Privacy Policy

Who we are

Real Gallery by Tina Davies is operated by Tina Davies Professional LLC (“we,” “us”). This policy explains what we collect through the Gallery, why, and who it's shared with.

What we collect

Artists: account details from sign-in (name, email), and portfolio content you upload.

Google Calendar (optional): if you choose to connect your Google Calendar, we access your calendar's free/busy availability so clients only see real open time slots, and we create, update, or cancel a calendar event on your connected calendar for each appointment booked through the Gallery. We never read the titles, descriptions, or attendees of your other existing events, and we never access any calendar other than the one you explicitly connect. You can disconnect at any time from your dashboard (see “Your choices” below), which immediately revokes our access.

Clients/visitors: if you submit an inquiry, book an appointment, or leave a review, we collect what you provide — name, email, phone (optional), and your message. If you book, we also collect the deposit payment details (handled entirely by Stripe — see below, we never see or store card numbers). We log basic page-view events (which page, roughly when) to understand how the Gallery is used; this log doesn't include anything beyond that.

How we use it

To operate the platform: showing portfolios, routing inquiries to the right artist, processing booking deposits, sending the transactional emails a booking or inquiry naturally triggers (confirmations, review invites, and similar), and letting an artist see their own leads and bookings.

Text messages (SMS)

If you choose text as your preferred contact method when booking, Tina Davies Professional LLC (operating The Real Gallery) will send appointment-related text messages to the number you provide — things like a booking confirmation, a reminder to complete your intake or consent forms, or a cancellation notice. These are transactional messages tied to your specific appointment, not marketing texts, and message frequency depends on your booking (typically a handful of messages around a single appointment, not ongoing). Message and data rates may apply. Reply STOP at any time to stop receiving texts from us, START to resume, or HELP for help. Choosing text is always optional — you can pick email instead, and doing so never affects your ability to book or use the Gallery.

Text messaging originator opt-in data and consent will not be shared with any third parties or affiliates for marketing or promotional purposes. This information is shared only with the service provider that delivers these messages on our behalf (see below).

Who it's shared with

A small number of service providers we rely on to run the Gallery, each only for what they need to do their job: a payment processor for deposits, an email provider for transactional email, a text-messaging provider (Twilio) for clients who choose text as their contact method, an image-hosting provider for portfolio photos, and a database/hosting provider for the platform itself. If an artist connects a calendar, booking times are written to that calendar via the provider's own API. We don't sell personal data, and we don't share it for third-party advertising.

Data protection & security

All traffic to the Gallery is encrypted in transit (HTTPS). Google Calendar access tokens are additionally encrypted at rest using AES-256-GCM before being stored, with the encryption key kept separate from the database — the raw tokens are decrypted only in server memory, for the single moment they're needed to check availability or create a booking event, and are never sent to or visible from your browser. Direct database access to these tokens is restricted at the database level to our server-side systems only — no application user account, including an artist's own login, can read them directly. Card and payment details are never handled or stored by us at all; they go directly to our payment processor (Stripe), which maintains its own independent, industry-standard security certifications.

Cookies & analytics

The Gallery uses a minimal, self-hosted event log (page views and a couple of booking milestones) — not a third-party analytics or advertising tracker. Authentication uses a standard session cookie so you stay signed in.

Your choices

You can ask to see, correct, or delete the personal data we hold about you by reaching out through any artist's inquiry form or directly to the platform admin. Artists can edit or remove their own published content at any time from their dashboard. If you've connected Google Calendar, you can disconnect it at any time from your Calendar settings in the dashboard — this immediately deletes our stored access to it. You can also revoke access directly from your Google Account at myaccount.google.com/permissions, independent of anything on our end.

Changes

We may update this policy as the platform changes. Material changes will be reflected here with an updated date.