Privacy Policy

Commiq is a hosted commission page for artists, operated from Australia. This page explains what personal data it holds, why, and how to get it removed. It is written to be read, not to be impressive.

Two kinds of people are covered here

Artists hold an account. Clients do not — they never sign up, they only submit a commission request to an artist. Both have data stored, and both have the same rights over it.

What is collected

From artists, when they create an account and set up a page:

• Email address and a hashed password (the password itself is never stored)
• Everything entered on the public page: display name, bio, avatar, social handles and links, prices, terms of service text
• Private notes written about a client, visible only to that artist

From clients, when they submit a commission request:

• Name, email address, and optionally a social handle
• The commission description, any reference images uploaded, and a budget if given
• Any review left after the work is delivered

Automatically, on every visit: aggregate analytics (page views, referring site, approximate country) via Vercel Analytics. This is cookieless and does not identify individual visitors. No advertising or cross-site tracking is used anywhere on the site.

What it is used for

• Running the service — showing an artist's page, delivering requests, and letting clients follow progress
• Sending transactional email: a new request, a status change, a work-in-progress update, a milestone approval, a review, and a reminder to artists about requests they have not touched in 48 hours
• Understanding aggregate usage so the product can be improved

Personal data is never sold, rented, or shared for advertising.

What is public, and what is not

An artist's page is public by design. Commission requests, reference images, and private client notes are not public.

Three things become visible only when someone chooses to make them visible:

• The queue. Off by default. When an artist turns it on, only a shortened first name is shown — for example “K***” — never a full name or email.
• Process timelines. Off by default and opted in one commission at a time, so private and NSFW work is never shown unless the artist explicitly chooses it for that piece.
• Reviews. Submitted by the client, and published with a shortened name. An artist can hide a review from their page but cannot edit its text.

Status links

Each commission request gets a long, unguessable link. Anyone holding that link can see that request. It is not indexed by search engines, but it should be treated as private and not posted publicly. It does not expire.

Who else processes the data

Commiq runs on third-party infrastructure. These providers process data only to provide their service:

• Vercel — hosting and aggregate analytics
• Neon — the Postgres database where account and request data is stored
• Cloudflare R2 — storage for uploaded images
• Resend — sending transactional email

Data may be stored or processed outside your country, including in the United States and the European Union.

How long it is kept

Account and commission data is kept while the account is active. When an artist deletes their account, their page, prices, terms, commission requests, uploaded images, milestones, client notes, and reviews are deleted with it. Login sessions expire after 30 days. Deletion from backups held by the providers above may take longer.

Your rights

You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. Artists can delete everything themselves from Settings. Clients can email the address below — please send it from the address used on the request, so it can be matched. Depending on where you live, you may have further rights under the GDPR or Australian Privacy Act, including the right to complain to a data protection authority.

Children

Commiq is not intended for anyone under 16, and accounts should not be created by them.

Changes

If this policy changes in a way that materially affects you, the date at the top will change and account holders will be notified by email.

Contact

For anything on this page, including data deletion requests, email helloteamuse@gmail.com.