Privacy Policy
General Archival
Effective July 3, 2026
This Privacy Policy explains how Kevin Frances, doing business as General Archival ("we," "us," "our"), collects, uses, and shares information when you use the General Archival service at https://generalarchival.com (the "Service").
1. Who we are
General Archival is operated by Kevin Frances, a sole proprietor. If you have questions about this policy or your data, contact us at hello@generalarchival.com.
2. Information we collect
Information you provide directly:
- Account information — your email address, which you use to sign in via a magic link.
- Content you create — the data you enter into the Service, including artworks and their details (title, series, medium, dimensions, price, provenance, condition, notes, tags, custom fields), uploaded images and documents, sales records, exhibition records, and contacts (which may include other people's names and contact details that you choose to store).
- Payment information — if you subscribe to a paid plan, our payment processor (Stripe) collects your payment details. We do not receive or store your full card number. We receive limited billing information such as your subscription status and the last four digits of your card.
- Communications — messages you send us (for example, support requests).
Information collected automatically:
- Basic technical and usage information needed to operate the Service, such as log data, device/browser information, and records of AI-feature usage (used to enforce usage limits). We keep this to what is necessary to run and secure the Service.
Cookies and local storage. We use essential browser storage (including a secure sign-in token kept in your browser) to keep you logged in and to operate the Service. We do not use third-party advertising trackers or advertising cookies.
3. How we use information
We use information to:
- provide, maintain, and improve the Service;
- authenticate you and secure your account;
- process subscriptions and payments;
- provide AI-assisted features you choose to use;
- enforce usage limits and prevent abuse;
- respond to your requests and communicate with you about the Service;
- comply with legal obligations.
4. AI features
When you use an AI-assisted feature (for example, importing works from a website or organizing your records), the relevant content is sent to our AI provider (Anthropic) to generate a result. We send only what is needed to perform the task you requested. Review any AI-generated or AI-imported content before relying on it.
Your content is not used to train AI models. We do not use your content to train any AI or machine-learning model, and Anthropic does not train its models on the content we send through its API (per Anthropic's commercial terms). AI features are used solely to provide the functionality you request.
5. How we share information — subprocessors
We do not sell your personal information. We share information only with service providers ("subprocessors") that help us operate the Service, and only as needed. Current subprocessors:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, file storage, and authentication | Account info, all Content you store, images/documents |
| Vercel | Website/application hosting | Technical/log data from serving the app |
| Anthropic | AI-assisted features | Content you submit to an AI feature |
| Stripe | Payment processing for paid plans | Billing and payment information |
| Resend | Sending sign-in (magic link) and account emails | Your email address |
We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer. If we add or change subprocessors, we will update this list.
6. Content about other people (your responsibility)
The Service lets you store information about third parties — for example, people you add as contacts, buyers in sales records, or people named in your notes. When you do this, you are the party responsible for that information: for having a lawful basis to store it and for handling requests from those individuals. We process it on your behalf to provide the Service to you.
7. Sharing links
If you create a public share link, the content you choose to share becomes viewable by anyone who has the link, without signing in. Do not include information in a shared view that you do not want to be publicly accessible. You can revoke a share link at any time through the Service.
8. Data retention
We keep your information for as long as your account is active or as needed to provide the Service. If you cancel your subscription but do not delete your account, we retain your data so you can resubscribe and regain access, and we will not delete your archive without first notifying you by email. If you delete content or your account, we will delete the associated data within a reasonable period, except where we must retain it to comply with legal obligations (for example, tax records related to payments) or to resolve disputes. Backups may persist for a limited additional period before being overwritten.
9. Security
We use reasonable technical and organizational measures to protect your information, including access controls and encryption in transit. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. Keeping access to your sign-in email secure is an important part of protecting your account.
10. Your rights and choices
- Access, correction, export, deletion — you can view and edit most of your data directly in the Service, and export it using the built-in export tools. To request access to, correction of, or deletion of your personal information, contact us at hello@generalarchival.com.
- Cancel or delete — you can cancel your subscription and delete your account at any time.
- Depending on where you live (for example, California or the EU/UK), you may have additional rights over your personal information. We will honor rights that apply to you under applicable law. To exercise them, contact us at hello@generalarchival.com.
11. International users
The Service is operated from the United States and our subprocessors may process data in the United States and other countries. If you access the Service from outside the U.S., you understand your information will be processed in the U.S.
12. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them.
13. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you (for example, by email or a notice in the Service). The "Effective" date at the top shows when it was last updated.
14. Contact
Questions or requests about your privacy: hello@generalarchival.com.