Last updated: September 2026
We collect the information you provide when creating an account, including your email address and account credentials. We also collect the collection data you choose to enter, such as item details, photos, stories, provenance records, and any custom fields you define. All data you upload is user-generated and user-controlled.
Your data is processed solely to operate and improve the Service, including:
We do not sell your personal data to third parties. We do not use your data for advertising, profiling, or resale.
You acknowledge that all processing is performed at your direction, and you remain responsible for the accuracy, legality, and content of all data you submit.
Photos, stories, and provenance records you upload are stored securely and associated with your account.
Items shared through the Provenance Passport are accessible only via a shareable link. You control which items are shared and may revoke sharing at any time.
You are responsible for ensuring that any shared content does not violate third-party rights.
The Service integrates with third-party providers, including:
These providers process data according to their own privacy policies. Payment card data is handled entirely by Stripe and is never stored by the Service.
We are not responsible for the actions, policies, or security practices of third-party providers.
Your collection data is retained while your account is active. Deleted items are moved to a recycle bin for 30 days before permanent removal.
Account deletion requests result in removal of your data within a reasonable period; however, residual copies may remain in backups for a limited time.
We do not guarantee the availability, integrity, or recoverability of deleted or lost data.
You may export your collection data at any time using built-in tools. You may request account deletion, which will permanently remove your data and cancel any active subscription.
You are solely responsible for maintaining independent backups of your data. The Service does not guarantee long-term storage, archival reliability, or preservation of historical versions.
The Service is not directed to children under 13, and we do not knowingly collect data from children. If you believe a child has provided data, please contact us for removal.
We implement reasonable technical measures to protect your data; however, no system is completely secure. You acknowledge that:
To the maximum extent permitted by law, the Service owner, employees, contractors, and affiliates shall not be liable for:
Your use of the Service is at your sole risk.
You agree that you are fully responsible for:
The Service does not verify, audit, or moderate user-generated content.
We may update, modify, or replace this Privacy Policy at any time, at our sole discretion. Updates become effective immediately upon posting within the app or on the Service’s website. Your continued use of the Service after any changes constitutes acceptance of the revised policy.
Questions about this Privacy Policy may be directed to the Service owner through the app’s support channels.