Privacy Policy

Kalarty stores account identity, role, status, terms acceptance, artist profile details, portfolio metadata, opportunity interactions, inquiry submissions, notification evidence, product events, and admin audit records needed to operate the MVP.

Published artist profiles may display your name, biography, location, categories, tags, interests, public links, portfolio items, and contact availability. Private account emails are not displayed by default.

Inquiry sender details and messages are private operational data. Kalarty stores inquiries before attempting notification and records notification status without sending raw inquiry text to analytics.

Kalarty records timestamps for terms acceptance, public profile publication consent, portfolio rights acknowledgement, and profile deletion requests. These records support trust, moderation, and operational review.

Kalarty uses Clerk for managed authentication, AWS SES for inquiry email notifications, PostgreSQL for application data, and S3-compatible storage for portfolio media when production storage is enabled.

Product events are intended to be privacy-safe and must not include raw private inquiry text, credentials, secrets, or unnecessary PII. Operational logs should use sanitized IDs, route/action names, status, and error categories.

Artists can request deletion from the workspace. Kalarty removes requested profiles from public visibility immediately and then reviews database, storage, auth, audit, legal, and security retention obligations.