Legal
Last updated: September 2026
Terms of Use
Business Information
Showplace.art is a product offered by Waypoint Software Pty Ltd. ABN: 60 695 352 295. Registered Address: 45 St George's Tce, Perth, WA 6000, Australia. Contact Email: hello@showplace.art, or signed-in members may use this form.
1. Acceptance of Terms
By accessing or using Showplace.art (the "Service"), you agree to be bound by these Terms of Use ("Terms"). If you do not agree, please do not use the Service. These Terms are governed by the laws of Australia.
2. Account Registration
Access to the Service requires an account. We use a magic-link authentication system — no password is set or stored. You will receive a one-time login link by email each time you sign in. You are responsible for ensuring the email address associated with your account is secure and accessible only by you.
3. Instagram Integration
The Service connects to your Instagram account via Meta's official OAuth API to import your posts and profile information. By connecting your Instagram account you authorise us to access, store, and display your Instagram content within your Showplace gallery. You may revoke this connection at any time from your Instagram settings. We do not post to Instagram on your behalf.
4. User Content and Intellectual Property
You retain full ownership of all content you upload or import through the Service ("User Content"), including artwork, images, descriptions, and pricing. By using the Service, you grant Showplace.art a limited, non-exclusive, royalty-free licence to host, display, and serve your User Content solely for the purpose of operating the Service on your behalf. We will not use your content for any other purpose, including marketing, without your explicit consent.
5. In-situ Preview Images
For artists on a Pro plan who enable the feature, the Service can automatically generate "in-situ" preview images that composite your artwork onto stock room photographs, for illustrative purposes only. These images do not represent the true physical size, proportions, or appearance of the artwork, and are not to scale. Each in-situ image displayed alongside an artwork on your published gallery includes a disclaimer to this effect. In-situ images are generated from, and stored alongside, your other artwork images, and are removed automatically if you disable the feature, change your selected templates, or lose Pro access.
6. Payments
Payment processing for sales made through your Showplace gallery is handled by Stripe, Inc. By accepting payments you agree to Stripe's Terms of Service. Showplace.art is not a party to transactions between you and your customers.
7. Subscription and Fees
Showplace offers a free tier and a paid "Pro" tier. You can obtain Pro access in one of three ways: (a) as one of the "Founding 100" — the first 100 galleries published on Showplace receive Pro free, permanently, as an early-adopter reward; (b) by purchasing a limited-time one-off "lifetime" payment offering permanent Pro access at a fixed price; or (c) by signing up for an ongoing monthly subscription, billed automatically via Stripe.
Subscription prices are set in Australian dollars (A$). Depending on your location, Stripe's Adaptive Pricing may let you complete payment in your own currency, converted at the prevailing rate at the time of payment.
Subscription payments are billed automatically each period until cancelled. Cancellation takes effect at the end of the current paid billing period. We do not provide partial refunds for the remainder of a period already paid for.
Payments for subscriptions and lifetime access are generally non-refundable for change of mind, including for any unused portion of a billing period. This does not affect any rights or remedies that cannot be excluded under the Australian Consumer Law or other applicable consumer protection law (see clause 11).
Personal and payment data collected for Pro billing (such as your email, billing details and payment method) is transferred to and processed by Stripe, Inc. This is handled consistently with the payment data described in clause 6 and the processors table in the GDPR section below.
For help with billing, subscription management, or refunds, please contact us via the Business Information email address above.
8. Prohibited Conduct
You must not use the Service to:
- sell counterfeit, stolen, or infringing content;
- display hateful, violent, or adult content;
- violate any applicable law or regulation;
- attempt to gain unauthorised access to any part of the Service or its infrastructure;
- transmit malicious code, spam, or engage in automated scraping;
- impersonate another person or misrepresent your affiliation with any entity.
9. Termination
You may close your account at any time by contacting us. We reserve the right to suspend or terminate accounts that violate these Terms, without prior notice where necessary to protect the integrity of the Service or its users.
10. Limitation of Liability
To the maximum extent permitted by law, Showplace.art's liability for any claim arising from your use of the Service is limited to the amount you paid to us in the 12 months preceding the claim. We are not liable for indirect, incidental, or consequential loss or damage.
11. Australian Consumer Law
Nothing in these Terms limits, excludes, or modifies any rights you may have under the Australian Consumer Law (Schedule 2 to the Competition and Consumer Act 2010 (Cth)) that cannot be excluded. Where we are permitted to limit our liability for breach of a consumer guarantee, our liability is limited to re-supplying the relevant service or paying the cost of re-supply.
12. Changes to Terms
We may update these Terms from time to time. We will notify you of material changes by email or via a notice within the Service. Continued use after the effective date of an update constitutes your acceptance of the revised Terms.
13. Governing Law
These Terms are governed by the laws of Australia. Any disputes are subject to the exclusive jurisdiction of the courts of Australia.
Privacy Policy
This Privacy Policy explains how Showplace.art collects, uses, stores, and discloses personal information. It is compliant with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and includes additional disclosures required under the EU General Data Protection Regulation (GDPR) for users located in the European Economic Area. Our GDPR-specific disclosures are in the GDPR section below.
1. What We Collect
- Email address — provided at sign-up and used for magic-link authentication, transactional emails (sale notifications, receipts), and (unless you opt out) our updates newsletter and product tips.
- Instagram profile and post data — imported via the Instagram API when you connect your account. This includes your username, profile picture, captions, and post images.
- Payment and order data — when your customers purchase through your gallery, order details (buyer name, email, shipping address, order amount) are stored to fulfil and track sales. Card data is never stored by us — it is handled directly by Stripe.
- Usage analytics — we use Plausible Analytics, a cookieless, privacy-first analytics tool hosted in the EU. Plausible does not use cookies, does not track individuals across sites, and does not collect personal data. See Plausible's privacy policy.
- Community feedback board — when you visit our hosted feedback board at
community.showplace.art(powered by Fider) while logged in, we pass an obfuscated user identifier, your display name, and your email address so you can post ideas and vote without a separate registration step.
2. How We Collect It
- Directly from you when you register and provide your email address.
- Via Meta's Instagram OAuth API when you connect your Instagram account.
- Via Stripe webhooks when a sale is made through your gallery.
- Automatically via Plausible Analytics when visitors browse the platform (no cookies, no personal data).
3. Why We Collect It (Purpose)
- To create and manage your account.
- To operate your Showplace gallery and display your content to visitors.
- To process and notify you of sales made through your gallery.
- To send essential transactional emails (magic-link logins, sale notifications, order receipts).
- To send occasional opt-in emails — our updates newsletter and product tips (see Email Communications & Opt-Out below).
- To understand aggregate platform usage and improve the Service.
4. Email Communications & Opt-Out
We send three kinds of email, which fall into two categories:
- Essential transactional emails (required) — magic-link logins, sale notifications, and order receipts. These are necessary to operate your account and cannot be disabled while your account is active.
- Updates newsletter (optional) — occasional emails about new features, improvements, and platform news.
- Product tips (optional) — occasional emails with tips and guidance to help you get the most out of Showplace.
When you register for a Showplace.art account, you are automatically opted-in to both optional email groups — the updates newsletter and product tips. We consider this a reasonable expectation of holding an account with us, and you can opt out of either at any time.
Every optional email includes a one-click unsubscribe link at the bottom. Clicking it immediately and permanently removes you from that list — no login required. You can also contact us at the email address in the Business Information section to be unsubscribed. Opting out of one optional group does not affect the other, and neither affects essential transactional emails.
5. Who We Share It With
We do not sell your personal information. We share it only with the third-party service providers necessary to operate the Service:
- Heroku (EU region) — cloud hosting and infrastructure.
- Mailgun — transactional email delivery.
- Stripe — payment processing.
- Meta / Instagram — OAuth authentication and content import.
- Plausible Analytics — cookieless, privacy-first analytics (no personal data).
- Community feedback board — your obfuscated user identifier, display name, and email are shared with our hosted feedback board at
community.showplace.art(powered by Fider) so you can participate without creating a separate account. This is operated as first-party Showplace infrastructure.
A full list of processors and sub-processors, including their locations and GDPR transfer mechanisms, is in the GDPR section.
6. Data Retention
We retain your personal information for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law (e.g. financial records for tax compliance).
7. Cookies
Showplace.art does not use tracking cookies. Our analytics provider (Plausible) is cookieless by design. We may use strictly necessary session cookies for authentication purposes only — these are not used for tracking or advertising.
8. Access and Correction (Australian Privacy Principles 12 & 13)
You have the right to request access to the personal information we hold about you, and to request correction of any inaccurate information. To make a request, contact us at the email address listed in the Business Information section. We will respond within 30 days.
9. Complaints
If you believe we have not handled your personal information in accordance with the Australian Privacy Principles, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice within the Service.
GDPR Disclosures
This section applies to individuals located in the European Economic Area (EEA) and supplements the Privacy Policy above. It is provided in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR").
Data Controller
The data controller for personal data processed through the Service is the business entity identified in the Business Information section above. For privacy enquiries or to exercise your rights, contact us at the email address listed there.
Lawful Bases for Processing
We process your personal data on the following lawful bases under Article 6 GDPR:
- Contract (Art. 6(1)(b)) — processing your email address to deliver the Service, authenticate your account, and notify you of sales.
- Legitimate Interests (Art. 6(1)(f)) — aggregate, anonymised analytics to improve the Service. Our legitimate interests are not overridden by your data protection rights given that Plausible collects no personal data and uses no cookies.
- Consent (Art. 6(1)(a)) — connecting your Instagram account. You may withdraw this consent at any time by revoking the connection in your Instagram settings.
Your Rights Under GDPR
As an EEA resident you have the following rights in relation to your personal data:
- Right of access (Art. 15) — request a copy of the data we hold about you.
- Right to rectification (Art. 16) — request correction of inaccurate data.
- Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten").
- Right to restriction (Art. 18) — request that we restrict processing of your data in certain circumstances.
- Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
- Right to object (Art. 21) — object to processing based on legitimate interests.
To exercise any of these rights, contact us at the email address in the Business Information section. We will respond within 30 days.
Right to Lodge a Complaint
If you believe we are processing your personal data in violation of the GDPR, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu.
Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law. Account data is deleted or anonymised within 30 days of account closure.
Processors and Sub-Processors
We use the following third-party processors and sub-processors. Each has entered into a Data Processing Agreement (DPA) or equivalent, and appropriate safeguards are in place for any transfers outside the EEA.
| Service | Role | Location | GDPR Transfer Mechanism |
|---|---|---|---|
| Heroku (Salesforce) | Cloud hosting & infrastructure | EU (Dublin / Frankfurt) | Data processed within the EEA — no transfer |
| Mailgun (Sinch) | Transactional email delivery | EU endpoint (Frankfurt) | Data processed within the EEA — no transfer. DPA available. |
| Stripe, Inc. | Payment processing | United States | Standard Contractual Clauses (SCCs) and Stripe's EU DPA. DPA available. |
| Meta Platforms, Inc. (Instagram) | OAuth authentication & content import | United States | Standard Contractual Clauses (SCCs). Subject to Meta's Data Policy. |
| Plausible Analytics | Privacy-first, cookieless web analytics | EU (Germany) | Data processed within the EEA — no transfer. No personal data collected. Data policy. |