Privacy notice

When you visit this website, request a demo or create an account, Bowerbird House decides how your data is used: we are the data controller.

When a gallery stores its contacts, collectors and artists in Bowerbird House, the gallery is the data controller and we act only on its instructions, as its processor. If you are a gallery's contact and want to exercise your rights, contact that gallery directly; we will help it respond.

Demo and presentation requests: name, email, organisation, city, role, current software and your message.

Website chat: your messages, the page you wrote from, and the name and email you give if you ask to talk to a person. Replies come from an AI assistant (Anthropic) that only sees the conversation, or from a member of our team. Your network address is only stored as an irreversible code, to limit abuse.

Accounts: email address, name in the team, role, sign-in and security logs.

Website visits: technical data needed to deliver pages and protect the service (IP address, browser, pages requested), kept in server logs.

The Bowerbird House app uses the same account as the website. It sends your email address and password to sign you in, keeps you signed in on that device, and reads and updates your gallery's records on your instructions. It does not track you across other apps or websites, contains no advertising and no third-party analytics. To delete your account, write to hello@bowerbirdhouse.com from the email address you sign in with; we delete it within 30 days.

To answer your demo request and follow up on it: our legitimate interest in replying to people who contact us.

To provide the service to customers and their users: performance of the contract.

To secure the service, prevent abuse and keep accounts: our legitimate interest and our legal obligations.

We do not sell personal data and we do not use it for advertising.

Demo requests: up to three years after the last contact, unless you become a customer.

Website chats: 12 months after the last message, unless the conversation leads to a demo or a subscription.

Account data: for the life of the subscription, then deleted within 90 days, except invoices and accounting records, which we keep for as long as tax and company law requires (generally seven years in Australia).

Server logs: up to 12 months.

Our team, and the providers listed on the sub-processors page, only for the purposes above. Some providers are based outside the European Union, notably in the United States. Transfers rely on the European Commission's standard contractual clauses or, where the provider is certified, the EU-US Data Privacy Framework.

You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to hello@bowerbirdhouse.com. We answer within one month. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or, if you live in the European Union, to your local data protection authority, for example the CNIL (cnil.fr) in France.

Data is encrypted in transit and at rest, access is limited by gallery and by role, and the database is backed up daily. See the security page for details.