Privacy Policy
Last Updated: August 26, 2026
1. Introduction
The Gallerist Network ("we", "us", or "our") respects your privacy and is committed to protecting your personal data in accordance with the European Union General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, store, and process personal and cryptographic data when you use our platform.
2. Types of Data We Process
When connecting your Web3 wallet (MetaMask), your public cryptographic wallet address is captured. This information is written directly onto the decentralized Polygon blockchain whenever you buy art or mint NFTs. Due to the immutable nature of public ledger technology, blockchain entries cannot be modified or deleted.
We collect personal information required to facilitate platform features, including curator biographies, artist registration files, email addresses, billing addresses for invoices, and digital contract text. This off-chain data is securely stored in our private MongoDB databases.
3. Purpose of Data Processing
Your data is processed to:
- Authenticate user logins and manage dashboard cabinets.
- Verify proof of ownership and provenance history for physical paintings.
- Generate purchase PDF invoices and certificates of authenticity.
- Maintain stable, real-time WebSocket communication sessions inside client chatrooms.
4. Sharing and Disclosure
We do not sell or lease your personal information. Off-chain data is kept confidential and only shared with service providers necessary to operate the platform (e.g., decentralized storage networks like Pinata for hosting NFT metadata).
5. Your Rights Under GDPR
If you reside in the European Economic Area, you have the right to request access, rectification, portability, or erasure of your off-chain personal data. To exercise these rights, please contact our data protection and curation office at curator@gallerist.com.de.