Clear about data.
Careful by design.

Who is responsible

Trovecta Ltd is the controller responsible for personal information covered by this policy and the publisher of this website. Trovecta Ltd is registered in England and Wales under company number 17518446. Its registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

You can contact Trovecta about privacy at contact@trovecta.com.

Scope of this policy

This policy covers the Trovecta website, Trovecta account services and the Exhibit collection product. It also describes the marketplace connection being developed for Exhibit so people can understand the data flow before choosing to connect an account.

Marketplace selling is currently under development and is not generally available. The present implementation targets eBay Sandbox for testing. References to marketplace processing below apply when that functionality is made available and used.

Information we collect

Account and security information

When you create a Trovecta account, the service processes your email address, authentication records, account identifiers, session information and security events needed to confirm your address, sign you in, recover access and protect the account. Password authentication is provided through Supabase. Transactional account emails are delivered through Resend.

Collection content

Exhibit processes the content you choose to record, which may include workspace and collection names, items, photographs, tags, custom fields, notes, condition or grading information, purchase details, value information, locations, lifecycle states and presentation choices. Some content is stored locally on your device and authenticated workspace content can be synchronised with Trovecta’s server services.

Assisted features

If you choose an assisted identification, valuation, artwork or showcase feature, Exhibit processes the item information and selected photographs needed to provide that feature. The interface identifies suggestions, estimates and simulated results where applicable so they are not presented as confirmed facts.

Support and technical information

If you request support or submit a report, we process the information you provide and relevant diagnostic information presented to you in the product. Exhibit uses Sentry for production crash reports and important handled technical failures. Diagnostic information must not intentionally include credentials, authentication links or marketplace tokens.

How we use information

We use information to provide and secure the Trovecta account, operate Exhibit, synchronise authorised workspace content, restore data to a signed-in device, provide features you choose to use, respond to support requests, diagnose failures and protect the service from misuse.

Our main lawful bases under UK data protection law are:

• Contract: to provide the account and product services you request, including synchronisation and features you choose to use.
• Legitimate interests: to secure, maintain and improve the service, investigate failures, prevent misuse and respond to ordinary business enquiries. We consider the effect on users before relying on this basis.
• Legal obligation: when we must keep or disclose information to comply with law.
• Consent: where a feature or communication specifically asks for consent. Consent can be withdrawn for future processing.

We do not sell personal information or use it for third-party advertising. We will update this policy and any necessary product notices before introducing a materially different use.

Connected marketplace accounts

Information received from eBay

If you choose to connect an eBay selling account, Exhibit’s server receives an authorisation code and exchanges it for access credentials. It also obtains a stable seller account identifier and an account label. The planned listing and sale workflows may process external listing identifiers, listing status, source timestamps, quantity, sale and order identifiers, sale time, reported payment state, and payment, delivery or exception information when eBay makes those fields available.

Tokens and connection security

Marketplace access and refresh tokens are held on the server and encrypted using AES-256-GCM before storage. Tokens, authorisation codes and the stable private seller identifier do not enter Exhibit’s native device storage and are not returned through public connection-status responses. Short-lived, single-use authorisation state is stored as a server-side hash and expires after ten minutes.

Photos selected for selling

When you explicitly select an owned item photograph for a marketplace listing, the server prepares a separate, immutable copy and verifies it against the original item and workspace. That selected copy can be read through a random, opaque public URL because a marketplace needs to retrieve listing images. Anyone who obtains that URL may be able to view the selected copy. The storage path for the private collection photo is not exposed, and ordinary collection photographs remain private.

Disconnecting an account

Disconnecting a selling account deletes usable marketplace credentials, cancels pending consent and prevents a late authorisation or refresh from restoring the connection. The current implementation preserves the seller account identity, connection history and marketplace listing or sale records after disconnect so historical records do not silently change ownership or lose their audit trail.

Service providers and information sharing

Information is shared only as needed to provide the service or when required by law. Current infrastructure includes:

• Supabase for authentication, database, server functions and protected storage.
• Cloudflare for public website delivery, Trovecta account landing pages and public brand assets.
• Resend for transactional Trovecta account email.
• Sentry for production error reporting and technical diagnostics.
• eBay when you choose to connect an eBay account or use a future listing workflow.

When a marketplace listing is created, the selected listing information and selected selling-photo URLs are sent to that marketplace under its own terms and privacy policy.

International transfers

Some service providers may process information outside the United Kingdom. Where UK data protection law treats that as a restricted transfer, we use an approved route appropriate to the destination and provider, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can ask us for more information about the safeguard relevant to your data.

How information is protected

Trovecta uses HTTPS for public services, authenticated workspace boundaries, private storage for collection media, server-only marketplace credentials and encrypted marketplace token storage. Exhibit can use an optional biometric lock on a supported device. Access is restricted according to the service role and workspace involved.

No system can promise absolute security. If a security issue is identified, the response will be based on the affected data, people and applicable obligations.

Retention and deletion

We keep account and collection information while it is needed to provide the account or product. We may keep limited records for longer where they are needed for security, dispute resolution, legal compliance or the establishment, exercise or defence of legal claims. The deciding criteria are the type of information, the user’s choices, whether the account or workspace remains active, technical and security needs, and any applicable legal requirement. Authentication sessions and credentials can expire or be revoked independently of the content they protect.

For marketplace connections, usable access and refresh tokens are deleted when the account is disconnected. Seller identity, connection history and marketplace listing or sale records currently remain with the Trovecta account so the product can preserve ownership, status and audit history. A deletion request can be made using the contact details below; we will assess it against any records we still need to keep.

An original Exhibit photograph remains part of the user’s private collection until the user deletes that collection content. A separate selling-photo copy may remain available at its opaque public URL until Trovecta removes it manually. You can ask us to remove that public copy. Automated cleanup must be added before marketplace selling is made generally available. A marketplace controls any copy it has already retrieved, including what it retains after a listing ends, under its own terms and privacy policy.

Your choices and requests

You can choose what collection information and photographs to add, whether to use optional assisted features, whether to enable the device biometric lock and whether to connect or disconnect a marketplace account. A connected marketplace account can also be revoked through the marketplace’s own account controls.

Depending on the circumstances, UK data protection law may give you rights to access, correct or erase personal information; restrict or object to processing; receive certain information in a portable form; and withdraw consent where processing relies on consent. These rights are not absolute. We may need to verify your identity before acting on a request.

Send a request to contact@trovecta.com. You may also complain to the UK Information Commissioner’s Office through its complaints service. We would appreciate the opportunity to address your concern first.

Website data and cookies

This public website does not currently use analytics, advertising cookies or behavioural tracking. Cloudflare processes ordinary network and request information to deliver and protect the site. If optional cookies or analytics are introduced, the website and this policy will be updated and consent will be requested where required.

Contact

For privacy questions or requests, email contact@trovecta.com or write to:

Changes to this policy

We will update this policy when product or data practices change. If a change materially affects how personal information is used, we will provide an appropriate notice before the changed processing begins. The effective date at the top identifies the current version.