Privacy Policy

Atoka ("we", "our", "us") operates the atoka.art platform and provides gallery management software for African art. This policy explains what information we collect, how we use it, and your rights over that information.

What we collect

When you contact us or register for the platform, we collect your name and email address. Gallery owners also provide gallery details (name, description, branding). Artists provide portfolio information including artwork titles, dimensions, pricing, and images. Customers provide contact details and, when making purchases, billing information processed by our payment partners.

We automatically collect standard server logs — IP addresses, browser type, and pages visited — for security and performance monitoring. We do not sell this data.

How we use your information

We use your information to provide the platform, respond to enquiries, send transactional emails (order confirmations, reservation notices), and to improve the service. We do not send marketing emails without your explicit consent.

Payment processing

Payments are processed by Paystack and Flutterwave. We do not store card numbers or sensitive payment details on our servers. When you complete a payment you are subject to their respective privacy policies in addition to ours.

Data storage and security

Your data is stored on servers within the European Union and/or Africa. We use industry-standard encryption (TLS in transit, AES-256 at rest) and access controls to protect it. No method of transmission or storage is 100% secure; we encourage you to contact us immediately at hello@atoka.art if you suspect unauthorised access to your account.

Cookies

We use session cookies strictly necessary for authentication. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but doing so will prevent you from logging in to the platform.

Third-party services

The platform uses the Metropolitan Museum of Art's public collection API to display artwork imagery. Artwork images sourced from the Met are subject to their open-access policy. We do not share your personal data with the Met or other third parties except as required to deliver the service (e.g., payment processors and email delivery services).

Your rights

You have the right to access, correct, or delete the personal data we hold about you. To exercise any of these rights, email us at hello@atoka.art. We will respond within 30 days.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date above and, where appropriate, by email.

Contact

Questions about this policy? hello@atoka.art