Privacy during local testing
Use sample names, email addresses and briefs. This version is for testing; avoid sensitive personal information.
What is stored
Your account email, password hash, sessions, briefs, saved works and introduction requests are stored in the local database. Advisor client names and their briefs are private to the advisor account. The test operator can access records for support and checks.
Images and sharing
Artwork uploads go to a private S3-compatible service when configured, even though the app runs locally. Images are converted to JPEG with embedded metadata removed. Artist drafts remain private until approved. Approved artwork details can be shown in discovery and selected shared links.
Anyone holding a shortlist link can view its selected works and sharing note for up to seven days, unless revoked first. Client names, budgets and private brief notes are excluded. Local links only work where the local app is reachable.
Sessions and notifications
An essential HTTP-only session cookie lasts up to seven days. Sign out to end your session. Operator email notifications remain disabled unless mail delivery is configured. Test notices may identify an inquiry and work; private brief and client notes are excluded.
Remove test data
Ask the person running this local test to remove your test account, associated records and uploaded images. Database archives and S3 objects are separate copies and need separate cleanup. There is no automatic deletion schedule or self-service deletion screen yet. Do not treat this local test as a place to keep permanent records.