At Metalonic (www.metalonic.com), we are committed to protecting your privacy. This Privacy Policy describes how we collect, use, and share your personal information when you visit our website, when end customers make a purchase through our online store, or when you use our platform as an artist.

Information We Collect

This section outlines the types of information we may collect. Specific information collected from artists is detailed further below.

Information from Website Visitors and End Customers:

• Website Browsing Information: When you visit our website (www.metalonic.com) or public artist galleries, we automatically collect certain information about your device via Cloudflare and potentially analytics tools. This may include your IP address, web browser type and version, operating system, referring URLs, pages visited, links clicked, and time spent on pages.
• End Customer Purchase Information (via E-commerce Platform): When an end customer makes a purchase from an artist's collection on our integrated e-commerce platform, our platform provider collects the customer's name, email address, shipping address, billing address, and payment information to process the order and payments. Metalonic receives necessary order details (such as items purchased, shipping information, and customer contact email for order updates) to facilitate fulfillment by our partners. We do not directly receive or store full payment card details; this is handled by our e-commerce platform and its payment processors. Please refer to the privacy policy of our e-commerce platform provider for details on their data handling.
• Communications: If you contact us directly (e.g., via email for support), we will collect the information you provide, such as your name, email address, and the content of your message.

Information from Artists (When Using Artist-Specific Features):

• Account Registration: When you sign up as an artist on the Metalonic platform, we collect your email address, password (which is managed securely via Supabase authentication and not directly visible to us), and a unique username. Your username will form part of your public artist gallery URL (e.g., metalonic.com/username).
• Artwork Uploads: When you upload artwork, we collect the artwork images themselves, and associated metadata you provide, including the artwork name, description, tags, specified orientation (vertical/horizontal), and your marketing preference for that artwork.
• Profile Customization (Optional): If you choose to upload a profile banner image, we collect that banner image.
• Social Media Connections (Optional): If you choose to connect your social media accounts (e.g., Facebook, Instagram via Facebook, Pinterest, X.com) to your Metalonic account for the purpose of sharing your artwork:
  • We will redirect you to the respective social media platform for you to authenticate and authorize our application. We do not receive or store your social media account passwords.
  • We collect access tokens (and refresh tokens, if applicable) provided by the social media platform. These tokens allow us to act on your behalf to share content as you direct. These tokens are stored securely and are encrypted at rest.
  • We may also collect basic public profile information from the connected social media account, such as your platform-specific user ID, account name/username, or page name/ID, to identify the connected account and display this information to you within your Metalonic settings.
  • We maintain a record of your active social media connections, the permissions (scopes) you granted, and when the connection was established.
• Platform Usage Data: We store records of your uploaded artworks, their approval status, any deletion requests you make, and associated statistics related to your artist account within our system (primarily Cloudflare D1).

How We Use Your Information

To Provide and Operate Our Services:

• Authenticating users (both for checkout and for artist dashboard access).
• Processing orders made by end customers, including coordinating with fulfillment partners.
• Managing artist accounts, storing and displaying artworks and artist profile information.
• Processing artwork uploads, conducting internal reviews, and managing deletion requests.
• Using artist usernames to create public gallery URLs and potentially corresponding collections and redirects on our e-commerce store.

To Enable Artist Social Media Features:

If an artist connects their social media accounts, we use the stored access tokens and account information to allow them to share their artworks from their Metalonic dashboard to their selected social media platforms, as per their instructions.

For Fulfillment (Artists & End Customers):

Upon artwork approval by our admin team and an order by an end customer, we send necessary artwork data (image, metadata, orientation, artist username) and order details (shipping information) to our third-party fulfillment partners to enable the printing and shipping of metal posters.

For Communication:

• Sending transactional emails to end customers (e.g., order confirmations, shipping updates from our platform).
• Sending transactional emails to artists (e.g., password resets, upload confirmations, potentially approval/rejection notices).
• Responding to inquiries and providing customer or artist support.

For Marketing (with Consent):

• If an artist opts-in via their account settings or during artwork upload (allowMarketing flag), we may use their approved artwork images (as displayed on products) to promote the Metalonic platform and their work on our social media channels, in newsletters, and through advertisements, as outlined in our Artist Terms.
• We may use provided email addresses (from customers who opt-in during checkout or artists) to send marketing communications like newsletters, special offers, and platform updates. You can opt-out of these communications at any time.

To Improve Our Services:

Analyzing website usage data (for all visitors) and artist activity (in an aggregated or anonymized way where possible) to understand trends, diagnose problems, and improve the platform's functionality and user experience.

For Security and Compliance:

Monitoring for fraudulent or prohibited activity, enforcing our Terms of Service (for both customers and artists), and complying with legal obligations.

Sharing Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• With Service Providers: We engage third-party companies and individuals to perform services on our behalf. These service providers have access to your personal information only to perform these tasks and are obligated not to disclose or use it for any other purpose. This includes:
  • Supabase: For user authentication (primarily for artists) and storing basic user metadata.
  • Cloudflare: For hosting our platform infrastructure, database (D1), image storage (R2), and backend functions (Workers).
  • E-commerce Platform: Our store is powered by a leading e-commerce platform provider that processes end customer checkouts, payments, and order data. Artist usernames may be used to create collections/redirects.
  • Third-Party Fulfillment Partners: We share necessary artwork data (image, metadata, orientation, artist username) and customer order details (shipping address, items ordered) to enable the printing and shipping of metal posters.
  • Social Media Platforms: When an artist instructs us to share content to their connected social media accounts, we transmit the necessary data (e.g., artwork image, custom message, access token) to the respective platform's API. The artist's interaction with these platforms is also governed by their own privacy policies.
  • Other providers for analytics, email delivery, or customer support tools.
• Publicly (Artist Content): An artist's chosen username and their approved artworks (including their images, names, and potentially descriptions/tags) are displayed publicly on their artist gallery page (e.g., metalonic.com/username) and may be featured within our main store collections on our e-commerce platform. An artist's approved profile banner image is also public if uploaded. Content an artist shares to their social media accounts through our platform will be public according to their settings on those social media platforms.
• For Legal Reasons: If required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: In the event that Metalonic is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or sale of all or a portion of its assets, your information may be transferred as part of that transaction.

Your Rights

You have certain rights regarding your personal information, subject to local data protection laws. These may include the right to:

• Access: Request access to the personal information we hold about you.
• Correct: Request correction of inaccurate or incomplete personal information.
• Delete: Request deletion of your personal information.
  • Artists can request deletion of specific artworks via their dashboard.
  • Artists can disconnect their social media accounts from their Metalonic settings.
  • For full account deletion (artists) or deletion of other personal data, please contact us. Note that we may need to retain certain information for legal, transactional, or operational purposes (e.g., order records for tax and accounting, artist sales records).
• Object/Restrict Processing: Object to or request restriction of our processing of your personal information in certain circumstances.
• Opt-Out of Marketing: Unsubscribe from marketing emails using the link provided in the emails or by updating your preferences in your account settings (if applicable), or by contacting us.

To exercise your rights, please contact us at support@metalonic.com. We will respond to your request in accordance with applicable laws. We may need to verify your identity before processing your request.

Data Retention

We retain your personal information for as long as necessary to provide our Services, fulfill the purposes described in this Privacy Policy, comply with our legal obligations (e.g., tax, accounting), resolve disputes, and enforce our agreements.

End customer order information is retained by our e-commerce platform provider according to their policies and by us as needed for fulfillment records and legal compliance.

Artist accounts and associated approved artwork data remain active unless deletion is requested or otherwise required.

Information related to an artist's connected social media accounts (like encrypted tokens and account identifiers) is retained as long as the connection is active or as needed for operational purposes. When an artist disconnects an account, we will take steps to remove or anonymize this specific data in accordance with our policies and technical capabilities.

Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, use, alteration, or disclosure. We rely on the security measures provided by our key platform partners like Supabase (for artist authentication) and Cloudflare (for infrastructure). Sensitive data, such as artist social media access tokens, are encrypted at rest.

However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. Artists are responsible for maintaining the confidentiality of their account passwords and for the security of their connected social media accounts.

International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside the United Kingdom and choose to provide information to us, please note that we transfer the data, including personal information, to the United Kingdom and process it there, as well as potentially other locations where our service providers operate. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

Children's Privacy

Our Service is not directed to individuals under the age of 16 (or a higher age if stipulated by local law in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information without parental consent, we will take steps to delete such information. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post any changes on this page with an updated "Effective Date." We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our Service after any modification to this Privacy Policy will constitute your acceptance of such modification.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: support@metalonic.com