Dezi Art Prize Privacy Policy

The Dezi Art Prize is organized and administered by Phistream LLC (“Phistream,” “we,” “us”), the company behind Dezi, a career platform for visual artists. Phistream is the controller of the personal data described in this policy. If you have any question about your data or this policy, contact us at info@deziart.co.

We only collect what we need to run the prize. When you apply, we collect:

• Identity and contact details: your full name, email address, and (optionally) your Instagram handle.
• Location: the city or region and country you enter. We do not collect precise GPS location.
• Application content: your career stage, primary medium, the images of your work you upload, any video links you provide, your captions and descriptions, your artist statement and biography, and your pitch for the grant.
• Your interests: the kinds of opportunities you tell us you are looking for, and whether you opt in to be notified when Dezi launches.
• Consent records: that you agreed to the Terms and Conditions, and when.
• Unfinished applications: if you start an application without finishing it, we save what you have entered so you can return to it, and we may remind you about it.
• Technical data: a limited amount of standard technical information (such as the IP address your request comes from) is processed by our hosting and security providers to keep the service running and to prevent abuse.

We do not collect or store your payment card details. Payment is handled entirely by Stripe (see Section 5). We do not knowingly collect data from anyone under 18; the prize is open only to applicants 18 and older.

If you haven’t applied, we may hold a small amount of information about you so we can tell you about the Dezi Art Prize: your name, the email address and school or program you list publicly, and a link to the public page where we found it (such as a graduate showcase or your portfolio website). We use it only to invite you to apply. Every email we send says how we found your address and includes an unsubscribe link. If you unsubscribe or ask us to, we stop contacting you and keep only your email address on a do-not-contact list, so we never add you again. You can ask us to delete your information at any time at info@deziart.co.

• To operate the prize: to receive and review your application, run the judging process, and contact you about your application and its outcome.
• To take payment: to process your application fee through our payment provider.
• To send you the confirmation email, and (only if you opt in) to let you know when Dezi launches.
• To tell past applicants, and people who started an application, about future cycles of the prize and related opportunities for artists. You can unsubscribe at any time.
• To invite artists who haven’t applied to apply, using only the public information described in Section 2.
• To run, secure, and improve the prize and Dezi, including preventing fraud and abuse.
• To meet our legal and tax obligations (for example, issuing tax forms to winners).

We rely on your consent and on the performance of our agreement with you (these Terms) as the basis for this processing, and on our legitimate interest in running a secure service. For artists who haven’t applied, we rely on our legitimate interest in telling artists about an opportunity in their field.

We do not sell your personal data, and we do not share it with advertisers. We share it only with the service providers listed below, and only as needed to run the prize.

We use a small number of trusted providers to run the prize. Each only receives the data it needs for its function, and each is bound by its own privacy and security commitments:

• Supabase: our database and file storage. Holds your application and your uploaded work images.
• Stripe: our payment processor. Handles your card payment and the application fee. We never see or store your full card details. See Stripe’s privacy policy at stripe.com/privacy.
• Resend: our email provider. Sends your confirmation email and our emails about the prize.
• Google Workspace: our business email. Sends some of our emails about the prize and holds our correspondence with you.
• PostHog: our website analytics provider. Records how visitors use the prize pages (see Section 10).
• Vercel: our hosting and content-delivery provider. Serves the website and processes basic technical request data.
• Our jury: to judge the prize, your application (including your submitted work, captions, artist statement, and pitch) is reviewed by an independent jury of arts professionals. Jurors review applications solely to score them and are expected to keep applications confidential.

We may also disclose data if required by law, to enforce our Terms, or to protect the rights, safety, or property of Phistream, our applicants, or the public.

Phistream is based in the United States, and our providers process and store data on systems that may be located in the United States. If you apply from outside the United States, or if we contact you from outside the United States, your data will be transferred to and processed in the United States, which may have different data-protection laws than your country. By applying, you consent to this transfer.

• We keep your application for as long as needed to run the prize cycle, announce results, and meet our legal, accounting, and tax obligations.
• Records we are required to keep for tax or legal reasons (for example, winner payment and tax records) are kept for as long as the law requires.
• You can ask us to delete your data sooner (see Section 8), and we will do so unless we are legally required to keep it.

Depending on where you live (including under the EU/UK GDPR and India’s Digital Personal Data Protection Act), you may have the right to:

• Access the personal data we hold about you, and receive a copy of it.
• Correct data that is wrong or out of date.
• Delete your data (subject to records we must keep by law).
• Withdraw your consent or opt out of any optional emails at any time.
• Object to or restrict certain processing.

If you are a California resident, you have these same rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. As stated in Section 4, we do not sell your personal data, and we will not discriminate against you for exercising your rights.

To exercise any of these, email info@deziart.cofrom the address on your application, or the address we contacted you at. We will respond within a reasonable time. To stop emails from us, you can also use the unsubscribe link in any of our emails or reply with “unsubscribe.”

Your application data is stored in a private, access-controlled database, and your uploaded work is stored in a private file bucket that is not publicly browsable. Payment is handled by Stripe on its own secure systems, so card data never reaches us. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information, and we limit access to it to what is needed to run the prize.

The prize pages use cookies and similar browser storage for two purposes. Some are needed to make the site work and keep it secure (for example, a session cookie and basic security checks). We also use PostHog analytics, which stores an identifier in your browser and records page views and how visitors move through the pages, including session recordings with everything typed into form fields hidden. We use this only to understand and improve the prize pages. We do not run advertising trackers.

We may update this policy from time to time. If we make a material change, we will post the updated policy on this page and update the date below. Your continued use of the prize after a change means you accept the updated policy.

For any privacy question, request, or complaint, contact Phistream LLC at info@deziart.co.