Privacy Policy
Last Updated: April 17, 2026
This Privacy Policy explains how QFX Curate ("we", "us", "our") collects, uses, and protects your personal data when you use our web application. We comply with applicable data protection laws, including Singapore’s Personal Data Protection Act (PDPA) and the EU General Data Protection Regulation (GDPR).
In the event of any inconsistency between the English and Chinese versions, the English version shall prevail.
1. Who We Are
We operate this web application and act as the data controller for personal data collected through it. Our operations are based in Singapore. For any privacy-specific concerns, please reach out to us via our Contact Form.
2. Information We Collect
We may collect the following information:
- Personal Data from Contact Form: When you use our contact form, we collect your name, email address, and message content to respond to your inquiry.
- AI Artwork Analyzer Inputs: When you use our AI Artwork Analyzer, you voluntarily submit an image of an artwork for analysis. We remind users not to upload images containing personal data and to respect copyright.
- Technical and Usage Data: Our servers automatically collect information such as your IP address, browser type, and access times for security and analytics purposes.
3. How We Use Your Information & Lawful Basis
We process your data for the following purposes and under these lawful bases:
- To respond to your inquiries (based on your Consent).
- To operate the AI Artwork Analyzer tool (based on our Legitimate Interest to provide our services).
- To monitor and secure our site (based on our Legitimate Interest in protecting our application).
4. AI Processing & Automated Systems
Our AI Artwork Analyzer uses automated artificial intelligence services hosted on Google Cloud Platform. Inputs submitted to our AI tool may be processed by Google Cloud services in multiple regions to generate outputs. We do not permit these inputs to be used for training AI models. Please be aware of the following:
- AI outputs are for informational purposes only and may be inaccurate, incomplete, or biased. They should not be relied upon as professional advice or authentication.
5. International Data Transfers
Your personal data is processed and stored on servers located in the United States. By using our service, you acknowledge that your data will be transferred internationally.
We ensure that these transfers comply with applicable laws by relying on Google's Data Processing Addendum, which incorporates Standard Contractual Clauses (SCCs), providing a level of data protection comparable to that required by Singapore’s PDPA and the EU's GDPR.
Please be aware that data stored in the United States may be subject to lawful access requests by public authorities in that jurisdiction.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact form submissions are retained for a maximum of 12 months before being securely deleted.
7. Your Data Rights and Data Protection Officer
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data or deletion of your data.
- Withdraw your consent for data processing at any time.
- Request data portability (for users in the EU).
You may exercise your data protection rights or raise inquiries by contacting our Data Protection Officer (DPO) directly through our Contact Form, regardless of where your personal data is stored or processed.
8. Data Security
We implement reasonable administrative, technical, and physical security measures to protect your personal information. However, no security measure is impenetrable, and we cannot guarantee complete security.
9. Digital Death Clause (France Only)
In accordance with Article 85 of the French Data Protection Act, you have the right to define directives regarding the storage, erasure, and communication of your personal data after your death. You may:
- General Directives: Register these with a digital trust third party certified by CNIL.
- Specific Directives: Inform QFX Curate as described in Section 11, regarding the fate of your account and curated content.
In the absence of directives, your heirs may exercise certain rights, such as closing your account or updating data, to the extent necessary for the settlement of your estate.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.
11. Contact Us
If you have any questions or concerns about our use of AI, the outputs generated by our tools, or our data governance practices, please do not hesitate to contact us through our Contact Form.