Privacy policy.
qurarte is an end-to-end encrypted catalogue for art collections. Your artwork records, images and notes are encrypted on your device before they reach us, so we can't read them.
Who we are
qurarte is operated by Huru Inc. ("we", "us"). Questions about this policy: support@qurarte.com.
What our servers can't read
Everything you put in a workspace is encrypted in your browser or the qurarte app with keys derived from your passphrase. That includes artwork records (titles, artists, descriptions, prices, valuations, notes), images and documents, contacts, sales, expenses and the workspace's own name. We store only the encrypted data. Your passphrase never leaves your device, and we can't reset it or recover your data without it or your recovery phrase.
To let you search without revealing content, we store blind indexes: one-way keyed fingerprints of a few fields (such as title or artist). They let the server match a search you make, but can't be turned back into the text.
What we do process
- Account data: an encrypted copy of your email address and a one-way lookup value used to sign you in; your encrypted keys; when you last signed in.
- Notification address (optional): if you turn on email notifications, the address you give is stored readable so we can send to it. This is the only personal detail about you our server can read. Clear it in Settings to stop.
- Workspace metadata: membership and role, the workspace's web address, file sizes, record counts and timestamps.
- Activity log: which account did what and when (for example "updated an artwork"), shown to your workspace's members. It never contains the content of what changed.
- Technical logs: IP addresses, browser and request details kept briefly for security and troubleshooting.
Assistant connections (Claude, ChatGPT)
A workspace owner or admin can choose to connect an AI assistant such as Claude (by Anthropic) or ChatGPT (by OpenAI). This is off unless they turn it on, and every member sees when it is on.
- When the owner approves a connection, our connector service holds a sealed copy of that workspace's key so it can answer the assistant. It decrypts only what a request needs, in memory, and keeps no decrypted copy.
- Whatever the assistant reads (for example the records, images, notes, locations and viewing rooms it looks at) is sent to that assistant's provider and handled under their terms and privacy policy. Contacts (names, emails, phone numbers and addresses of the people in your workspace) and finances (prices, costs, valuations, sales, invoices and expenses) are shared only if the owner allows them for that connection.
- The owner chooses what the assistant may do (read the workspace, read contacts, read finances, edit the workspace, edit finances, edit descriptions, add photos) and for how long (1 or 7 days). Revoking the connection in Settings, or its expiry, ends access immediately and deletes the sealed key.
- We keep a record of each connection (who approved it, when, what it may do, when it was last used) and the actions it took, shown in your workspace's settings and activity log.
Why we process it
To provide the service you signed up for (contract), to keep it secure and working (legitimate interests), and to send notifications you asked for (consent, which you can withdraw at any time).
Where your data lives
qurarte runs on DigitalOcean in Toronto, Canada. Encrypted backups are kept in a separate DigitalOcean region in Amsterdam, the Netherlands, for 30 days. If you connect an assistant, what it reads is processed by that assistant's provider wherever they operate.
Who we share it with
- DigitalOcean (hosting, storage and backups), which only ever holds encrypted workspace data.
- An email delivery provider, only for notification and invitation emails you or your workspace ask for.
- Anthropic or OpenAI, only when a workspace owner connects their assistant, as described above.
We don't sell your data, use it for advertising, or train AI models on it.
How long we keep it
Workspace data stays until you delete it or close your account. Deleted data leaves our encrypted backups within 30 days. Technical logs are kept for up to 30 days.
Your choices and rights
You can see and change your workspace data in qurarte at any time, export it, and turn notifications and assistant connections on or off. To close your account or ask about the data we hold, email support@qurarte.com. Depending on where you live you may have rights to access, correct, delete or port your data, and to complain to your data protection authority (in Canada, the Office of the Privacy Commissioner of Canada).
Security
End-to-end encryption is the main protection: a breach of our servers would expose encrypted data, not your catalogue. Connections use HTTPS, and access between our services is limited to what each needs. To report a security issue, email support@qurarte.com.
Children
qurarte is not intended for children under 16.
Changes
If we change this policy we'll update the date above, and tell workspace owners in advance of significant changes.