Privacy Policy

1. Who is responsible for your data

Seeus ("Seeus", "we", "us") is the data controller for the personal data described here. Seeus is operated from Colombia by two individuals; full controller identity details are available on request and are provided where required by law. For any privacy question or to exercise your rights, contact us at hello@seeusarchive.art.

Note: when you pay, Gumroad acts as Merchant of Record and is the controller for the payment transaction itself (card details, billing, tax). We never receive or store your full card details. This policy covers the data Seeus handles; Gumroad's own privacy policy covers the payment.

2. What we collect

Information you provide / that reaches us through your purchase.

• your name and email address, sent to us by Gumroad when you complete a purchase;
• order details: the artifact purchased, amount, currency, and Gumroad sale ID;
• any message you send us by email (e.g. a support or change-of-ownership request).

Information collected automatically when you browse.

• standard server logs from our host (Netlify), which may include your IP address, browser type, and pages requested;
• analytics and usage data via Google Analytics (see §4), where you have consented.

3. Why we use it, and our legal bases

We use your personal data to:

• deliver your artifact and certificate, and provide support — to perform our contract with you;
• maintain the provenance / exclusivity record that is the core of the product, and prevent fraud or double-issuance — our legitimate interests (and yours, in a verifiable one-of-one);
• keep accounting and tax records — to comply with our legal obligations;
• understand site usage through analytics — only with your consent (§4).

(Legal-basis language reflects the EU/UK GDPR. For visitors in Colombia, processing is carried out under Ley 1581 de 2012 with your authorization and for the purposes stated here.)

4. Cookies & analytics

We use Google Analytics to understand how the site is used. It sets cookies and collects usage data such as pages viewed and approximate location. Where required by law (including for visitors in the EU and UK), we load analytics only after you consent; you can decline or withdraw consent at any time, and essential functions of the site work without it. We do not use cookies for advertising.

5. Who we share it with

We don't sell your personal data. We share it only with service providers who help us run Seeus, each acting on our instructions (or, for Gumroad, as Merchant of Record):

• Gumroad — checkout, payment, tax, and Merchant of Record;
• Netlify — website hosting and serverless functions (server logs);
• Turso — database that stores your order record (name, email, order details);
• Resend — sending your delivery and support emails;
• Google Analytics — site analytics, subject to your consent (§4).

We may also disclose data if required by law, or to establish or defend legal claims.

6. International transfers

Seeus is based in Colombia and the providers above are mostly located in the United States, so your data may be transferred outside your country, including outside the EU/UK. Where we transfer personal data of EU/UK individuals, we rely on appropriate safeguards — such as the EU-US Data Privacy Framework or Standard Contractual Clauses — with the providers concerned. You can contact us for more detail.

7. How long we keep it

We keep your order record for as long as needed to honour the exclusivity and provenance of your artifact, and to meet accounting and tax obligations. The public provenance record at /verify contains only the artifact and its file fingerprint — no personal data. When personal data is no longer needed, we delete or anonymise it, subject to your rights below.

8. Your rights

Depending on where you live, you have rights over your personal data — including to access it, correct it, delete it, object to or restrict certain processing, withdraw consent, and receive a copy (portability). In Colombia, under Ley 1581 de 2012 you may know, update, rectify, and delete your data and revoke authorization.

To exercise any of these, email hello@seeusarchive.art. We respond within the timeframes required by applicable law. If you believe we've mishandled your data, you can also complain to your local data-protection authority — in Colombia, the Superintendencia de Industria y Comercio (SIC); in the UK, the ICO; in the EU, your national authority.

9. Children

Seeus is intended for adults. We don't knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we'll delete it.

10. Security

We take reasonable technical and organizational measures to protect your data and work with providers who do the same. No method of transmission or storage is completely secure, but we act promptly if we become aware of a problem.

11. Changes

We may update this policy; the current version is the one published here, with the date shown above. Material changes will be reflected on this page.

12. Contact

Questions or requests about your privacy: hello@seeusarchive.art.