Privacy Policy

Effective October 27, 2026 for everyone · Last updated October 27, 2026 · Version privacy-2026-10-27

In plain words

We collect what it takes to run your account, your show entries, your gallery and your bookings, and we tell you here, by source, exactly what that is (§2).
When you apply to a show, buy a ticket or otherwise direct it, we give the organization running it your contact details and what you submitted, because you asked us to; it never receives your browsing, analytics or session-replay data from us, though it can see whether you opened the letters it sends you; where a show offers our AI assistant in its message threads, every message you send there is also read by the assistant and its replies are visible to the organizers, and our own staff can read assistant conversations (§4, §6).
Our sites run Google Analytics, Microsoft Clarity session replay and, under the Marketing choice, advertising pixels. We receive no money for your information, but those companies collect it from our sites and may use it for their own purposes, which California law can treat as a "sale" or "sharing", so we treat it that way (§3, §11.6). "Your Privacy Choices" in the footer and the Global Privacy Control browser signal turn all of them off, and where they start on or off depends on where you are: on by default in most of the United States unless you turn it off, off in the EEA, UK and Switzerland unless you turn it on, and Marketing off in California unless you turn it on (§5).
Our AI assistants change records only through an action that the person responsible approves, you for your own account and an organizer or our staff for the records they manage, or within a short window that person approved; ArtBot may answer on its own in a show's message threads and file a bug report for you when it notices something on the site is not working, an assistant may draft help articles and news posts for our staff to review before anything is published, and our support inboxes may send an automatic first reply (§6.1, §6.2). They are built never to judge the quality or merit of anyone's art; they are off for anyone we know to be under 18, §10 says what else is different for anyone under 18, and a student's details reach an outside AI service only in the cases §6.4 names (§6, §10).
You can see, correct, download or delete your information, and stop marketing email, by asking us; we acknowledge within 2 business days and finish within 30 days, or tell you within that time why a complex request needs longer (§11).

1. Who we are

Juried Art Services, LLC ("we", "us", "Juried Art Services") runs two brands and the sites behind them:

Juried Art Services (juriedartservices.com): application management and jurying for art fairs and juried shows, where artists apply, organizations run their shows and jurors score, together with the related sites for organizations (admin.jurying.com), jurors (ejury.jurying.com), sign-in (jurying.net and accounts.jurying.net) and our own staff (sales.jurying.com, devops.jurying.com).
The Artist Seen (theartistseen.com): the place where art lovers find independent artists, their galleries and their news.

Both brands share one account system, one database and this one Privacy Policy. Where this policy says "the sites", it means every site above. Where it says "your organizers", it means the organization whose show you applied to, bought a ticket for or attended, and the people who run that show for it.

Our postal address is PO Box 3477, Palm Beach, FL 33480. How to reach us about privacy is in §15. This policy takes effect on October 27, 2026 for everyone; §14 explains how we tell you about changes. Separate documents govern cookies (the Cookie Policy, once published at /legal/cookie-policy), the use of the sites (the Terms of Service) and selling, buying and professional services (the Seller Terms, the Patron Terms and the Professional Services Terms, once published).

2. What we collect

We collect personal information from four sources: you, your organizers, automatically from your device, and partners you choose to connect or pay through, plus one business-data source for organizations we approach (§2.4). You must give us your name, your email address and, for applications and purchases, the details the form marks as required, because we need them to run your account, your entries and your orders; without them we cannot provide that service. Everything else is optional.

2.1 What you give us

Account and sign-in. Your name, email address and the sign-in method you choose: a Google account, a one-time email link or code, a text-message code, or a passkey. If you sign in by text-message code, you give our sign-in provider your phone number and it texts you the code. We do not ask you to create a password, no sign-in path on our sites reads one, and we store none. Sign-in is handled by our sign-in provider, which also sees the device and IP address you sign in from; we receive your name, email address and, for Google sign-in, the basic profile Google shares. Your birthdate, which you give at sign-up and from which we calculate your exact age; organizers never see it (§10.2 explains how we use it), and nothing about your age is ever sent to the sign-in provider.
Contact and profile. Your postal address and a phone number: for artist accounts, which organizers receive with every application you make to their shows, and for ticket holders, which we ask for once, keep on your account for support and sign-in, and pass to the organization running the event with your ticket. Your bio, portrait, website and social links, the roles you take on (artist, patron, Juror, photographer, writer, portfolio reviewer, event director, commissioned work, Gallerists & Dealers, organizer roles, or an assistant someone adds to their account) and what you choose to show on a public profile or gallery.
Applications and artwork. Everything you put into an application to a show: artist statements, category choices, booth or space preferences, answers to the organizer's own questions, and the images you upload with their titles, dimensions, materials and prices. Images are stored and delivered through an image hosting and delivery service; every uploaded image, including images you send only to a show, has a web address that is hard to guess but opens for anyone who has it.
Galleries, listings and news. The works you list for sale, their prices and shipping details, the news posts you write, and the partner arrangements you set up with Gallerists & Dealers.
High-volume sellers. If you make 200 or more sales of new or unused consumer products and $5,000 or more in gross revenue through the sites in a year, the bank or payment account, tax identification number, government identification or business registration, and contact details the INFORM Consumers Act requires (Terms of Service §7.7).
Messages and testimonials. Messages you send through the sites to organizers, artists, patrons and professionals; requests and quotes for Professional Services; testimonials you write after a hire, which appear on the professional's profile as the Terms of Service §9.3 describes.
Bookings and meetings. The consultations and meetings you book, who they are with and when (§7).
Purchases. For Art Purchases, tickets, application and booth fees, memberships and paid consultations: what you bought, the amount, the date and the payment identifiers our payment provider returns to us. We never receive or store card numbers (§8). For Art Purchases, the name and address the work ships to.
Support, reports and feedback. What you write to us in a support request or an infringement report. A bug report sent from the ladybug button also includes a picture of your screen taken the moment you open the report (password and card fields are left out, and you can remove the picture before sending), the page you were on, your recent clicks and page changes on the site, and the browser's technical warning and error messages. For an organizer, that picture can include other people's applications that were on screen.
Imported contacts. If you are an organization or an artist who imports a contact list to email, the names and addresses on it and, for an artist's list, your attestation that you have the right to email them.

2.2 What your organizers give us

Organizations can start an application for you, upload your images for you, record a reported age (for example, when a parent writes in), mark a show as open to students, and import contact lists that include you. An adult entering a student's work gives us the student's name, school and grade in the organizer's own questions (§10).

2.3 What we collect automatically

Visits. The pages you view and when, the page you came from, campaign tags in the address, your browser and device type, and your IP address. Our own page-view records keep the IP address and browser string with each view and feed our marketing automation and the organizers' show-traffic charts. On youth-show pages, and under the Marketing choice off (§5.4), we keep only a page count with no browser identifier, IP address or browser string.
Sign-in security. The IP address each sign-in to your account comes from, with the first and last time we saw it, to detect account takeover and abuse (§4.1 says who can look at it). When an IP address or email address is used for abuse, our own staff can block it from the sites; the block list holds the address, the reason and who added it, until the block is lifted (§12).
Email opens and clicks. Marketing email and newsletters carry an open pixel and click-tracking links that record the time, IP address and browser; conversation notifications, including jury results letters, carry a read receipt, which the organization that sent the message can also see (§4.1), never for anyone we know to be under 18 (§10.6). Receipts and legal notices carry none.
Assistant conversations. What you say to our AI assistants and what they answer, with a tag on each exchange recording whether it was on topic and whether your message read as positive, neutral or negative (§6).
Audit trails. A record of changes made to your account and applications; when a professional or assistant you authorized acts on your behalf, you can read who acted, for whom and what changed under Recent activity on your account.
Errors. When a page fails, we record the error, the page address, a technical description of what the browser was doing, your IP address, browser and account number. Email addresses and password-like values are removed from a browser error report before it is analyzed by AI or filed as a ticket with our code-hosting service; the page address and the first part of the error message go into the ticket as they are. Our server error logs are described in §6.2.

2.4 What partners give us

Payment provider. Transaction confirmations, payout records and, for sellers who connect a merchant account, the status of that account (§8).
Calendar providers. If you connect a calendar, only your busy and free times, your account email address and the connection tokens (§9).
Our former newsletter provider. The interest lists you were on, your subscription status, how engaged you were with its email (most, somewhat, least, or unrated), and its record of messages to you that bounced, imported from its exports in October 2026. We use these to set your starting email preferences and to protect our email delivery (§11.1).
A business-contact data provider. For organizations we approach about our services, our sales tools can look up publicly available business contact details (names, work email addresses, roles) for a company's domain from a business-contact data provider, which receives the domain and any work email address we ask it about. This concerns organizations' staff, not artists or patrons.

3. How we use it

Purpose	What we use	Legal basis for people in the EEA, UK and Switzerland
Run your account and the sites: sign-in, your profile, your applications, galleries, bookings, tickets and messages	Account, profile, application, listing, message and booking data	Contract
Run shows for organizations: deliver applications to the organizer and its jurors, results letters, booth and payment records	Application data, payment records	Contract
Take payments and pay sellers; keep tax, accounting and dispute records; verify high-volume sellers	Purchase and payout records; INFORM seller information	Contract; legal obligation
Ship Art Purchases	Ship-to name and address	Contract
Help you and answer questions, including with AI assistants and automatic support replies (§6)	What you write, your account context	Contract; legitimate interest in fast support
Keep the sites secure and prevent fraud and abuse	Sign-in IP history, the block list, audit trails, error reports, scanning of quote requests and quotes for contact details (Terms of Service §8.3); your birthdate, only alongside your email address or sign-in, to confirm who you are (§10.2)	Legitimate interest; legal obligation
Advisory authenticity check an organizer asks for on an application image (§6.2)	The image, its category and, optionally, the artist's prior works	Legitimate interest of the organizer and of artists in authentic work
Measure and improve the sites	Visit data under the Analytics choice (§5)	Consent
Marketing email and newsletters you have not turned off; advertising measurement and session replay under the Marketing choice (§5)	Email preferences, visit data	Consent
Tell you about changes to your account, the law or these documents	Account email	Contract; legal obligation
Protect children and teens (§10)	Birthdate and the age calculated from it	Legal obligation; legitimate interest

We receive no money for anyone's personal information. But the analytics, session-replay and advertising companies whose tags run on our sites (Google Analytics, Microsoft Clarity and the advertising pixel §5.1 and §5.2 describe) collect your IP address, online identifiers, your browser details and the pages you view directly from your browser; the analytics provider also receives your site searches and the account attributes §5.1 describes and, under the Marketing choice, the application and ticket checkout steps. Each of those companies may use what it collects for its own purposes under its own terms, for example to run and improve its own services and, for the session-replay and advertising providers, for advertising, and we do not control or know how it uses that data beyond our sites. California law can treat making personal information available to a company that way as a "sale" or as "sharing" for cross-context behavioral advertising even when no money changes hands, and we treat it that way whenever any of those tags runs, under either the Analytics or the Marketing choice: "Your Privacy Choices" and Global Privacy Control turn every one of them off (§5.3). We do not sell or share the personal information of anyone we know to be under 18. Organizations pay us to run their shows and collect entries, and when you apply to a show, buy a ticket, book a consultation or buy a work we give the organization, professional or seller you chose your contact details and what you submitted, because you directed us to (§4.1); that disclosure is neither a sale nor sharing, and no organization receives your browsing, analytics or session-replay data from us. We do not use personal information to make automated decisions that have legal or similarly significant effects on you. Our AI assistants change records only through an action that the person responsible approves, you for your own account and an organizer or a member of our staff for the records they manage (§6.1, §6.2), one at a time or for a record or a kind of change for 30 minutes; ArtBot's replies in a show's message threads, the automatic replies from our support inboxes, the bug report ArtBot files for you, which our support team reads, when it notices something on the site is not working, and the draft help articles and news posts an assistant prepares, which our staff review before anything is published, are made without a separate approval (§6.1, §6.2).

4. Who we share it with

4.1 People and organizations on the sites

Organizations and their jurors. Organizations pay us to run their shows and to collect entries for them, and they receive what you submit. When you apply to a show, the organization receives your application: your name, email address, postal address and phone number, your images, your statement, and your answers to its questions; its jurors see your images, your statement and the answers the organizer chooses to show them. The organization keeps its own copy of what it received, under its own rules, and uses it for that show. We give the organization no behavioral information: it does not receive your browsing history, your visits to other shows, analytics data, session recordings or advertising identifiers from us; the show-traffic chart it sees counts visits to its own show's pages without naming anyone. The organization can also see whether and when you opened the results letters and other messages it sends you through the sites. Where a show offers our AI assistant in its message threads, every message you send in a thread with that show's organizers is also sent to the assistant, its replies are posted into that thread, so the organizers see them, and your message reaches our AI service provider (§6.2); a conversation with the assistant elsewhere on the site is not shown to them. Only our own staff can look up an account's sign-in IP history, to investigate account takeover, fraud and abuse.
Other people on the sites. What you choose to publish is public: your profile, your gallery and its listings, your news posts, your name on a show's roster when the organizer turns the roster on, and testimonials shown on a professional's profile. Messages go to the person you write to.
Infringement notices. When we act on a copyright or trademark notice, we send a copy, including the reporter's name and contact details, to the person who posted the material; a counter-notice, including its sender's name, address and telephone number, goes to the reporter (IP Infringement Policy §6, §7).
Professionals acting for you. When you authorize a professional (for example, Gallerists & Dealers managing your gallery, or an assistant you add) to act on your account, they see and change only what the grant names (Terms of Service §8.1), and every action is logged under both your name and theirs.
Patrons, sellers and shipping. When you buy a work, the seller receives your name and the shipping address so they can pack and ship it. When you sell, the patron sees your gallery name and your customer-service contact (Terms of Service §7.7); if your sales through the sites reach $20,000 in a year, the law requires us to show patrons your name, physical address and contact information (Terms of Service §7.7). Ticket holders' names, email addresses and phone numbers go to the organization running the event for admission; the organization receives a ticket holder's email address for its own marketing only when the box for that organization's marketing is ticked at checkout (§8.3).
Other sites you reach from ours. Links to artists' websites, organizations' sites and social accounts take you to sites with their own privacy practices.

4.2 Service providers who work for us

We use companies that process personal information on our behalf and under our instructions, by category: hosting and databases; email and text-message delivery; email hosting for our own inboxes (support@, arts@ and the company inboxes of our team, where your mail to us sits); sign-in; image storage and delivery; payment processing (also an independent party, §8); shipping labels; an AI service provider (§6); a tag manager and a server-side tag server, both in our own accounts (§5); a business-contact data provider for organizations we approach (§2.4); a code-hosting service that receives error tickets with the page address and technical details; and our own workflow and monitoring servers. Our former newsletter provider holds the exports we imported and then sends nothing for us. The analytics, session-replay and advertising providers under §5 are not on this list: they collect from your browser directly and use what they collect for their own purposes as well as ours, under every choice, so §4.3 lists them as independent parties.

4.3 Independent parties

Your payment provider. When you pay or get paid, PayPal collects and uses your information under its own privacy statement (§8).
Your browser maker and your calendar or email provider, when you dictate, use read-aloud, connect a calendar or link a company inbox (§7, §9).
Your browser's push service (Apple, Google or Mozilla), which delivers the browser notifications you allowed.
Google's public address-discovery server, which receives your device's IP address when a video meeting starts (§7.1).
Font and image services (Google Fonts, CDNFonts, Unsplash, placehold.co), which receive your IP address, your browser details and which of our sites you are on when certain pages load (§5.2).
Analytics, session-replay and advertising companies (§5.2 names them), through the tags described in §5 and the Cookie Policy, under the choices you make there. Each collects from your browser directly and uses what it collects for its own purposes under its own privacy terms, so none of them is our service provider; we treat what they collect as sold or shared (§3), and "Your Privacy Choices" and Global Privacy Control turn every one of them off (§5.3).
Social networks, when we publish marketing posts there. A post may feature an artist's work and name only under the permission described in the Terms of Service §5.8 and in §11.2 of this policy; a person's portrait, voice or likeness appears only with a signed release, and never a student's name or work without a release signed by a parent or guardian.

4.4 Law, safety and business changes

We share information when the law requires it, to respond to a court order or lawful request, to protect the rights, safety and property of our users, the public or ourselves, to investigate fraud or abuse, and as part of a merger, acquisition, financing or sale of assets, in which case this policy continues to apply to your information until it is changed under §14.

5. Cookies and tracking

The Cookie Policy governs cookies and similar technologies on the sites and lists every cookie and browser storage item, who sets it, why and for how long. This section tells you what tracking happens and what choices you have; once the Cookie Policy is published at /legal/cookie-policy, its list is the record of what runs where the two disagree, and until then this section is.

5.1 Three choices

The sites group cookies and tags into three choices:

Needed to run the site (always on): sign-in session cookies, your privacy choice itself, the age-screen flag (§10.3), payment provider cookies while you pay, drafts, checkout continuity and crash recovery, web push keys after you allow notifications, and your appearance and assistant-voice preferences.
Measuring how the site is used (Analytics): page-view analytics by the analytics provider with its advertising features off (after you sign in, your account's numeric id and a few account attributes are included, such as a patron-status and recency label, which today is a fixed default for everyone, so your visits from different devices count as one person), and site searches and their terms. The analytics provider uses what it collects for its own purposes too (§5.2), so this choice is also switched off by "Your Privacy Choices" and Global Privacy Control.
Ads, ad measurement and session replay (Marketing): our own identified visit beacon, which keeps a per-browser identifier in your browser and feeds our marketing automation; session replay by a provider that also uses what it collects for its own purposes, including advertising, with typed and on-screen text masked, so we can see where pages confuse people; the application and ticket checkout steps (which show was entered or ticketed, the fee or amount, and an order number) sent to our analytics provider so it can measure conversions and build advertising audiences of people who viewed tickets or started an application; contact-sales and help visits recorded as lead events; a server-side tag server run for us on Google Cloud, which receives the same events with your IP address and advertising click identifiers and forwards them only to the providers this choice covers; and any advertising pixel listed in the Cookie Policy, which receives the same checkout steps and your page views so that its operator can measure our advertising and build audiences of people like our visitors on its own platform.

5.2 Who collects what, over time and across sites

None of the companies behind these tags is our service provider: each collects from your browser directly and uses what it collects for its own purposes under its own terms, and we treat what it collects as sold or shared under either choice (§3). Under the Analytics choice, the analytics provider receives your IP address, the page address, your browser details, your site searches and their terms and, after you sign in, your account's numeric id and the account attributes §5.1 describes, and sets its own cookies. We keep its advertising features, its cross-device signals from its users' accounts and its data-sharing settings off, so it builds no advertising audience for us from this choice alone, and our account id is what lets your devices count as one person; Google still uses the data under its own terms, including to run and improve its own services, and we do not control that use. Under the Marketing choice, the analytics, session-replay and advertising providers receive your IP address, the page address and your browser details; the analytics provider also receives the checkout steps §5.1 lists, with its advertising features on; the session-replay provider records your visit, with typed and on-screen text masked; the advertising pixel receives your page views and the checkout steps; they set their own cookies, can collect information about your activity over time and across other sites that use their services, and use it for their own purposes, including advertising. "Your Privacy Choices" and Global Privacy Control turn every one of these tags off, and the server-side tag server then receives nothing to forward (§5.3). The analytics provider is Google Analytics, run by Google; how Google uses data from sites that use its services is explained at policies.google.com/technologies/partner-sites. Session replay is Microsoft Clarity, run by Microsoft, which also uses what it collects for Microsoft Advertising; see the Microsoft Privacy Statement at microsoft.com/privacy/privacystatement. The advertising pixel is the Meta Pixel, run by Meta Platforms, which uses what it collects under the Meta Business Tools Terms and its own privacy policy at facebook.com/privacy/policy. Separately from any choice, the organization, juror and sign-in sites load their typeface from CDNFonts (fonts.cdnfonts.com), our staff site loads Google Fonts, and a few help, client and organizer pages load images from Unsplash or placehold.co; each of those services receives your IP address, your browser details and which of our sites you are on when the page loads, and nothing else from us. We never load any of the analytics, session-replay or advertising tags on a page whose address carries an email token (for example, an unsubscribe link), on a show's pages that the organizer has marked open to students, or for anyone we know to be under 18 (§10).

5.3 Your choices, Global Privacy Control and Do Not Track

Where you are decides the starting point. We locate your connection by its network address. Visitors whose connection we locate in the EEA, UK or Switzerland see a banner before anything beyond "needed to run the site" loads, and nothing in the Analytics or Marketing choices runs until they turn it on. Visitors whose connection we locate in California start with Analytics on and Marketing off, and nothing in the Marketing choice, including session replay, runs until they turn it on. Everyone else starts with Analytics and Marketing on. On the banner, declining is as prominent and takes as few steps as accepting. Anyone, anywhere, can turn either choice off at any time.
"Your Privacy Choices" in the footer, shown with the opt-out icon, opens a page that explains your right to opt out of the sale or sharing of your personal information and how we use sensitive personal information (§11.6), and lets you turn Analytics and Marketing off, which stops every analytics, session-replay and advertising tag and the server-side forward. A signed-in person's choice follows them to every device.
Global Privacy Control. If your browser sends the Global Privacy Control signal, we treat it as an opt-out of sale and sharing on every visit, in every region: the Analytics and Marketing choices are turned off and shown as honored, so the analytics, session-replay and advertising tags do not run and the server-side tag server forwards nothing, and no pop-up appears. The signal applies on the device that sends it; a signed-in person's account records the opt-out so it applies on their other devices too.
Do Not Track. We do not change the sites' behavior in response to the older "Do Not Track" browser setting, because browsers and sites never agreed what it means; Global Privacy Control is the signal we honor.
Browser settings. You can also block or delete cookies in your browser. Blocking the cookies needed to run the site will sign you out.

5.4 Our own tracking

Our own servers record page views (§2.3) and marketing email opens and clicks (§2.3). These feed our marketing automation and the show-traffic charts organizers see for their own shows. Under the Marketing choice off, or Global Privacy Control, the page-view record keeps only an unidentified page count. Artists can place a tracking pixel from their own gallery on their own websites; on those sites the artist is responsible for telling their visitors.

5.5 Embedded videos

Videos on our sites, including our own "How to apply" and help videos and the videos organizers and artists embed in show pages, news posts and newsletters, are embedded from YouTube in its privacy-enhanced mode, so viewing is not used to personalize your YouTube experience. On a show's apply step, on every page of a show marked open to students, and for visitors in the EEA, UK and Switzerland on every page, a video loads only when you open it. Elsewhere, on our help pages and wherever an organizer or artist has embedded a video, the video frame loads with the page, so YouTube receives your IP address and the page you are on as soon as the page opens. YouTube's own privacy policy governs what it collects when you play a video.

6. AI features

6.1 What the assistants are

Our sites offer AI assistants: ArtBot for artists (help with applications, uploads, requirements, deadlines and results), EventBot for organizers (help running their shows), a help assistant that answers typed questions from our help articles, and a sales assistant our own staff use. Every assistant is presented as AI: ArtBot introduces itself as an AI assistant, not a human, when a conversation starts, and every assistant is built to say it is AI when asked and is not designed to pretend to be a person. The assistants help with paperwork and questions. They are built never to judge the quality or merit of anyone's artwork or to decide who gets in; the one exception is the advisory image check in §6.2, which an organizer asks for and which decides nothing by itself. Apart from ArtBot's replies in a show's message threads, the automatic replies from our support inboxes (§6.2), the bug report ArtBot files for you, which our support team reads, when it notices something on the site is not working, and the draft help articles and news posts an assistant prepares for our staff to review before anything is published (§6.2), the assistants never change a record on their own: when an assistant proposes a change (an application edit, a message, an upload), nothing happens until a person approves that action on a card, and a change made under an approval already given is shown on a card as it runs. Some approvals cover more than one change: on a card that says so, one approval lets the assistant make further changes to that same record in the same conversation for 30 minutes without asking the person again, and each change is shown on a card in the conversation as it runs; on other cards the person can choose "Allow" for one change or "Allow for this task", which lets the same kind of change run without asking again in the same conversation for 30 minutes. Within an approval that covers more than one change, anything that sends email, starts a campaign, enrolls people or removes something still gets its own card.

6.2 What the assistants see, and who sees the conversation

ArtBot sees your message and, through the tools it calls, your own events, requirements, images, application checks, read-back statements and recent activity. Where a show offers ArtBot in its message threads, every message you send in a thread with that show's organizers is also sent to ArtBot, and so to our AI service provider, together with your earlier exchanges with ArtBot in that thread; ArtBot answers when it can help and stays silent when the message is for the organizer, its replies are posted into that thread, so those organizers see them, and the assistant says so when it introduces itself. A conversation with ArtBot on the home page or elsewhere on the site is not shown to organizers.
EventBot helps organizers, so it sees the applications to their show: applicant names, business names, email addresses, city, state and country, statements, admin notes, payment and jury status, and every custom question with the applicant's answer. On a show marked open to students, EventBot is given entrants as numbers only, with no names, contact details or school answers (§10).
The help assistant sees your typed question and the matching help articles.
The sales assistant sees sales leads and organization contacts, who are adults.
A short classifier checks each assistant message so the assistants stay on topic, and records whether your latest message read as positive, neutral or negative; our staff use that tag to spot conversations going badly.
Image checks. When an organizer asks for an advisory authenticity check on an application image, the image's public address, its category and, optionally, the artist's prior works go to our AI service provider, which returns estimates of whether the image may be AI-generated, mass-produced or a stock photo and how it compares with the artist's earlier work; the result is advisory, is shown to organizers only, and decides nothing by itself. On a show marked open to students, image checks run too: the entering adult and the organizer are told, and the student's artwork image goes to the AI service provider for that check.
Other AI uses. Writing search-engine descriptions for a professional's news post from its title and body; drafting our newsroom from facts about shows and newly published galleries, including a gallery's public name, which for an artist we do only under the Marketing use setting in §11.2; and, behind the scenes, reading our own server error logs, which can contain account numbers and email addresses, and browser error reports, from which email addresses and password-like values are stripped first, to propose fixes.
Support email. Email you send to support@jurying.net (artists and account holders) or arts@jurying.net (organizers, jurors and show staff) may be answered first by AI, through our own workflow server. For arts@, the AI is also given your contact record and your applications so it can answer about them; for both inboxes it is given earlier emails between you and our team in any linked company inbox (§9.2), so it does not answer a conversation a person is already handling. When no one on our team has already written in the conversation, the AI's answer is sent automatically, without a person reviewing it first: at once for arts@, and after 12 hours for support@. Every automatic answer says it is automated, and replying to it reaches a person; our team monitors each inbox on business days (see the Customer Support Commitment). The auto-responder cannot tell a sender's age, so an email from or about a student may receive an automatic reply.
Bug reports and help-article drafts. When ArtBot notices something on the site is not working, it files a bug report for you that contains its description of the problem, your message and the page you were on, with no screen picture; our support team reads it. When an assistant cannot answer a question, it may draft a help article from that question for our staff to review, and nothing is published until they do.
Staff tools. Our staff, signed in with company accounts only, can look up artists, contacts, conversations and applications, and act on them (for example, change an application's status or send a message), through an AI tool connected to our server, only for the purposes the Terms of Service §9.1 lists: support you or the other person asked for, a report or dispute, fraud, abuse or security, a problem you reported, improving our help articles from assistant conversations, or a legal requirement. Each action is one a staff member asked for, and the tool logs every request it makes. Our support and product staff can also read assistant conversations for those purposes, including to improve our help articles and to investigate misuse.

6.3 The AI service provider and your content

All of the above runs on one AI service provider under commercial terms that forbid it to train its models on our customers' content. Under the provider's standard commercial retention, it deletes what we send it and what it returns within 30 days, unless it must keep something longer to enforce its usage policy or to comply with the law: content it flags as violating its usage policy may be kept for up to 2 years, and the safety scores it gives that content for up to 7 years. We keep our own copy of assistant conversations for the period in §12.

6.4 AI and children

AI assistants are off for anyone we know to be under 18. We do not send student entrants' names, contact details, school details or artwork to an outside AI service, with these exceptions we want you to know about: a member of our staff may look up a youth-show entry with our internal AI tool to answer a support request; an email an adult sends to our support inboxes about a student may be read and answered by the auto-responder (§6.2); and image checks: on a show marked open to students, the entering adult and the organizer are told that image checks run, and the student's artwork image goes to the AI service provider for that check (§6.2). Every assistant on our sites is presented as AI (§6.1), and people on our team answer on business days. §10 has the rest of our children's statement.

7. Video meetings, dictation and read-aloud

7.1 Video meetings

A confirmed booking between two people (for example, a patron and an artist, or an artist and their Gallerists & Dealers partner or an organization's representative) can open a one-to-one video meeting inside the sites. The meeting is direct between the two devices: our servers carry only the setup messages and, when a direct connection fails, relay the picture and sound through our own relay servers without storing anything. To connect, each device asks an address-discovery server for its own public address, using our own server and a public one run by Google, which both receive your device's IP address when a call starts. Because the connection is direct, the other participant's device can learn your IP address during the call. We do not record meetings, we do not transcribe them, and no picture or sound touches our servers except the relay. We keep the booking (who, when, with whom); our call server's logs note when a call starts and ends.

7.2 Dictation

The microphone button in the assistants and the composer uses your browser's own speech recognition. Your browser maker (Google for Chrome, Apple for Safari) turns the audio into text under its own privacy terms; we receive only the text you then send. Where a browser has no speech recognition, the button is not shown. Email and web addresses are never taken from speech.

7.3 Read-aloud

Replies can be read aloud by your browser's speech synthesis. Your browser offers the voices installed on your device and, in Chrome and Edge, higher-quality online voices run by Google or Microsoft. Online voices are on unless you turn them off; when one is used, the words being read are sent to that browser maker. Turning online voices off in the Conversation voice settings keeps every word on your device. The choice is saved in your browser, not your account. For anyone we know to be under 18, only device voices and on-device dictation are offered, never online voices or an online speech service.

8. Payments and shipping

8.1 Paying

Every payment on the sites (Art Purchases, tickets, application and booth fees, memberships, paid consultations) is processed by PayPal, except that a ticket payment may instead be processed by Stripe when we offer it (Terms of Service §7.1). The payment provider collects your payment details directly and is responsible for them under its own privacy statement; we never see or store card numbers. We receive the transaction identifier, amount, status and the item it was for, together with the payer details the payment provider includes in its payment confirmation under its own privacy statement. For application, booth and ticket payments, we pass the payment provider the amount, the item, and reference numbers that tie the payment to your application or order.

8.2 Selling and getting paid

Artists, organizations and Gallerists & Dealers who sell through the sites connect their own PayPal merchant account. Before you connect, we show you what PayPal will share with us (your merchant account's status and identifiers, so PayPal can pay you directly and we can show your payout records) and the Seller Terms, and ask you to agree; the connection does not start until you do. Payouts and refunds are recorded with the order; the records are kept for tax, accounting and dispute purposes (§12).

8.3 Tickets

Tickets belong to the account that buys them: the name and email on every ticket come from that account, and no other person's details are typed in. If your account has no phone number, the ticket page asks for one once and keeps it on your account for support and sign-in (§2.1). The organization running the event receives the ticket holder's name, email address and phone number for admission and check-in, and a record of each scan at the door. Two boxes at checkout let you choose marketing email from the organization and from us. For ticket holders in the United States both boxes start checked, and you untick a box to decline; elsewhere they start unchecked. For anyone we know to be under 18, both boxes are hidden and forced off (§10.6). California customers may ask us once a year, at the address in §15, for the list of third parties that received their information for direct marketing in the prior year, as California's "Shine the Light" law provides.

8.4 Shipping

For Art Purchases that ship, your name and shipping address go to the seller who packs the work and to our shipping-label service, which passes them to the carrier it selects. The address is checked for deliverability before the label is bought.

8.5 Text messages

Our staff may send you a text message about your own account, an application, a payment or an order, through a text-message delivery service, to the phone number on your account. We send no automatic or marketing text messages. Message and data rates may apply. Reply STOP to any of our texts, or ask us through Contact Support or the address in §15, and we stop texting you within 10 business days; we may send one text confirming that you have opted out. Your choice is recorded on your account and checked before every send. We never use the phone number on your applications for marketing texts. We would add marketing text messages only after a separate consent review, and only after updating this policy first.

9. Calendar and email connections

9.1 Calendar connection

Anyone who takes bookings on the sites (artists, professionals and organization staff) can connect a Google or Microsoft calendar so the sites avoid double-booking. We ask Google for free/busy information and your account email (to label the connection); we ask Microsoft for offline access, read access to your calendar and your basic profile, and use it only to read when you are busy. We store only the busy intervals we need for scheduling, the account email and the connection tokens; we never read or store event titles, attendees or locations. There is no disconnect button in your account yet. To disconnect, remove Juried Art Services from your Google or Microsoft account's connected apps, which stops our access, and ask us through Contact Support to delete the stored connection and its tokens; we do that within the time §11.3 states.

Juried Art Services' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In our own words: we use Google and Microsoft calendar data only to provide the scheduling feature you asked for, we never transfer it except to provide that feature, we never use it for advertising, and no person reads it except to fix a problem you report, for security, or as the law requires.

9.2 Company inbox connection (staff only)

Members of our team can link their company Gmail inbox to our systems. We copy the messages in a linked inbox into our systems so that sales follow-ups and support stay in one place: our sales tools read replies from sales leads, mark them as read and send follow-ups through the linked inbox, and our automatic support replies can see that a person is already handling a conversation (§6.2). If you write to a member of our team at their company address, your email is copied in the same way. The tokens are stored encrypted. This connection is for our staff's company accounts only; we never connect to an artist's, organizer's or patron's inbox.

9.3 Email we send

We send from addresses on jurying.net: receipts and payment notices from payment@, system notices, support, the calls-for-entry digest and the newsletter digests from support@, conversation notifications from noreply@, organization campaigns from news@, and sales outreach from outreach@ or a sales representative's own linked inbox. Every marketing email, including a campaign an organization or artist sends through the sites, carries our postal address and a working unsubscribe link (§11.1); the organization or artist is the sender of its own campaign and must include its own postal address in it (Terms of Service §5.11).

10. Children and teens

This section is our children's privacy notice. It states what we collect from children and teens, who receives it, how long we keep it, what parents can do, and how our AI assistants treat minors.

10.1 Who may have an account

16 is the minimum age to create an account, matching our sign-in provider's terms and the under-16 lines in state and EU law, and an answer under it stops sign-up before any account is created (§10.3). Nobody under 13 takes part at all: a child under 13 has no account and cannot be entered in a show, even through an adult's account. We serve a general audience; organizations also run youth shows, so we design for both.

10.2 The age question

Every new account answers one neutral question, the date you were born, once, on our own sign-up page, before anything you type is sent to our sign-in provider and before Google sign-in starts. We ask everyone who signs up. We never pre-fill an answer, and we never say beforehand what any answer leads to. We keep the full birthdate on your profile and calculate your exact age from it. Organizers never see your birthdate; we may use it alongside, never instead of, your account's email address or sign-in to confirm your identity. Otherwise your age is used only to apply the protections in this section; they lift when we know the person has turned 18.

10.3 An answer under the minimum age

If the answer is under the minimum age in §10.1, sign-up stops on our page: no account is created, nothing about the person reaches the sign-in provider, nothing is kept except a daily count, and the screen explains that artists aged 13 to 15 take part through a parent, guardian or teacher who enters the work from their own account. A flag cookie holding no personal data then stops new sign-ups on that browser for 24 hours, on both the sign-in and the account sites, and the screen tells parents, guardians and teachers to sign up on their own device.

10.4 Entering a student's work

On a show the organizer has marked open to students, the entry form first asks "Who is entering this work?". A parent, guardian or teacher chooses "I'm a parent, guardian or teacher entering for a student", confirms one statement ("I'm this student's parent or guardian, or their teacher with the parent's or guardian's permission to enter their work"), and fills in the organizer's own form, where the student's name, school and grade are the organizer's questions. The student provides nothing online. The entry belongs to the adult's account; receipts, results and organizer messages go to the adult; the organizer sees "Student entrant, entered by a parent, guardian or teacher" and never an age. A student aged 13 to 15 enters a show only this way, from a parent's, guardian's or teacher's own account; nobody may enter work for a child under 13.

10.5 What we collect from children, and who receives it

From a child under 13 we collect nothing: nobody under 13 takes part, even through an adult's account. From a teen with their own account we collect what §2 lists for the features they use, with the limits below. Information about a student entrant (name, school, grade, artwork) goes to the organization running the show and its jurors for that show, and to no third party except the service providers who store and deliver it for us (§4.2). It never goes to an advertising, analytics or session-replay company, and it reaches our AI service provider only in the cases §6.4 names. The organization may name accepted student entrants in its own program and promotion under its own rules. A 16- or 17-year-old buying a ticket whose account has no phone number is asked for one once. A minor's phone number is kept on their own account and used only for support, for sign-in and to pass to the organization running the event, never for marketing, advertising or AI. On any show's pages that are marked open to students, we collect no information from visitors except the technical data every web server receives (IP address and browser details in our hosting provider's logs, and an anonymous page count); we use it only to deliver and secure the page, to fix errors and to count visits, never to contact anyone, build a profile or serve advertising, and the logs are deleted in the ordinary course of our log rotation.

10.6 What is switched off for minors

On a youth show's pages, for everyone, and everywhere for anyone we know to be under 18 (including from an age an organizer recorded, §2.2): no advertising pixels, no analytics identifiers, no session replay, no page-view beacon with an identifier (page counts only); no email tracking; no public profile, roster listing or showcase on our own pages; no selling, no Professional Services roles, no video meetings, no testimonials; messaging only with the organizer about their entry; and, for anyone we know to be under 18, AI assistants off, only device voices and on-device dictation (§7.3), service email plus the calls-for-entry digest only if they turn it on themselves, sent without an open pixel or tracked links, and the two marketing boxes at ticket checkout hidden and forced off. No paid campaign of ours targets anyone under 18, and no youth-show page is ever an advertising destination.

10.7 Existing accounts

Accounts that applied to a youth show before this policy took effect are treated as minors until the person answers the age question once, at their next sign-in. An answer of 18 or over lifts the protections; an answer under 18 keeps them. An answer under the minimum age in §10.1 means the account cannot keep signing in as before: we delete the sign-in account at once, keep the past entries and results readable by the organizer that received them and by the adult who takes over the entries, and email the address on file once to explain the adult path for students aged 13 to 15, because our sign-in provider's terms forbid us to keep a known under-16 user's information with it. If the answer is under 13, we also delete the personal information the child gave us through that account within 30 days, except what a parent or guardian, verified by replying from the guardian contact on the organizer's form, asks us to keep, and the organizer keeps the copy it already received. Every other existing account is never asked.

10.8 Retention of children's and students' data

This is our written retention policy for information collected from or about children and teens.

Information	Why we collect it	Kept	Deleted by
Birthdate, on the profile	To calculate the exact age and apply these protections; alongside the account's email or sign-in, to confirm identity	For the life of the account	Account deletion
A blocked sign-up under the minimum age	To honor the block	No account is created; only a daily count remains	Immediate
The age-screen flag cookie	To stop a retry on the same browser	The period in §10.3	Browser expiry
Youth-show school, grade and guardian answers	To run the show	13 months after the show ends	A scheduled purge
Youth-show artwork, application and results records	Jurying, results, the adult's own history	While the adult keeps the account, or until a deletion request	The data-request process (§11)
The attestation that an adult entered the work	To show who entered and on what basis	As long as the application	With the application
Organizer-assistant conversation text about a youth show	The organizer's own conversation	90 days, then the text is blanked	A scheduled purge
Bug-report screenshots	Fixing the bug	90 days after the report is closed	A scheduled purge
Behavioral events and email tracking for a minor	—	None created	—
Assistant conversation text for a minor's own account	The minor's own conversation, only if assistants are on for them	None created while assistants are off for them (§10.6); otherwise 12 months, then the text is blanked (§12)	A scheduled purge

Youth-show answers from past years are reviewed once and purged within 90 days of publication, after the organizations concerned are told.

10.9 Parents' and guardians' rights

A parent or guardian can review what we hold about their child's entry, ask us to correct or delete it, and refuse any further collection or use. Ask through §11.3; we confirm the relationship by having the adult sign in with the account that entered the work, or by replying from the guardian contact recorded in the organizer's form. Deletion removes the entry's answers, images and messages and, if the student had an account, the sign-in account; we keep payment records the law requires and a note that the deletion was done. The organization keeps any copy it already downloaded or exported for its show, and our reply says so. Operators of this notice: Juried Art Services, LLC, PO Box 3477, Palm Beach, FL 33480, contact in §15.

10.10 Teens and the law

We do not show targeted advertising to anyone we know to be under 18, we do not sell their personal information, use it for targeted advertising or "share" it for cross-context advertising in the sense of the California law, and we do not profile them. (The organization running a show and its jurors receive a student entrant's information as §10.5 says; that is not "sharing" in that sense.) Where a state law gives teens or their parents further rights, we honor them through §11.

11. Your choices and rights

11.1 Email and notifications

Account → Notifications & privacy shows each email setting in words with one action beside it: your calls-for-entry digest and its criteria, newsletters from organizations and from artists and professionals, platform updates, and "All marketing email" with a Pause. Jury results, receipts and messages about your account always send.
Every marketing email has an unsubscribe link and a preferences link; the one-click unsubscribe also works from your mail program's own Unsubscribe button. Unsubscribes are per channel: an unsubscribe stops the kind of email it came with, such as the calls-for-entry digest, a newsletter or platform updates, and "All marketing email" on the page above controls all of them at once. We act on an unsubscribe as soon as you make it, and always within 10 business days; we never sell or give an opted-out address to anyone except the service providers who need it to keep you from being emailed.
Where your preferences came from. If you were on the lists of our former newsletter provider, the lists you chose there were imported in October 2026 and added to any preferences you already had with us, together with your subscription status (§2.4). You can change any of it at the page above.
Browser push notifications are off until you turn them on, and you turn them off in the same place or in your browser. Text messages from our staff about your own account stop when you reply STOP or ask us (§8.5).

11.2 Marketing use of your work and name

Show organizers may display accepted artists on their show's page, and applying to a show shows your work to that organizer and its jurors. Whether we may feature your work and name in our own marketing (newsletters, social posts, press) is controlled by a "Marketing use" setting at Account → Notifications & privacy, separate from the show's own page. You grant us a license to feature Your Content, with your name as the credit, in our own newsletters, blog posts, social posts, press releases and other promotion of the Services; the Marketing use setting in your account's notification and privacy settings turns this off at any time, we check it before featuring anyone, and once you turn it off you are removed from scheduled posts going forward. We never feature a student's name or work in marketing without a release signed by a parent or guardian.

11.3 Seeing, correcting, downloading and deleting your information

Whoever you are and wherever you live, you can ask us to:

tell you what personal information we hold about you and give you a copy in a portable format (JSON and CSV plus your uploaded files);
correct it;
delete it;
stop sharing it with third parties for their own marketing, and stop any sale or sharing for cross-context advertising (we honor Global Privacy Control automatically, §5.3);
stop marketing email (§11.1);
not be treated differently for exercising these rights.

If you are in the EEA, the UK or Switzerland: you may also ask us to restrict processing, and you may object at any time to processing we base on legitimate interests, including fraud prevention, support and the advisory image check; we stop unless we have compelling grounds. Where we rely on consent (the Analytics and Marketing choices, marketing email), you can withdraw it at any time in "Your Privacy Choices" or at Account → Notifications & privacy, without affecting earlier processing. Our processing of information about people in the EEA and the UK is occasional and does not involve special categories at scale, so we have not appointed a representative there (GDPR Art. 27(2)); write to us directly at §15.

How to ask. Use the Contact Support form and choose "Privacy request", or email the privacy address in §15. A parent or guardian asks the same way (§10.9). An authorized agent can ask for you with your signed permission.

How we verify. A request made while signed in is verified by your session. A request by email gets a confirmation link to the address on file; a deletion or an export of your messages also needs a signed-in confirmation where an account exists. We never verify an opt-out.

How fast. We acknowledge every request within 2 business days and complete it within 30 calendar days, telling you within that time if a complex request needs longer and why. That meets the one month the GDPR allows and the 45 days most US state privacy laws allow. If you disagree with our answer, ask for a second review; Paul Fisher or Jeffrey Gilbert answers within 45 days, and if we deny your appeal, our reply tells you how to contact your state's attorney general to complain. People in the EEA, UK and Switzerland can also complain to their data protection authority.

What deletion means. A deletion request under this section deletes or de-identifies your information within the time stated above, except the records we must keep, listed below. We anonymize the identity fields on records that other people's records depend on: your applications stay in the organizer's show records with your name and contact details removed, and your sales stay in the patron's and seller's records the same way. We delete your tracking and assistant data and then delete your sign-in account. The text of the messages you sent and the files you uploaded are deleted, or de-identified where another person's record depends on them, except a file an open infringement notice requires us to keep. Testimonials you wrote stay with your name removed, unless you ask us to remove them. We keep what the law or an open matter requires: tax, accounting and payment records, open disputes and infringement notices, fraud and security audit records including the sign-in IP history, pseudonymized, and a suppression entry so your opted-out email address stays opted out; the records in §12 (your privacy-request record, your consent record and your Terms acceptance record) run out on their own schedule, as do copies in backups and data held by our analytics and session-replay providers. Our reply lists each kept item and why. Organizations keep any copies of your applications they downloaded or exported for their shows. Account deletion is by request, not a button.

Closing an account is not deleting it. When an account is closed, its messages, files and profile are hidden everywhere on the sites, and they come back if the account is restored; closing an account does not delete them. To have them deleted, make a deletion request as this section describes.

11.4 Rights under US state privacy laws

Several states give their residents rights to know, access, correct, delete and port their personal information, to opt out of its sale, of sharing for cross-context advertising, of targeted advertising and of profiling, and to appeal a refusal. We extend every one of these rights to everyone through §11.3, regardless of state. We receive no money for personal information, but we treat what the analytics, session-replay and advertising providers collect on our sites as a "sale" or "sharing" under those laws, as §3 explains, and "Your Privacy Choices" and Global Privacy Control turn it off (§5.3). What we give an organization, seller or professional at your direction (§4.1) is neither. For California residents: §8.3 says how we handle disclosure of customer information to a third party for that party's own direct marketing under the "Shine the Light" law, and §11.6 is our California notice. Residents of Colorado, Connecticut, New York, Florida and Texas who are minors, and their parents, have the protections in §10.

11.5 Your other controls

Privacy choices and cookies: "Your Privacy Choices" in the footer (§5.3).
Assistants: turn online voices off or choose a device voice in the Conversation voice settings (§7.3); close the assistant to stop a conversation; ask us to delete past conversations.
Professionals and assistants acting for you: see and revoke every grant at Account → Notifications & privacy; the log of what they did is on the same page under Recent activity.
Calendar connection: remove Juried Art Services from your Google or Microsoft account's connected apps and ask us to delete the stored connection (§9.1).
Text messages: reply STOP to any text, or ask us (§8.5).
Public profile, gallery and news: unpublish them yourself at any time.
Video meetings: the sites offer no recording; report a problem with a meeting through Contact Support.

11.6 California notice

This section is our notice under the California Consumer Privacy Act, which may apply to us; we give everyone its rights and disclosures, and we refresh this notice at least every 12 months. You can make a request by the Contact Support form or by email (§11.3), and you will not be discriminated against for doing so. The table lists the categories of personal information we collected in the 12 months before this policy's effective date, their sources, the purposes, the recipients we disclosed them to for a business purpose, whether they were sold or shared in that period, whether they are sold or shared from October 27, 2026, and how long we keep each; a category we collect only from October 27, 2026 says so in its row. In those 12 months, the categories marked "sold or shared" below were made available, through tags on our pages, to Google Analytics, Microsoft Clarity (session replay) and the Meta Pixel, companies that may use what they collected for their own purposes; we received no money for any of it, and we treat that availability as a sale or sharing. From October 27, 2026 those tags run only under the choices in §5, every one of them is switched off by "Your Privacy Choices" and Global Privacy Control, none runs on youth-show pages or for anyone we know to be under 18, and we do not sell or share the personal information of anyone we know to be under 18. What you direct us to give the organizations, sellers and professionals you deal with (§4.1) is listed in its own part of the "Disclosed to" column and is neither a sale nor sharing. It also serves as our notice at collection: a link to it appears in the footer of every page and beside the submit button on sign-up and the age question, application forms, ticket and Art Purchase checkout, Contact Support, the bug reporter and the newsletter sign-up.

To opt out of the sale or sharing of your personal information, use "Your Privacy Choices" in the footer of every page or send Global Privacy Control (§5.3). The full Privacy Policy is at /legal/privacy-policy.

Category	Examples from §2	Sources	Purposes (§3)	Disclosed to: service providers, for a business purpose; and, at your direction, the people and organizations you deal with (§4.1)	Sold or shared in the 12 months before October 27, 2026	Sold or shared from October 27, 2026	Kept (§12)
Identifiers	Name, email address, postal address, phone number, account number, IP address, device and browser identifiers	You; your organizers; automatically; our sign-in and payment providers; our former newsletter provider; a business-contact data provider (§2.4)	Run your account and shows; payments; security; marketing	Service providers: hosting, email, sign-in, payment, shipping, image and AI providers; the tag manager and the server-side tag server. At your direction: the organization whose show you apply to (name, email address, postal address and phone number) or whose event you buy a ticket for (name, email address and phone number, and the email address for its own marketing only as §8.3 says), the seller you buy from (name and shipping address) and the professional you hire or message	Sold or shared: IP address and online identifiers, to Google Analytics, Microsoft Clarity and the Meta Pixel; and, until October 10, 2026, the email address of a person who opened an email-preferences or unsubscribe link from certain of our emails, which that link's web address contained	Sold or shared whenever the Analytics or Marketing choice is on (§5.2): IP address and online identifiers, to the analytics provider under either choice and to the session-replay and advertising providers under the Marketing choice; off under "Your Privacy Choices" and Global Privacy Control; never for anyone we know to be under 18	For the life of the account; for people without an account, imported newsletter records up to 24 months after import and contact-list entries while the list owner keeps the list, with a suppression entry kept so an opt-out keeps working, and business contacts of organizations' staff while the organization's sales record exists; sign-in and security records pseudonymized on deletion and deleted 3 years later; our page-view and email-tracking identifiers 13 months (§12)
Customer records (Cal. Civ. Code §1798.80)	Name, address, phone number, payment identifiers (never card numbers)	You; our payment provider	Payments and shipping	Service providers: payment provider, shipping-label service. At your direction: the organization whose show you apply to (name, address and phone number) and the seller you buy from (name and shipping address)	Not sold or shared	Not sold or shared	For as long as tax, accounting and dispute rules require (§12)
Commercial information	Applications, fees paid, Art Purchases, tickets, bookings, listings, memberships	You; your organizers; our payment provider	Run your account and shows; payments; marketing measurement	Service providers: payment provider. At your direction: your application and everything in it, to the organization running the show and its jurors; your order, to the seller; your booking, to the person you book with; your ticket, to the organization running the event	Sold or shared: application checkout steps, to Google Analytics and the Meta Pixel; and, before this policy's effective date, application text shown on signed-in pages while a session-replay recording ran without on-screen masking, to Microsoft Clarity	Sold or shared under the Marketing choice: application and ticket checkout steps, to the analytics provider and to any advertising pixel or server-side forward listed in the Cookie Policy; off under "Your Privacy Choices" and Global Privacy Control	While the account and the show's records need them; payment records for as long as tax, accounting and dispute rules require; the session-replay copies 30 days, or up to 9 months for the provider's random sample (§12)
Internet or other electronic network activity	Pages viewed, searches, email opens and clicks, assistant conversations, session replay, error reports	Automatically	Measure and improve the sites; marketing; security and support	Service providers: tag manager and tag server; AI service provider; code-hosting service (error tickets). At your direction: none (an organization sees only whether you opened the messages it sent you, §4.1, and an unnamed count of visits to its own show's pages)	Sold or shared: pages viewed and identifiers, to Google Analytics and the Meta Pixel; pages viewed, identifiers and session recordings, to Microsoft Clarity	Sold or shared whenever the Analytics or Marketing choice is on: pages viewed and identifiers, to the analytics provider under either choice; pages viewed, identifiers and session recordings, to the session-replay and advertising providers under the Marketing choice; off under "Your Privacy Choices" and Global Privacy Control	Our own page-view and email records 13 months; assistant text 12 months; error reports 90 days; analytics provider 2 months; session-replay recordings 30 days at the provider, and up to 9 months for recordings we mark as favorites (we never favorite recordings of signed-in pages) or that the provider keeps in its random sample (§12)
Audio, electronic, visual or similar information	Artwork images, your portrait, bug-report screenshots (video meetings are never recorded)	You	Run your account and shows; the advisory image check; fixing bugs	Service providers: image hosting and delivery service; AI service provider (image checks). At your direction: your artwork images, to the organization running the show and its jurors, and to anyone who views your public gallery	Images shown on a page could be captured by the session-replay provider while a recording ran (§5.1 item 3)	Not sold or shared, apart from what a session recording captures of a page you view while the Marketing choice is on, with on-screen text masked (§5.1 item 3); off under "Your Privacy Choices" and Global Privacy Control	Images and portraits while the account or the show's record needs them (§11.3); bug-report screenshots 90 days after the report is closed (§12)
Professional or employment-related information	Business name, roles, organization affiliation, work contact details of organizations' staff	You; your organizers; a business-contact data provider (§2.4)	Run your account; sales to organizations	Service providers: the business-contact data provider receives the domain and work email address it is asked about. At your direction: your business name and roles, to the organizations you apply to and on your public profile	Business details shown on a page could be captured by the session-replay provider while a recording ran without on-screen masking	Not sold or shared, apart from what a session recording captures of a page you view while the Marketing choice is on, with on-screen text masked (§5.1 item 3); off under "Your Privacy Choices" and Global Privacy Control	While the account or the organization's sales record exists (§12)
Characteristics of protected classifications	Your birthdate (§10.2), collected only from October 27, 2026	You	Protect children and teens; alongside your email address or sign-in, confirm your identity	No one	Not sold or shared	Not sold or shared	For the life of the account (§10.8)
Inferences	A patron-status and recency label we send our analytics provider as account attributes (today a fixed default for everyone); the engagement level our former newsletter provider recorded; the tone of your messages to our assistants (positive, neutral or negative)	Automatically; our former newsletter provider	Marketing measurement; protecting email delivery; support and improving the assistants	Service providers: the hosting and AI providers that store and process the engagement level and the message tone, and no one else; the account attributes go to the analytics provider, which is not our service provider (next two columns). At your direction: none	Sold or shared: the account attributes, to Google Analytics with every signed-in visit; the engagement level and the message tone went to no one outside our service providers	Sold or shared whenever the Analytics or Marketing choice is on: the account attributes, with the visits they are sent on, to the analytics provider; off under "Your Privacy Choices" and Global Privacy Control; the engagement level and the message tone go to no one outside our service providers	Account attributes 2 months at the analytics provider; engagement level up to 24 months after import; message tone 12 months with the conversation (§12)
Sensitive personal information	The contents of messages you exchange with other people through the sites; for high-volume sellers, the tax and government identification the INFORM Consumers Act requires (Terms of Service §7.7); the connection tokens for a calendar you link. We collect no precise geolocation, health, biometric or genetic information, and we store no sign-in credentials	You; your calendar provider	Deliver messages; support, reports and disputes; fraud, abuse and security; verify sellers as the law requires; run the connections you ask for	Service providers: the AI service provider, when a staff member uses the internal AI tool to look up a conversation and for every message you send in a thread where ArtBot is offered (§6.2); our staff read them only for the purposes §6.2 lists. At your direction: each message, to the person or organization you send it to	Message text shown on signed-in pages was shared, before this policy's effective date, with the session-replay provider while a recording ran without on-screen masking; the INFORM identification and calendar tokens were not sold or shared	Not sold or shared, apart from what a session recording captures of message text on a page you view while the Marketing choice is on, with on-screen text masked (§5.1 item 3); off under "Your Privacy Choices" and Global Privacy Control	Messages while the account exists, then as §11.3 says; INFORM records while you sell plus 3 years; calendar tokens until you ask us to delete them; the session-replay copies 30 days, or up to 9 months for the provider's random sample (§12)

The organizations you apply to or buy tickets from, and the sellers and professionals you deal with, receive your contact details and what you submit because you direct us to disclose it to them (Cal. Civ. Code §1798.140(ad)(2)(A)); they are not our service providers, the fee an organization pays us is for running its show and not for your information, that disclosure is neither a sale nor sharing, and none of them receives behavioral, analytics or session-replay data from us (§4.1). We use and disclose sensitive personal information only for the purposes the California regulations allow without a right to limit (Cal. Code Regs. tit. 11, §7027(m)), such as providing the services you ask for, security, and complying with the law, so we do not offer a "Limit the Use of My Sensitive Personal Information" link.

12. How long we keep it

We keep personal information while your account is active and as long as the purpose it was collected for requires, then delete or anonymize it. Closing an account hides its information rather than deleting it; we delete or anonymize it when you make a deletion request (§11.3). The periods below are our schedule; the children's schedule is in §10.8.

Information	Kept	Then
Account, profile, applications, galleries, bookings, messages	While the account exists	Anonymized or deleted on account deletion (§11.3)
Payment, payout, refund and tax records	For as long as tax, accounting and dispute rules require	Deleted or anonymized
INFORM seller records (high-volume sellers)	While you sell, plus 3 years	Deleted
Page-view records (our own)	13 months	Purged
Sign-in IP history	For the life of the account, for security	Pseudonymized on deletion, then deleted 3 years later
Security block list (IP and email addresses)	Until the block is lifted	Deleted
Email opens and clicks	13 months	Purged; unsubscribe suppression entries are kept so the opt-out keeps working
Email tracking tokens	Until they expire, plus 30 days	Purged
Imported newsletter-provider records (lists, status, engagement, bounces)	While they serve your email preferences and delivery protection, and no longer than 24 months after import	Purged, except suppression entries
Your privacy choice and consent record	While the choice stands, plus 3 years	Purged
Terms acceptance record (which version, when, on which screen)	While the account exists, and 5 years after it is deleted (Florida's limitation period for an action on a written contract)	Deleted
Text-message opt-out	Until the person asks to receive texts again	Kept with the suppression entries, including after the phone number is removed or the account is deleted
AI assistant conversation text	12 months (90 days for organizer-assistant text about a youth show)	The text is blanked; the row's counts remain for usage limits
Browser error reports	90 days	Purged
Bug-report screenshots, clicks and browser messages	90 days after the report is closed	Purged
Audit trails of changes to records	For the life of the account, for security	Pseudonymized on deletion, then deleted 3 years later
Imported contact-list entries about people without an account	While the list owner keeps the list, or until the person asks to be removed	Deleted; a suppression entry is kept so the opt-out keeps working
Membership consent records	3 years, or until 1 year after the membership ends, whichever is later (Terms of Service §7.6)	Deleted
Ticket door-scan records	With the ticket, through the event and its refund window	Anonymized with the ticket holder's name and email
Image-check results	With the application they were run on	Deleted or anonymized with the application (§11.3)
Calendar connection tokens	Until you ask us to delete them (§9.1)	Deleted
Copies of messages in our team's linked company inboxes (§9.2)	While the inbox stays linked, and for 24 months after the last message in the conversation unless an open matter needs it	Deleted, or sooner on request (§11.3)
Privacy-request records	24 months after closing	Purged
Infringement notices	At least 3 years, and longer while a repeat-infringer record or an open matter needs them	Per the IP Infringement Policy
Analytics provider data	The shortest retention our analytics provider offers (2 months for user-level data)	Expires at the provider
Session-replay recordings	30 days at the provider; its favorited recordings and a random sample up to 9 months; we do not favorite recordings of signed-in pages	Expires at the provider, which offers no per-person deletion

13. Security and transfers

13.1 Security

We protect personal information with measures designed to fit its sensitivity, including: encrypted connections to the sites; sign-in through a dedicated provider, with no password set, read or stored by us; access to systems and data restricted by role; the secrets our software uses kept in a managed secrets store; logs of changes to accounts, applications, payments and settings with who made them and when, and of every action a professional takes on your behalf, under both names; and payment card numbers that never reach our systems. No system is perfectly secure, and we cannot promise that unauthorized access will never happen; if a breach puts you at risk, we will tell you and the authorities as the law requires.

13.2 Where your information is

We are in the United States and our servers are in the United States. If you use the sites from the EEA, the UK or Switzerland, your information is transferred to and processed in the United States, by us and by the service providers in §4.2. For each provider we rely on its participation in the EU-U.S. Data Privacy Framework (with the UK Extension and the Swiss-U.S. framework) where it is certified, and otherwise on the European Commission's standard contractual clauses in our agreement with it. You can ask us at §15 which applies to a given provider and for a copy of the clauses. People in the EEA, UK and Switzerland have the rights in §11.3 and the right to complain to their supervisory authority. We do not seek new marketing subscribers outside the United States. If you are outside the United States and receive our calls-for-entry digest because you subscribed with our former newsletter provider, you can unsubscribe in one click from any message; we will not add new marketing subscriptions for people outside the United States without their express consent.

14. Changes

When we change this policy in a way that affects you, we email every account holder at the address on file at least 30 days before the change takes effect, as a service notice about your account (it goes even if you have paused marketing email, and it carries no tracking), and we post the new version on the sites with its effective date and version id. Smaller changes (wording, contact details, a new provider in the same category) are posted with a new "Last updated" date. The version id at the top of this document identifies the text you are reading; the sites show the current version and, in the weeks before a change, the version that is about to take effect.

15. Contact

Juried Art Services, LLC
PO Box 3477, Palm Beach, FL 33480, United States

Privacy requests: the Contact Support form (choose "Privacy request"), or by email to our privacy address, privacy@jurying.net, a dedicated inbox read by our support lead for artists and by our client support for organizers.
Artists and account holders: support@jurying.net
Organizations, jurors and show staff: arts@jurying.net
Copyright and infringement: see the IP Infringement Policy and the Report Infringement form.