Privacy policy

Last updated: 17 October 2026

In the event of any discrepancy, the French version prevails.

Data controller

MARMALADE SOFTWARE LLC, publisher of MARMALADE, whose contact details appear in the legal notice. For any question about your data: contact@marmalade.art.

MARMALADE SOFTWARE LLC is established outside the European Union. Its representative in the Union (Article 27 of the GDPR) is Prighter EU Rep GmbH, Schellinggasse 3, 1010 Vienna, Austria. You can also write to contact@marmalade.art with any question about your data.

Data we collect

• Account: name, professional email address, gallery name, password (encrypted).
• Billing: billing details and subscription payment history.
• Usage: technical logs required for security and service operation.
• Business data: the works, contacts and documents you record in MARMALADE remain your property; we process them solely to provide the service.

Purposes and legal bases

Providing the service (performance of the contract), billing and accounting obligations (legal obligation), security and abuse prevention (legitimate interest), service communications (performance of the contract) and, with your consent, commercial communications.

Hosting and processors

The application and your data are hosted in France (Paris / Gravelines), with an encrypted daily backup on a second site. Our technical processors are established in the European Union or covered by GDPR-compliant safeguards.

The data remains hosted in France, with Clever Cloud and OVH. MARMALADE SOFTWARE LLC, established in the United States, may access it to operate the service; such access is subject to appropriate safeguards.

Website chat (Crisp): Crisp IM SAS, 2 boulevard de Launay, 44100 Nantes, France. Purpose: replying to the messages you send us through the chat. Data processed: the content of your messages, your email address or name if you choose to give them, and technical connection data (IP address, browser, page you came from). Crisp's servers are in the European Union: messages in the Netherlands, plugin data in Germany. Relay servers outside the Union (United States, United Kingdom, Singapore) keep connection logs only. The chat loads, and sets its cookies, only when you click "Write to the team".

Retention

Account data is kept for the duration of the subscription, then deleted or anonymised at the latest 12 months after closure, subject to legal obligations (invoicing documents: 10 years). On closure, your accounting exports (FEC, invoices) and your downloadable documents are offered. For any other data, you may exercise your right to portability by writing to contact@marmalade.art.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. Write to contact@marmalade.art. You may also lodge a complaint with the CNIL (cnil.fr).

Cookies

The public website uses no advertising trackers. Only technical cookies strictly necessary for the application to work (session, security) are set.

If you click "Write to the team", the Crisp chat loads and sets its own cookies (names starting with crisp-client/), which keep your conversation from one page to the next. They expire after six months. None is set until you click.