Privacy

GetSeen, run from Portugal, decides why and how your data is used on this website. For every question about your data, write to contact@getseen.win.

• Your account: your email, your name, and your password (stored in a scrambled form, so we can’t read it). If you log in with Google, Google tells us your name and email.
• What you make: listings, photos, videos and artwork you upload, and the details you write.
• What you do: what you add to your cart, bid on, buy and sell, how many people view a listing, and the notices we send you in the website. We also record that you agreed to the Rules and Terms: when, and which version.
• Payments: Stripe takes your card details and holds the bank details for payouts. We keep order and payment records: amounts, dates, refund status, and the IDs Stripe gives us.
• Verified accounts: if you verify a social account, we keep its public details (name, handle, follower numbers) and show them on your listing.
• How you use the website (only if you say yes): which pages you visit, what you click, how fast pages load, and any errors you hit. We do not record your screen or make replays of your visits. If you are logged in, we link this to your account (your name, email and account type). If you are not, it is linked to a random ID stored in your browser. If you say no, none of this is recorded and no ID is stored.
• Technical: your IP address, so we can stop abuse and limit how fast one person can use the website. We use cookies to keep you logged in and to protect the website from bots (a security cookie from Cloudflare). We don’t use advertising cookies.

• to run the marketplace: show listings, take payments, hold and pay out money;
• to decide disagreements between brands and sellers;
• to email you about your account, like confirming your address or resetting your password;
• to understand how people use GetSeen, find bugs and make the website better (only if you agree);
• to keep the website safe and stop abuse;
• to meet our legal duties, like keeping payment records.

If you are in the EU, UK or EEA, the law asks us to name the reason for each use:

• To do what you asked (contract): your account, listings, bids, orders, payments, payouts and disagreements.
• Legal duty: keeping payment and tax records.
• Our legitimate interest: keeping the website safe, stopping abuse and fraud, and limiting how fast one person can use it. You can object to this.
• Your consent: website analytics. You can withdraw it at any time with “Cookie settings”, and nothing else stops working.

• Other people on GetSeen: your seller name, picture and verified details appear on your listings. A seller sees the artwork and name of a brand that buys from them. A brand sees the seller it bought from.
• Companies that help us run GetSeen: Supabase (our database, login and file storage), Stripe (payments and payouts) and Cloudflare (hosting and security), and, only if you say yes to analytics, PostHog (website analytics, on servers in the EU; its traffic passes through Cloudflare on the way). They only handle data to provide that service.
• Anyone else only if the law says we must.

We don’t sell your data.

These companies may handle data outside your country, including outside the EU/EEA. Where they do, the transfer is protected by the EU’s approved standard contractual clauses or by the EU–US Data Privacy Framework, so your data gets the protection the law asks for.

While your account is open, and for as long as we need to for payments, disagreements and legal duties. After that, we delete it or remove what identifies you. Analytics data is kept only as long as it helps us improve the website, and no longer than about a year.

You can ask us to show you your data, fix it, give you a copy you can move elsewhere, delete it, limit how we use it, or stop us using it in a way you object to. If we use your data because you said yes, you can take that back at any time.

Write to us and we’ll answer within one month (45 days if you live in California). If a request is complex, we may need longer, and we’ll tell you why. We may ask you to prove who you are first, so nobody else can get your data. If you are not happy with our answer, you can complain to the data protection authority in your country. In Portugal, that is the CNPD.

If you delete your account, we keep the payment records we must keep by law.

If you live in California: we have collected the kinds of data listed in section 2 over the last 12 months, for the reasons in section 3. We don’t sell your personal information, we don’t share it for advertising, and we don’t use sensitive data to profile you. You have the right to know, delete, correct and limit the use of your data, and we won’t treat you worse for using these rights.

You can say no to analytics when you first visit, and change your mind at any time with “Cookie settings” at the bottom of every page. If you say no, we don’t record your visit.

We protect your data with login security, limits on how fast anyone can use the website, and companies that specialise in security and payments. If a data breach puts your rights at risk, we will tell the data protection authority within 72 hours of finding out, and tell you without undue delay. No website is perfectly safe, so please use a password you don’t use anywhere else.

GetSeen is not meant for children, and you must be old enough to make a binding agreement to use it (see the Terms). If you think a child has given us data, write to us and we will delete it.

If we change what we collect or how we use it, we’ll update this page and the date at the top. Questions, or want to use your choices? Write to contact@getseen.win. See also the Terms.