Privacy Policy — Art Is The Horizon

Effective date: October 30, 2026 Entity: For The Art LLC (d/b/a "Art Is The Horizon," "we," "us," "our") Contact: privacy@artisthehorizon.com

---

1. Introduction & Scope

Art Is The Horizon ("the Service") is a directory and networking platform operated by For The Art LLC. This Privacy Policy explains what personal information we collect, how we use and share it, your choices and rights, and how we protect it. It applies to the website, applications, and related services. By using the Service you acknowledge this Policy. Capitalized terms not defined here have the meanings in our Terms of Service.

We apply privacy protections on a tiered basis according to your age and location, as described in Sections 9 and 11. Where regional law grants greater rights, those rights control for residents of that region.

2. Information We Collect

a. Information you provide:

• Account data: email address, password (stored only as a salted hash), phone number, date of birth (used for age assurance), and account type (artist or location).
• Profile data: display/stage name, handle, general location (city/region), category, biography, links to your external profiles, uploaded images, résumé/CV documents, and any other content you add.
• Questionnaire/optional data you choose to submit.
• Payment data for paid features (processed by our third-party payment processor; we do not store full card numbers).
• Identity-verification data (for the optional verification tier): government-ID images and, where offered, biometric face-match data, handled under a separate, standalone Biometric Consent and processed by a third-party verification vendor. See Section 10.
• Communications you send us (support requests, feedback).

b. Information collected automatically:

• IP address (collected on every request for security, fraud prevention, and coarse/region-level geolocation).
• Device and usage data: device type, operating system, browser, identifiers, pages viewed, interactions, and referral data.
• Cookies and similar technologies (see Section 8).
• Precise geolocation (GPS/Wi-Fi) — only with your opt-in permission via your device's location prompt, and only for features that require it (e.g., nearby discovery / travel features). Off by default.

c. Information from third parties:

• Public profile data from services you link (e.g., Spotify, YouTube, Instagram) used to build and enrich your profile, consistent with those services' terms.
• Data from our verification vendor, payment processor, analytics, and advertising partners.

3. How We Use Information

We use personal information to: create and manage accounts; build, display, and enrich profiles; operate the map and discovery/networking features; verify identity (optional tier); process payments; provide support; personalize content; maintain safety, security, and integrity (fraud/abuse prevention, moderation); comply with law; and, subject to the choices and tiering in Sections 9 and 11, for advertising and analytics.

4. Legal Bases (EEA/UK/Brazil users)

Where GDPR/UK GDPR/LGPD applies, we process personal data on the bases of: performance of a contract (providing the Service); consent (precise location, certain cookies, marketing, and sale/sharing where required); legitimate interests (security, fraud prevention, service improvement, non-targeted advertising); and legal obligation. You may withdraw consent at any time without affecting prior processing.

5. How We Share Information

We share personal information with:

• Service providers / processors (hosting, storage, email delivery, payment processing, identity verification, analytics, content moderation) under contracts limiting their use to our instructions.
• Advertising partners — for behavioral/targeted advertising only where permitted and subject to your choices (Section 9). We never use minors' data for targeted advertising.
• Other users and the public — information you include in your public profile is visible to others once approved; your exact address is never displayed (approximate area only).
• Legal / safety — to comply with law, enforce our Terms, or protect rights, safety, and property, and in connection with a merger, acquisition, or asset sale.

6. "Sale" and "Sharing" of Personal Information (US)

Depending on your state and the technologies in use (e.g., advertising cookies and identifiers), some data practices may constitute a "sale" or "sharing" of personal information under the CCPA/CPRA and similar state laws. You have the right to opt out. We provide a "Do Not Sell or Share My Personal Information" / "Your California Privacy Choices" control (Section 9), and we honor Global Privacy Control (GPC) browser signals as a valid opt-out of sale/sharing. We do not sell or share the personal information of users we know to be under 16. For users 13–15, we obtain opt-in consent before any sale/sharing; for users under 13, we obtain verifiable parental consent (see Section 11).

7. Your Rights & Choices

Depending on your location you may have rights to: access/know, correct, delete, port your data; opt out of sale/sharing and of targeted advertising; limit use of sensitive personal information; withdraw consent; and not be discriminated against for exercising rights. To exercise rights, use the in-app privacy controls or email privacy@artisthehorizon.com. We will verify requests as required by law (note: opt-out of sale/sharing does not require identity verification). You may appeal a denial by [APPEAL PROCESS]. You may also authorize an agent to act on your behalf.

8. Cookies & Tracking Technologies

We use strictly-necessary, functional, analytics, and advertising cookies and similar technologies. On first visit (and as required) we present a consent banner (opt-in for non-essential cookies in the EEA/UK) and a "Your Privacy Choices" control (US). You can manage preferences at any time via [COOKIE SETTINGS LINK]. We honor GPC. Our cookie categories and vendors are listed at [COOKIE POLICY LINK].

9. Advertising & Monetization Choices

For adult users in permissive regions, we may use personal information for targeted advertising and may sell/share it, subject to your opt-out. Controls:

• "Do Not Sell or Share My Personal Information" / "Your California Privacy Choices" link (footer).
• Opt out of targeted advertising in settings.
• GPC honored automatically. Opting out is no more burdensome than opting in, requires no account, and we confirm when processed. Minors are excluded from targeted advertising and sale/sharing entirely.

10. Identity Verification & Biometric Data (optional tier)

If you choose identity verification, you will be presented with a separate, standalone consent before any collection of government-ID or biometric data. Biometric data (e.g., facial-geometry templates) is collected and used only to verify identity, processed by [VENDOR], retained only as long as necessary and subject to a published biometric retention/destruction schedule, and handled in compliance with the Illinois Biometric Information Privacy Act (BIPA), Texas CUBI, Washington, and GDPR special-category rules. We do not sell biometric data.

11. Children & Minors

The Service is currently intended for users 18 and older. We do not knowingly collect data from anyone under 18 while the adult-only policy is in effect, and we will delete such data on discovery. When teen access is enabled in a region, the following apply: we enforce the applicable minimum age (e.g., 13 in the US baseline under COPPA, higher where required such as 16 in jurisdictions with teen bans); we obtain verifiable parental consent where required; minors receive a restricted experience with chronological (non-algorithmic) feeds, no targeted advertising, no sale/sharing of their data, and precise location off; and we comply with COPPA, applicable US state children's-privacy and design-code laws, GDPR Article 8 (age of consent 13–16 by country), and applicable international bans.

12. International Data Transfers

We operate primarily from the United States. Where we transfer personal data from the EEA/UK/Switzerland or other regions, we use appropriate safeguards, including the EU–US Data Privacy Framework, Standard Contractual Clauses, or your consent, consistent with GDPR Articles 44–49. Where local law requires in-country storage, we comply before operating in that jurisdiction.

13. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements, after which we delete or de-identify it. Specific retention periods are maintained in our internal retention schedule.

14. Security

We protect personal information with administrative, technical, and physical safeguards, including encryption in transit and at rest, hashed passwords, access controls (row-level security), and secret management. No method is 100% secure; we cannot guarantee absolute security.

15. Region-Specific Disclosures

• California (CCPA/CPRA): categories of personal information collected, sources, purposes, and sale/sharing are described above. Rights: know, delete, correct, opt out of sale/sharing, limit sensitive PI, non-discrimination. "Your California Privacy Choices" control provided; GPC honored.
• Other US states ([Virginia, Colorado, Connecticut, Texas, Oregon, etc.]): equivalent rights including opt-out of sale/targeted advertising/profiling and (where applicable) appeal rights.
• EEA/UK/Switzerland (GDPR): rights of access, rectification, erasure, restriction, portability, objection, and to lodge a complaint with a supervisory authority. Controller: For The Art LLC. [EU/UK representative & DPO contact if required].
• Brazil (LGPD): equivalent data-subject rights; contact [DPO].

16. Changes to This Policy

We may update this Policy. Material changes will be notified via the Service or email, with an updated effective date. Continued use after changes constitutes acceptance where permitted by law.

17. Contact

For The Art LLC — Privacy: privacy@artisthehorizon.com · [MAILING ADDRESS] · [DPO / EU-UK REP].