CKURO.ART / Legal
Privacy Policy
Last updated: April 19, 2026
CKURO.ART ("we", "us", "our") is a digital art marketplace for original, human-created artwork. This Privacy Policy explains what personal information we collect when you use ckuro.art, how we use it, who we share it with, and the choices you have.
By creating an account or using the platform, you agree to the practices described in this policy.
1. Information We Collect
Account & Identity Data
When you sign up via Google or GitHub OAuth, we receive your name, email address, and profile picture from that provider. This information is used to create and authenticate your CKURO.ART account. We store your email address, display name, username, bio, avatar URL, and optional social links (website, Twitter/X handle, Instagram handle) that you choose to add to your profile.
Artist Application Data
If you apply to sell on CKURO.ART, we collect your full name, artist bio, portfolio URL, social profile links, and up to three sample artwork images you submit with your application.
Artwork & Content
Artists upload artwork files (images, audio, GIF, video, 3D models, and print-ready files), preview images, titles, descriptions, pricing, categories, and tags. Preview files are stored in a publicly accessible Cloudflare R2 bucket. Original high-resolution files are stored in a private bucket and only delivered to buyers after a completed purchase.
Transaction & Payment Data
When you make a purchase, we record which artwork was purchased, the buyer, the seller, the amount, currency, platform fee, payment method (Stripe), and order status. We do not store credit or debit card details — all payment processing is handled by Stripe, Inc. For artists receiving payouts, we store your Stripe Connect account ID. Temporary, expiring download tokens are generated for each purchase and expire after 72 hours.
Community Content
If you participate in the forum or comment on blog posts, we store your posts, threads, reactions, and the timestamps of that activity, associated with your account.
Technical & Usage Data
Our infrastructure (Vercel, Cloudflare, Neon) may log standard server data including IP addresses, browser type, pages visited, and request timestamps for security, performance, and debugging purposes. We do not run third-party advertising trackers or sell this data.
2. How We Use Your Information
- ▸To create, authenticate, and manage your account.
- ▸To display your public artist profile and artwork listings.
- ▸To process purchases, route payments to artists, and deliver download files.
- ▸To review and moderate artist applications and submitted artwork.
- ▸To send transactional emails: purchase confirmations, download links, application status updates, and account notices.
- ▸To detect and prevent fraud, abuse, and policy violations.
- ▸To operate and improve the platform.
We do not use your personal information for advertising, profiling, or sale to third parties.
3. Third-Party Services We Use
We work with the following trusted third parties to operate the platform. Each has their own privacy policy governing how they handle data.
Authentication and user session management. Clerk processes your OAuth login credentials and manages secure sessions. Your email, name, and OAuth tokens are stored with Clerk.
Payment processing for buyers. Stripe Connect for artist payouts. Stripe handles all cardholder data — we never see or store your card number, CVV, or full payment details.
File storage for artwork previews and original files. Files are stored in Cloudflare's infrastructure.
Managed database hosting for all platform data. Neon stores data in encrypted, access-controlled environments.
Transactional email delivery. We send your email address to Resend only to deliver emails you've triggered (e.g. purchase confirmations).
Platform hosting and global CDN. Vercel processes requests and may log standard server metadata.
4. Data Retention
We retain your account data for as long as your account is active. If you request deletion of your account, we will remove your personal profile data. Transaction records (orders, payment references) are retained for up to 7 years as required by financial recordkeeping obligations, in anonymized or minimized form where possible. Artwork files uploaded by artists may be retained for a short period after deletion to ensure pending orders can be fulfilled.
5. Your Rights
Depending on your location (including the EU/EEA under GDPR and California under CCPA), you may have the following rights regarding your personal data:
- ▸Access: request a copy of the personal data we hold about you.
- ▸Correction: update inaccurate or incomplete information via your profile settings.
- ▸Deletion: request that we delete your account and associated personal data.
- ▸Portability: request your data in a machine-readable format.
- ▸Objection: object to certain processing activities.
To exercise any of these rights, contact us at privacy@ckuro.art. We will respond within 30 days.
6. Cookies & Local Storage
CKURO.ART uses cookies and browser storage for authentication session management (via Clerk) and to maintain your preferences. We do not use advertising cookies or cross-site tracking. You may disable cookies in your browser settings, but doing so will prevent you from signing in.
7. Age Restrictions
CKURO.ART is intended for users 18 years of age or older. We do not knowingly collect personal information from minors. If you believe a minor has registered an account, contact us and we will promptly remove the account.
8. Changes to This Policy
We may update this Privacy Policy periodically. When we do, we will update the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the revised policy. For material changes, we may notify you by email.
9. Contact
For privacy-related questions or requests, contact us at:
CKURO.ART
privacy@ckuro.art