Legal
Privacy Policy
1. What This Policy Covers
This Privacy Policy explains what information The Repertory collects from contributors, how it is used, what is kept private, and your rights regarding your data. It applies to the contributor platform at The Repertory and any associated communications from Ardor House Collective.
2. Information We Collect
At signup:
- Legal first and last name (for identity verification only — never displayed publicly)
- Email address (used for invite dispatch, account notifications, and platform communications)
- Display name (your public-facing identity within the platform)
- Professional credentials and area of expertise (used for tier assignment and reviewer qualification)
- Referral/invite source (which contributor invited you, retained for provenance tracking)
During participation:
- Submission content (product identifications, authentication data, market listings, condition assessments, glossary entries)
- Submission metadata (timestamps, review outcomes, flagging history)
- Session data (login activity, access logs)
Automatically:
- Browser and session cookies for authentication and session management (see Section 7)
3. What Is Public vs. Private
| Data | Public | Private |
|---|---|---|
| Display name | ✓ Displayed on profile and attributed contributions | — |
| Legal first name | ✗ Never surfaced publicly | Internal only |
| Legal last name | ✗ Never surfaced publicly | Internal only |
| Email address | ✗ Never displayed publicly | Internal only |
| Approved contributions | ✓ Attributed to display name | — |
| Trust level / tier | Visible to curators | Not publicly displayed by default |
| Invite chain | ✗ Not displayed | Internal provenance only |
| Pending / rejected submissions | ✗ Not public | Visible to curators |
4. How We Use Your Information
- Identity verification: Legal name is collected solely to confirm identity during the invite and onboarding process. It is not used in any public-facing context.
- Platform communications: Email is used to send invite tokens, account notifications, submission status updates, and occasional platform announcements.
- Attribution: Your display name is attached to approved contributions in the canonical record.
- Quality and integrity: Submission history, trust scores, and review outcomes are used to maintain the integrity of the collective record and to inform curator decisions.
- Provenance tracking: Invite chain data is retained to understand how the contributor community has grown and to trace any integrity issues if they arise.
We do not use your information for advertising, profiling, or sale to third parties under any circumstances.
5. Data We Do Not Sell
Ardor House Collective does not sell, rent, lease, or trade your personal information to any third party. Ever.
6. Third-Party Services
The Repertory is built on Supabase, which serves as the database and authentication infrastructure. Your data is stored in Supabase-managed infrastructure. Supabase's privacy practices govern their handling of data at the infrastructure level; we encourage you to review their privacy policy at supabase.com.
No other third-party services have access to your personal data unless required by law.
7. Cookies and Session Handling
The Repertory uses session cookies for authentication — to keep you logged in across page visits. These cookies do not track you across other websites and are not used for advertising. You may clear session cookies through your browser settings, which will log you out of the platform.
8. Data Retention
Active accounts: Your data is retained for as long as your account is active.
Suspended accounts: Data is retained during the suspension period to support any review or reinstatement process.
Deleted accounts: Upon confirmed account deletion, your personal information (legal name, email, credentials) will be removed or anonymized within 30 days. Approved contributions already in the canonical record may remain with attribution anonymized or removed — they will not be deleted, as they form part of the collective record.
Invite chain data: Provenance data (who invited whom) is retained in anonymized form after account deletion for historical integrity purposes.
9. California Resident Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Access your personal information
- Correct inaccurate personal information
- Delete your personal information (subject to the data retention terms above)
- Non-discrimination: We will not treat you differently for exercising your privacy rights
To exercise any of these rights, contact us at info@therepertory.org. We will respond within 45 days.
10. How to Request Data Deletion
Email info@therepertory.org with the subject line "Data Deletion Request" and the email address associated with your account. We will confirm receipt and process your request within 30 days.
11. Changes to This Policy
We may update this Privacy Policy as The Repertory evolves. Material changes will be communicated by email or via an in-platform notice. Continued use of the platform following notice of changes constitutes acceptance of the updated policy.
12. Contact
Privacy inquiries: info@therepertory.org