Pastil

Privacy policy

Version 1 (draft) — not yet in effect

This policy explains what personal data Pastil keeps, why, for how long, and what you can do about it. It covers two different roles:

  • Your account: Pastil decides how this data is used, and is its controller.
  • Collector data your gallery records (names, contact details, purchases, interest): your gallery is the controller, and Pastil only processes it on the gallery's behalf, under the data processing agreement.

1. Who is responsible

Pastil, contact@pastil.io. During early access Pastil is published by an individual (see the terms, § 2).

2. What we keep about you

  • Account: your name, email address, password (stored only as a hash), passkeys, two-factor settings, and display preferences.
  • Sessions: when you signed in, and the IP address and browser of each session, so you can see and end them and so we can spot misuse.
  • Galleries: which galleries you belong to, your role in each, and the invitations you sent or received.
  • What your gallery puts in: fairs, works, images, statuses and sales. This belongs to the gallery; see the terms, § 5.
  • Payments: which fairs or plans the gallery bought. Polar handles the payment itself; we never see card details.
  • Messages: what you send through the feedback form.
  • Usage: anonymous page views from Vercel Analytics, without cookies or personal identifiers.

3. Why, and on what basis

| Purpose | Data | Legal basis (GDPR art. 6) | | --- | --- | --- | | Providing the service | account, galleries, content | contract | | Security, preventing abuse | sessions, rate limits | legitimate interest | | Emails about your account (verification, password, invitations) | email | contract | | Billing and accounting records | payments | legal obligation | | Understanding how Pastil is used | anonymous page views | legitimate interest |

We don't sell personal data, use it for advertising, or train AI models on it.

4. How long

  • Your account and its data: until you delete it.
  • Sessions: until they expire or you sign out of them.
  • A deleted fair: kept a day so it can be undone, then deleted.
  • Billing records: as long as accounting law requires (10 years in France).
  • Backups roll over and are gone within a few weeks.

5. Who processes it for us

| Processor | For | Where | | --- | --- | --- | | Vercel | hosting, anonymous analytics | EU and USA (standard contractual clauses) | | Neon | database and image storage | Frankfurt, Germany | | Resend | sending emails | to be confirmed | | Polar | payments, as merchant of record | to be confirmed | | Upstash | live updates between teammates | to be confirmed |

6. Your rights

You can access, correct, export or delete your data, object to its use, or ask us to restrict it:

  • Export everything about you from Settings → Data & privacy.
  • Delete your account from the same page.
  • For anything else, write to contact@pastil.io; we answer within a month.

If you think we got it wrong, you can complain to the CNIL (cnil.fr), the French data protection authority.

Collectors who want to know what a gallery keeps about them, or have it erased, should ask the gallery. If they ask us, we pass the request on.

7. Changes

We'll tell you of a material change by email or in the app before it takes effect.