Privacy Policy

Last updated: April 5, 2026

Who We Are

MoveArt is a service of All Day Automations (CCT Consulting LLC), 233 NE 27th St, Miami, FL 33137. Contact: [email protected].

What We Collect

Contact information (name, email, phone)
Artwork details (title, artist, medium, dimensions, provenance, photos)
Payment information (processed by Stripe — we never see your card number)
Usage data (pages visited, clicks, scroll behavior, device information, IP address)
Session recordings (anonymized mouse movements, clicks, and scroll behavior via Microsoft Clarity)

Lawful Basis for Processing (GDPR Art. 6)

We process your personal data under the following legal bases:

Contract performance: Processing your artwork data, contact details, and campaign information is necessary to fulfill the service you have engaged us for — researching your artwork, identifying buyers, and conducting outreach on your behalf.
Legitimate interest: We use analytics (Google Analytics), session recordings (Microsoft Clarity), and security monitoring to improve our service, protect against fraud, and understand how visitors use our website. We have assessed that these interests do not override your rights and freedoms.
Consent: We rely on your consent for non-essential cookies and marketing communications. You may withdraw consent at any time by adjusting your cookie preferences or contacting us.

How We Use It

To research your artwork and identify potential buyers
To send personalized outreach emails on your behalf
To communicate campaign progress and results
To process payments via Stripe
To generate AI-powered research reports and buyer matching
To improve our website and service through analytics and session recordings

AI Data Processing

Your artwork details (title, artist, medium, dimensions, provenance, photos) are processed by AI systems to generate research reports and buyer matching. This processing occurs on our secure servers. AI-generated outputs are reviewed for quality before being used in your campaign. AI processing is performed as part of our contractual obligation to deliver the service you have purchased.

Image Data

Uploaded artwork photos are stored securely on our servers for the duration of your campaign plus 12 months. Photos are shared with potential buyers as part of our outreach service — this is a core function of the campaign you have engaged us for. Photos are not used for AI model training.

Session Recording Disclosure

We use Microsoft Clarity to record anonymized session replays, including mouse movements, clicks, and scroll behavior. This helps us improve our website and identify usability issues. Clarity does not record form field content before submission. Session recordings are anonymized and do not contain personally identifiable information. You can opt out via our cookie preferences by declining cookies when prompted.

Who We Share With

Potential buyers: We share artwork details and your contact information with galleries, collectors, and advisors we identify as matches — this is the core service
Stripe: Payment processing
Google: Analytics (Google Analytics) and email delivery
Microsoft: Session recording and analytics (Microsoft Clarity)
We never sell your personal information to data brokers or advertisers

International Data Transfers

Your data is processed in the United States. If you are located outside the US, your data will be transferred to and processed in the US. By using our service, you acknowledge this transfer. We take reasonable measures to protect your data in accordance with this privacy policy regardless of where it is processed.

Data Retention by Category

Campaign data (artwork details, contact info, outreach records): Duration of your campaign plus 12 months
Analytics data (Google Analytics): 26 months (GA4 default retention period)
Session recordings (Microsoft Clarity): 30 days (Clarity default retention period)
Payment records (Stripe transaction history): 7 years (required for tax and legal compliance)
Uploaded images (artwork photos): Duration of your campaign plus 12 months

After the applicable retention period, data is permanently deleted. You may request early deletion at any time — see "Your Rights" below.

Your Rights

Depending on your location, you have the following rights regarding your personal data:

For All Users

Right of access: You can request a copy of all personal data we hold about you.
Right to rectification: You can request correction of any inaccurate or incomplete data.
Right to erasure: You can request deletion of your personal data. We will respond to erasure requests within 30 days.
Right to restrict processing: You can request that we limit how we use your data while a concern is being resolved.
Right to data portability: You can request your data in a structured, commonly used, machine-readable format.
Right to object: You can object to processing based on legitimate interest, including profiling and direct marketing.
Right to withdraw consent: Where we rely on consent (cookies, marketing), you can withdraw it at any time without affecting the lawfulness of prior processing.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction.

For California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to know: You can request details about the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the third parties with whom we share it.
Right to delete: You can request deletion of your personal information, subject to certain exceptions.
Right to correct: You can request correction of inaccurate personal information.
Right to opt-out of sale or sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Cookies

We use Google Analytics and Microsoft Clarity for usage analytics. These services set cookies on your device to track usage patterns and session behavior. You can opt out by declining cookies when prompted on your first visit, or by clearing your browser cookies and selecting "Decline" on your next visit. If you decline cookies, analytics and session recording scripts will not load.

Contact for Data Requests

To exercise any of your rights, or if you have questions about this privacy policy:

Email: [email protected]
Response time: Within 30 days of receiving your request
Physical address: All Day Automations (CCT Consulting LLC), 233 NE 27th St, Miami, FL 33137

We may ask you to verify your identity before processing your request. If your request is complex or you have made multiple requests, we may take up to an additional 60 days and will notify you of the extension.