Privacy policy

This policy explains what information PaintRush collects, how we use it, and the choices you have. We keep data collection minimal and use trusted third parties for authentication, storage, streaming, and payments.

Information we collect

  • Account information. Name and email address. If you sign in with Discord or Google, we receive basic profile info from the provider. If you use password sign-in, we store a hash of your password.
  • Profile and settings. Handle/URI, artist status and profile details (headline, pricing, tags, portfolio, social links), content preferences, and currency.
  • Activity on PaintRush. Commission requests and lifecycle events, chat messages and attachments, posts and stars, reviews and moderation flags, notifications, and typing indicators.
  • Payments and credits. Wallet and star transactions, credit purchases, tips, and order funding state. We store Stripe identifiers (for example customer, payment method, or intent IDs), not full card data.
  • Files and media. File uploads, such as references and deliverable files, are stored with us and served via our CDN.
  • Streaming. Live rooms are provided by our streaming partner; session metadata (like who joined) may be processed to operate the stream.

How we use your information

  • Operate accounts, profiles, matching, requests, chat, posts, streaming, and notifications.
  • Process payments and credits, calculate balances, and handle tips and payouts.
  • Maintain safety and integrity: moderation, dispute handling, fraud prevention, and abuse mitigation.
  • Comply with legal obligations and record-keeping, especially for financial transactions.

Sharing and third parties

  • Authentication. Discord and Google provide sign-in; we receive basic profile data from them to create your account.
  • Payments. Stripe processes purchases, holds, tips, and payouts. We share necessary details such as amounts and Stripe customer or intent IDs. Card numbers never touch our servers.
  • Streaming. LiveKit powers real-time rooms; stream-related metadata is shared to operate sessions.
  • File storage. We store uploads in S3-compatible object storage.
  • Public content. Public artist profiles and posts are visible to everyone. Private requests, chats, and files are visible only to participants.
  • We may disclose information to comply with the law, enforce our policies, or protect rights and safety.

Cookies and local storage

  • We use session cookies for authentication and to keep you signed in.
  • We may store lightweight preferences (like locale or currency) in your browser.
  • We do not run third‑party advertising cookies. Payment widgets may set their own required cookies.

Data retention

  • We retain account, request, chat, and post data while your account is active.
  • Financial records (wallet, credits, tips, payouts) are retained as required by law.
  • You can request deletion of your account; some records may be preserved for compliance.

Your choices and rights

  • Access, correct, or update your profile information in settings.
  • Set privacy preferences for your artist profile and content visibility where available.
  • Contact us to request data export or account deletion. We’ll respond as required by law.

Security

  • Accounts require authentication. We do not store plaintext passwords.
  • Payment details are handled by Stripe; we store references and results, not card numbers.
  • Files are served via random identifiers. Access to private uploads is restricted.
  • Secrets are kept server‑side; third‑party keys are accessed only where needed.
  • Despite safeguards, no system is 100% secure: use strong passwords and keep them private.

International transfers

We may process and store information in the United States and other locations where our providers operate. By using PaintRush, you consent to transfers of information to these locations.

Children

You must be at least 13 years old to use PaintRush. We do not knowingly collect personal information from anyone under the age of 13. If you are a parent or guardian and you believe your child has provided us with personal information without your consent, please contact us and we will remove it.

Contact

Questions or privacy requests? Reach out via our support channels or Discord.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you through the product or by other reasonable means. Continued use means you accept the updated policy. Seeour terms of service andour rules for more information.