Legal

Terms of Use

Business Information

Showplace.art is a product offered by Waypoint Software Pty Ltd. ABN: 60 695 352 295. Registered Address: 45 St George's Tce, Perth, WA 6000, Australia. Contact Email: hello@showplace.art

1. Acceptance of Terms

By accessing or using Showplace.art (the "Service"), you agree to be bound by these Terms of Use ("Terms"). If you do not agree, please do not use the Service. These Terms are governed by the laws of Australia.

2. Account Registration

Access to the Service requires an account. We use a magic-link authentication system — no password is set or stored. You will receive a one-time login link by email each time you sign in. You are responsible for ensuring the email address associated with your account is secure and accessible only by you.

3. Instagram Integration

The Service connects to your Instagram account via Meta's official OAuth API to import your posts and profile information. By connecting your Instagram account you authorise us to access, store, and display your Instagram content within your Showplace gallery. You may revoke this connection at any time from your Instagram settings. We do not post to Instagram on your behalf.

4. User Content and Intellectual Property

You retain full ownership of all content you upload or import through the Service ("User Content"), including artwork, images, descriptions, and pricing. By using the Service, you grant Showplace.art a limited, non-exclusive, royalty-free licence to host, display, and serve your User Content solely for the purpose of operating the Service on your behalf. We will not use your content for any other purpose, including marketing, without your explicit consent.

5. Payments

Payment processing for sales made through your Showplace gallery is handled by Stripe, Inc. By accepting payments you agree to Stripe's Terms of Service. Showplace.art is not a party to transactions between you and your customers.

6. Subscription and Fees

The Service is currently offered at no charge to early-access users. We may introduce paid plans in the future. If we do, you will be notified in advance with full details of any fees, billing cycle, and cancellation terms before any charge is made. Continued use of the Service after fees are introduced constitutes acceptance of the updated pricing terms.

7. Prohibited Conduct

You must not use the Service to:

• sell counterfeit, stolen, or infringing content;
• display hateful, violent, or adult content;
• violate any applicable law or regulation;
• attempt to gain unauthorised access to any part of the Service or its infrastructure;
• transmit malicious code, spam, or engage in automated scraping;
• impersonate another person or misrepresent your affiliation with any entity.

8. Termination

You may close your account at any time by contacting us. We reserve the right to suspend or terminate accounts that violate these Terms, without prior notice where necessary to protect the integrity of the Service or its users.

9. Limitation of Liability

To the maximum extent permitted by law, Showplace.art's liability for any claim arising from your use of the Service is limited to the amount you paid to us in the 12 months preceding the claim. We are not liable for indirect, incidental, or consequential loss or damage.

10. Australian Consumer Law

Nothing in these Terms limits, excludes, or modifies any rights you may have under the Australian Consumer Law (Schedule 2 to the Competition and Consumer Act 2010 (Cth)) that cannot be excluded. Where we are permitted to limit our liability for breach of a consumer guarantee, our liability is limited to re-supplying the relevant service or paying the cost of re-supply.

11. Changes to Terms

We may update these Terms from time to time. We will notify you of material changes by email or via a notice within the Service. Continued use after the effective date of an update constitutes your acceptance of the revised Terms.

12. Governing Law

These Terms are governed by the laws of Australia. Any disputes are subject to the exclusive jurisdiction of the courts of Australia.

Privacy Policy

This Privacy Policy explains how Showplace.art collects, uses, stores, and discloses personal information. It is compliant with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and includes additional disclosures required under the EU General Data Protection Regulation (GDPR) for users located in the European Economic Area. Our GDPR-specific disclosures are in the GDPR section below.

1. What We Collect

• Email address — provided at sign-up and used for magic-link authentication and transactional emails (sale notifications, receipts).
• Instagram profile and post data — imported via the Instagram API when you connect your account. This includes your username, profile picture, captions, and post images.
• Payment and order data — when your customers purchase through your gallery, order details (buyer name, email, shipping address, order amount) are stored to fulfil and track sales. Card data is never stored by us — it is handled directly by Stripe.
• Usage analytics — we use Plausible Analytics, a cookieless, privacy-first analytics tool hosted in the EU. Plausible does not use cookies, does not track individuals across sites, and does not collect personal data. See Plausible's privacy policy.

2. How We Collect It

• Directly from you when you register and provide your email address.
• Via Meta's Instagram OAuth API when you connect your Instagram account.
• Via Stripe webhooks when a sale is made through your gallery.
• Automatically via Plausible Analytics when visitors browse the platform (no cookies, no personal data).

3. Why We Collect It (Purpose)

• To create and manage your account.
• To operate your Showplace gallery and display your content to visitors.
• To process and notify you of sales made through your gallery.
• To send transactional emails (magic-link logins, sale notifications, order receipts).
• To understand aggregate platform usage and improve the Service.

4. Who We Share It With

We do not sell your personal information. We share it only with the third-party service providers necessary to operate the Service:

• Heroku (EU region) — cloud hosting and infrastructure.
• Mailgun — transactional email delivery.
• Stripe — payment processing.
• Meta / Instagram — OAuth authentication and content import.
• Plausible Analytics — cookieless, privacy-first analytics (no personal data).

A full list of processors and sub-processors, including their locations and GDPR transfer mechanisms, is in the GDPR section.

5. Data Retention

We retain your personal information for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law (e.g. financial records for tax compliance).

6. Cookies

Showplace.art does not use tracking cookies. Our analytics provider (Plausible) is cookieless by design. We may use strictly necessary session cookies for authentication purposes only — these are not used for tracking or advertising.

7. Access and Correction (Australian Privacy Principles 12 & 13)

You have the right to request access to the personal information we hold about you, and to request correction of any inaccurate information. To make a request, contact us at the email address listed in the Business Information section. We will respond within 30 days.

8. Complaints

If you believe we have not handled your personal information in accordance with the Australian Privacy Principles, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice within the Service.

GDPR Disclosures

This section applies to individuals located in the European Economic Area (EEA) and supplements the Privacy Policy above. It is provided in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR").

Data Controller

The data controller for personal data processed through the Service is the business entity identified in the Business Information section above. For privacy enquiries or to exercise your rights, contact us at the email address listed there.

Lawful Bases for Processing

We process your personal data on the following lawful bases under Article 6 GDPR:

• Contract (Art. 6(1)(b)) — processing your email address to deliver the Service, authenticate your account, and notify you of sales.
• Legitimate Interests (Art. 6(1)(f)) — aggregate, anonymised analytics to improve the Service. Our legitimate interests are not overridden by your data protection rights given that Plausible collects no personal data and uses no cookies.
• Consent (Art. 6(1)(a)) — connecting your Instagram account. You may withdraw this consent at any time by revoking the connection in your Instagram settings.

Your Rights Under GDPR

As an EEA resident you have the following rights in relation to your personal data:

• Right of access (Art. 15) — request a copy of the data we hold about you.
• Right to rectification (Art. 16) — request correction of inaccurate data.
• Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten").
• Right to restriction (Art. 18) — request that we restrict processing of your data in certain circumstances.
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — object to processing based on legitimate interests.

To exercise any of these rights, contact us at the email address in the Business Information section. We will respond within 30 days.

Right to Lodge a Complaint

If you believe we are processing your personal data in violation of the GDPR, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu.

Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law. Account data is deleted or anonymised within 30 days of account closure.

Processors and Sub-Processors

We use the following third-party processors and sub-processors. Each has entered into a Data Processing Agreement (DPA) or equivalent, and appropriate safeguards are in place for any transfers outside the EEA.