, as amended, gives California residents the right to know what personal information we collect, use, and disclose, the right to correct inaccurate information, the right to delete personal information, the right to limit use of sensitive personal information, and the right not to be discriminated against for exercising these rights. As stated above, we do not sell personal information and we do not share it for cross context behavioral advertising. To exercise any of these rights, contact [SUPPORT@YOUR-DOMAIN.COM]. We will verify your request by confirming control of the email address on the account.
9.2 If you are in the European Economic Area or the United Kingdom
You have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. Where we process your data on the basis of consent, you may withdraw that consent at any time.
We process your data on the following legal bases: performance of our contract with you (providing and billing for the Service), our legitimate interests (improving the Service, preventing fraud, and marketing our own similar services), your consent (optional sensitive eligibility fields, non essential cookies, and marketing email where required), and compliance with legal obligations.
If your data is transferred to the United States, we rely on [standard contractual clauses] to protect it. You have the right to lodge a complaint with your local supervisory authority.
9.3 Other United States states
Residents of states with comprehensive privacy laws, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others, have similar rights of access, correction, deletion, and portability, and the right to opt out of targeted advertising. Contact us at the address above to exercise them. If we deny your request you may appeal by replying to our decision, and we will respond within the period your state law requires.
10. Security
We protect your information with encryption in transit, encryption at rest for stored data, access controls limiting who on our side can see profile data, and reliance on payment infrastructure that keeps card data out of our systems entirely. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any required regulator as the law requires.
11. Children
The Service is not directed to children. You must be at least 18 years old to create an account and purchase a subscription. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. If you believe a minor has provided us information, contact [SUPPORT@YOUR-DOMAIN.COM].
12. International users
We operate in the United States and our infrastructure is located there. If you use the Service from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where data protection law may differ from that of your country.
13. Changes to this policy
We may update this policy as the Service changes. If we make a material change, we will notify you by email or through a notice in the Service before the change takes effect, and we will update the "Last updated" date above. Continuing to use the Service after a change takes effect means you accept the revised policy.
14. Contact
Questions, requests, or complaints:
[LEGAL ENTITY NAME] [MAILING ADDRESS] [CITY], Ohio [ZIP] [SUPPORT@YOUR-DOMAIN.COM]
This document is a draft template prepared for review. It is not legal advice. Have a licensed attorney review it against your final architecture, your entity structure, and the laws of the jurisdictions your subscribers live in before you publish it.