Dezi Art Prize Privacy Policy

The Dezi Art Prize is organized and administered by Phistream LLC (“Phistream,” “we,” “us”), the company behind Dezi, a career platform for visual artists. Phistream is the controller of the personal data described in this policy. If you have any question about your data or this policy, contact us at nitya@dezi.work.

We only collect what we need to run the prize. When you apply, we collect:

• Identity and contact details: your full name, email address, and (optionally) your Instagram handle.
• Location: the city or region and country you enter. We do not collect precise GPS location.
• Application content: your career stage, primary medium, the images of your work you upload, any video links you provide, your captions and descriptions, your artist statement and biography, and your pitch for the grant.
• Your interests: the kinds of opportunities you tell us you are looking for, and whether you opt in to be notified when Dezi launches.
• Consent records: that you agreed to the Terms and Conditions, and when.
• Technical data: a limited amount of standard technical information (such as the IP address your request comes from) is processed by our hosting and security providers to keep the service running and to prevent abuse.

We do not collect or store your payment card details. Payment is handled entirely by Stripe (see Section 5). We do not knowingly collect data from anyone under 18; the prize is open only to applicants 18 and older.

• To operate the prize: to receive and review your application, run the judging process, and contact you about your application and its outcome.
• To take payment: to process your application fee through our payment provider.
• To send you the confirmation email, and (only if you opt in) to let you know when Dezi launches.
• To run, secure, and improve the prize and Dezi, including preventing fraud and abuse.
• To meet our legal and tax obligations (for example, issuing tax forms to winners).

We rely on your consent and on the performance of our agreement with you (these Terms) as the basis for this processing, and on our legitimate interest in running a secure service.

We do not sell your personal data, and we do not share it with advertisers. We share it only with the service providers listed below, and only as needed to run the prize.

We use a small number of trusted providers to run the prize. Each only receives the data it needs for its function, and each is bound by its own privacy and security commitments:

• Supabase: our database and file storage. Holds your application and your uploaded work images.
• Stripe: our payment processor. Handles your card payment and the application fee. We never see or store your full card details. See Stripe’s privacy policy at stripe.com/privacy.
• Resend: our email provider. Sends your confirmation email.
• Vercel: our hosting and content-delivery provider. Serves the website and processes basic technical request data.
• Our jury: to judge the prize, your application (including your submitted work, captions, artist statement, and pitch) is reviewed by an independent jury of arts professionals. Jurors review applications solely to score them and are expected to keep applications confidential.

We may also disclose data if required by law, to enforce our Terms, or to protect the rights, safety, or property of Phistream, our applicants, or the public.

Phistream is based in the United States, and our providers process and store data on systems that may be located in the United States. If you apply from outside the United States, you understand that your data will be transferred to and processed in the United States, which may have different data-protection laws than your country. By applying, you consent to this transfer.

• We keep your application for as long as needed to run the prize cycle, announce results, and meet our legal, accounting, and tax obligations.
• Records we are required to keep for tax or legal reasons (for example, winner payment and tax records) are kept for as long as the law requires.
• You can ask us to delete your data sooner (see Section 8), and we will do so unless we are legally required to keep it.

Depending on where you live (including under the EU/UK GDPR and India’s Digital Personal Data Protection Act), you may have the right to:

• Access the personal data we hold about you, and receive a copy of it.
• Correct data that is wrong or out of date.
• Delete your data (subject to records we must keep by law).
• Withdraw your consent or opt out of any optional emails at any time.
• Object to or restrict certain processing.

If you are a California resident, you have these same rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. As stated in Section 4, we do not sell your personal data, and we will not discriminate against you for exercising your rights.

To exercise any of these, email nitya@dezi.workfrom the address on your application. We will respond within a reasonable time. To stop optional notification emails, you can also use the unsubscribe option in any such email or reply with “unsubscribe.”

Your application data is stored in a private, access-controlled database, and your uploaded work is stored in a private file bucket that is not publicly browsable. Payment is handled by Stripe on its own secure systems, so card data never reaches us. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information, and we limit access to it to what is needed to run the prize.

The prize pages use only the cookies needed to make the site work and keep it secure (for example, a session cookie and basic security checks). We do not use the prize pages to run advertising trackers. If we add analytics or other non-essential cookies in the future, we will update this policy and ask for consent where required.

We may update this policy from time to time. If we make a material change, we will post the updated policy on this page and update the date below. Your continued use of the prize after a change means you accept the updated policy.

For any privacy question, request, or complaint, contact Phistream LLC at nitya@dezi.work.