Legal

Privacy Policy

Last updated: September 2026 (version 3, 21 September). This page sets out the data Armature collects, the purposes of the processing and the rights available to you.

Data Controller

KAS Ventures SRL (Armature), rue Général Tombeur 81, 1040 Etterbeek, Belgium. Contact: contact@armature.site.

Data Collected

Contact form. Name, email address, subject, message. This data is used solely to answer your request.

Armature's letter. Email address, first name, reading language, and how we know each other (signed up on the site, met in person, existing relationship). An address entered in the form on the site is sent directly to our sending tool and is not kept in the site's database. The subscription takes effect immediately. Every letter contains an unsubscribe link. Frequency: about one letter a month, a little more around fairs and exhibitions.

Applications and the artists' area. Professional data provided by artists who apply or whom we represent: career, portfolio, images of works, contact details, contractual elements. It is used to review applications and to manage representation.

Assistants for artists. The signed-in area offers six assistants that help artists with their administrative work: positioning, contract preparation, portfolio review, pricing advice, tax and invoicing, logistics. A seventh assistant conducts the application interview.

What is recorded: the content of your exchanges, the documents and images you upload to them, a short description produced automatically for each image, the title and the summary of each conversation, and the number of exchanges used in the month.

The language model is provided by Anthropic (United States). The content of your exchanges is sent to it to produce each answer. Anthropic does not use it to train its models.

How it is protected: the content of your conversations is encrypted before being recorded, so that the database holds no readable text from it. The images and documents you upload are kept in a private space, reachable only after your session has been checked; no shareable address exists for these files.

Who can read them: nobody at Armature, by default. Armature can read a conversation in two cases only. The first is your decision: you share one specific conversation, you see exactly what Armature will see before you confirm, and you withdraw that sharing whenever you want, in one click, without having to justify yourself. The second is a break-glass opening, reserved for cases where you cannot share it yourself. It requires a written reason, you receive an email containing that reason before any reading, and if that email cannot be sent to you the opening is refused.

In both cases, every reading is written into a log and you see it in your conversation.

Retention: your conversations are kept for as long as your account exists. You can delete one at any time, which also erases the files attached to it. A file uploaded for an exchange that never completed is erased within twenty-four hours.

Log of access to conversations. Every reading of one of your conversations by Armature leaves a line containing your identifier, the administrator's identifier and address, the date, the reason for the access and, in the case of a break-glass opening, the written reason. This log never contains a single line of the conversation's content. It exists so that you can check and challenge every access. It cannot be modified or erased, including by Armature, and every line disappears automatically after twelve months. These lines remain until that deadline even if your account is erased; they then carry only an identifier without a holder, a date and a reason.

Browsing data. Audience statistics with no cookie and no identifier (Cloudflare Web Analytics): pages viewed, country, device type. We also count outbound clicks to our artists' pages on Artsy, to measure what the site brings to their visibility. This counting uses no cookie and no identifier, and keeps no data that could identify you. No data is used to track you from one site to another.

Legal Bases for Processing

Consent: sending the letter to people who signed up on the site (withdrawable at any time). Legitimate interest: sending the letter to people with whom Armature already has a professional or collecting relationship, handling contact requests, site security, audience statistics, and the log of access to conversations. Performance of a contract: managing relationships with represented artists, managing applications, and use of the assistants by represented artists.

Retention Periods

Contacts through the form: 3 years after the last exchange. Letter: until unsubscription, and deletion after 3 years without a single opening. Represented artists: the term of the contract, then 7 years (Belgian accounting obligations and traceability of the provenance of works). Applications not taken forward: 2 years. Conversations with the assistants: the lifetime of the account, deletable at any time by the artist. Log of access to conversations: 12 months.

Recipients and Processors

Your data is neither sold nor passed on. It is processed by our technical providers under data processing agreements compliant with the GDPR: Hetzner (hosting of the site and the database, Germany), Brevo (subscription and sending of the letter, hosted in the European Union), Resend (sending the site's service emails, servers in Ireland), Cloudinary (image storage, including the private space for conversation attachments), Cloudflare (domain name, routing of the emails addressed to contact@armature.site, audience statistics), Anthropic (language model for the assistants, United States). Sales of works go through Artsy, which processes your order data as a separate controller, under its own policy.

Transfers Outside the European Union

Some providers are United States companies (Cloudinary, Cloudflare, Resend, Anthropic). Transfers are governed by the European Commission's standard contractual clauses or by the EU-US Data Privacy Framework.

Your Rights

Under the GDPR and the Belgian law of 30 July 2018, you have the rights of access, rectification, erasure, objection, restriction and portability. To exercise them: contact@armature.site. You may also lodge a complaint with the Belgian Data Protection Authority (www.autoriteprotectiondonnees.be).

The log of access to conversations is an exception to the right to erasure, within the limit the GDPR allows for the establishment and defence of a right: it is the evidence you can hold against Armature in case of dispute. It disappears by itself when the twelve months are up.

Privacy Policy | Armature