Privacy Policy
Last updated: October 22, 2026
Galleriola is run by Vincent's Light in Kelowna, British Columbia, Canada. We collect only what we need to make your mockups and run your account, we store it in the United States, and we never sell it or use your paintings to train anything. This policy follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).
While Galleriola is in beta
Right now this website only collects what you type into the beta form: your email, and if you add them, your name and where you paint. We use them to invite you, and to send occasional news only if you tick the box. Tell us at any time and we'll delete them.
What we collect when you use the app
| What | Why |
|---|---|
| Name, email, sign-in details (we don't store passwords) | To run your account and send sign-in links |
| Paintings and photos you upload, with their titles, sizes and notes | To correct the photo, design rooms and make your mockups and documents |
| Artist profile: bio, statement, portrait, contact links | To build your portfolio and gallery packs |
| Records you keep: prices, sales, exhibitions, collectors, notes | To show them back to you; nothing else |
| Plan and payment status from Paddle (not your card number) | To give you the rooms and features you paid for |
| Usage and device data: pages used, errors, IP address, browser | To keep the service secure, fix problems and plan capacity |
We remove location (GPS) data from photos when you upload them.
Collectors you add
If you record collectors or other people in Galleriola, you're responsible for having their permission and for following anti-spam law (CASL in Canada) when you email them. We store these records only for you and never contact those people.
Who we share it with
We use a small number of service providers, under terms that limit what they can do with your data:
| Provider | What they do | What they receive |
|---|---|---|
| Cloudflare | Hosts this website and stores the beta list | Your beta form details and normal web request data |
| OpenAI (when the app opens) | Reads the painting to plan rooms; generates the empty rooms | The corrected painting image, its size and your notes |
| Paddle (when the app opens) | Payments, sales tax, refunds | Your name, email, country and purchase |
OpenAI states that data sent through its API is not used to train its models and is kept for up to 30 days for abuse monitoring (OpenAI: your data). Before the app opens, we'll add the providers that store your uploads to this list. We don't sell personal information, and we don't share it for advertising.
We may disclose information if the law requires it, or to protect users or the service from fraud or harm.
Where it's stored
Your data is stored and processed in the United States. While it's there, it may be accessible to US courts and authorities under US law.
How long we keep it
- Beta list: until the app opens and you've had your invite, or until you ask us to delete it.
- Uploads, mockups and records: while your account is open. Cancelled accounts keep their data on the free plan until you delete it.
- When you delete your account: removed within 30 days, and from backups within 60 days.
- Empty rooms that joined the room library stay there; they contain no painting and no personal information.
- Billing records are kept by Paddle as tax law requires.
Your choices and rights
You can see, download, correct or delete your information at any time in the app, or by emailing privacy@galleriola.com. You can withdraw consent to optional emails with the unsubscribe link in each one. We reply to requests within 30 days. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.
Emails
We send account emails (sign-in links, "your mockups are ready", deadline reminders you set). News and offers are sent only if you agree, and every one has an unsubscribe link.
Cookies
This website doesn't use tracking or advertising cookies. The app will use cookies only to keep you signed in and remember your settings.
Security
Uploads are stored privately and shared only through links that expire. Access inside Galleriola is limited to what's needed to run and support the service. No system is perfectly secure; if a breach puts you at real risk of significant harm, we'll tell you and the Privacy Commissioner as the law requires.
Children
Galleriola isn't meant for anyone under 18, and we don't knowingly collect their information.
Changes and contact
If we change this policy in a way that matters, we'll tell you by email or in the app before it takes effect. Privacy questions: privacy@galleriola.com, Vincent's Light, Kelowna, British Columbia, Canada.