FlashRack Privacy Policy

Version 1.0
Effective date: October 21, 2026

This Privacy Policy describes how Adam Dunn, doing business as Lucent Marketing (“FlashRack,” “we,” “us,” or “our”) collects, uses, shares, and retains information through the FlashRack website, applications, and services (“Platform”). FlashRack is intended for adults using a United States-focused marketplace.

1. Information We Collect

Accounts and profiles. We collect information such as names, email addresses, account roles, login identifiers, profile details, and Artist professional information. Authentication credentials are handled through our authentication infrastructure.

Artwork and marketplace activity. We process published artwork, descriptions, saved designs, artwork views, custom requests, private offers, reviews, and messages.

Bookings and payments. We maintain appointment dates and times, participating accounts, booking status, prices, refunds, tips, Artist earnings, issue reports, and transaction references. Stripe collects and processes payment details and Artist onboarding information as described in its own notices. FlashRack does not need to store full payment card numbers or Artists' bank account numbers to operate its normal payment workflows.

Studio and search locations. Artists provide studio names and street addresses. Collectors may enter a ZIP code, select a city, or grant browser/device permission for location-based discovery. Location permissions can be controlled through the browser or device.

Technical and security information. We may process IP addresses, session identifiers, browser/device information, authentication events, error records, and other information needed for operation, troubleshooting, and fraud prevention.

2. Why We Use Information

We use information to create and secure accounts; display artwork and Artist profiles; support discovery and distance filtering; provide private requests and messaging; create, confirm, manage, and cancel bookings; process payments, refunds, tips, and transfers; deliver transactional emails; calculate Artist activity and eligibility metrics; investigate issues and abuse; provide support; maintain business records; and comply with applicable law.

3. Studio Addresses and Geocoding

Artists' full studio street addresses are collected for appointment scheduling and fulfillment. FlashRack sends studio address information to Google Maps Geocoding services through server-side processing to obtain validated geographic coordinates. Public discovery uses coordinates rounded to two decimal places, which provide an approximate location but may still allow someone to infer a general studio area. Public location features do not intentionally disclose full street addresses.

After a booking is confirmed, the full studio address, including applicable suite information, is made available to the participating Collector. FlashRack stores a snapshot of the studio address and timezone associated with new bookings so subsequent profile changes do not silently alter the original appointment information. The Artist and authorized Platform systems also have access to information needed to fulfill and support bookings.

4. Payment Processing

Stripe processes card payments, refunds, tips, disputes, and connected-account onboarding. Stripe may collect identity, business, tax, and banking information from Artists under its own policies. FlashRack receives payment status, transaction identifiers, connected-account identifiers, and financial records needed to operate and reconcile the marketplace. Payment and dispute records may need to be retained after account closure.

5. Who Receives Information

Other marketplace participants. Artists and Collectors receive information needed for their shared bookings, communications, custom requests, and appointments. Public Artist profiles, published artwork, and public reviews may be visible to other users and visitors. Private custom-offer artwork is not intended for public browse or search.

Service providers. We use Supabase for authentication, database, and storage; Stripe for payments and connected accounts; Resend for transactional email; Google Maps Geocoding for studio address processing; and Cloudflare Workers for application hosting and delivery. These providers process relevant information to perform their services and may operate under their own privacy terms.

Legal, safety, and business purposes. We may disclose information where legally required, to address fraud or security threats, to enforce applicable rules, or as part of a lawful business reorganization or sale, subject to appropriate safeguards.

We do not currently use third-party advertising pixels or third-party marketing analytics tools in the Platform. We do not represent that the Platform is free of all operational logging or necessary service-provider processing.

6. Cookies and Local Storage

The Platform uses session, authentication, and preference technologies such as cookies or local storage as needed for account access, security, and functionality. If we introduce nonessential advertising or analytics tracking, we will update our disclosures and provide choices or obtain consent where required.

7. Transactional Communications

We use account and booking information to send necessary messages such as confirmations, cancellations, appointment reminders, review and tip invitations, and security notices. Email delivery records may include recipients, message types, timestamps, and provider status information. Transactional communications are distinct from optional marketing emails.

8. Data Security

We use authentication, access controls, restricted storage, and other technical measures intended to protect information. No system can guarantee absolute security. Please protect your account credentials and report suspected unauthorized access through our support contact.

9. Retention and Deletion

We retain information for as long as reasonably necessary for the purposes described here, including active accounts, bookings, payment reconciliation, fraud prevention, tax obligations, legal compliance, and dispute resolution. Retention periods depend on the record and applicable requirements. When information is no longer needed, we take reasonable steps to delete or de-identify it where feasible and legally appropriate.

Account deletion is not currently available as a completed self-service feature. To request closure, access, correction, or eligible deletion, contact support@flashrack.app. We may need to verify your identity. Some records cannot immediately be deleted because of legal or operational obligations.

10. Your Choices and Privacy Rights

You can update supported profile information, manage device location permissions, and contact us about personal information. Depending on your state and applicable law, you may have additional rights to access, correct, delete, or obtain information about certain processing, and to appeal certain request decisions. We will evaluate requests under the law that applies to the request and may provide additional notices when required.

11. Children

FlashRack is for adults aged 18 and older and is not intended for children. We do not knowingly offer accounts to minors. If we discover an account created by a person under 18, we may restrict it and take appropriate steps regarding associated information.

12. United States Focus

The Platform is initially intended for United States users. If we expand internationally, we may provide additional notices and protections required for those locations. Use from other jurisdictions may involve processing in the United States or other locations where our providers operate.

13. Policy Updates

We may update this Policy when our services or information practices change. We will identify the updated version and effective date and provide notice or request consent where required by law.

14. Contact

Adam Dunn, doing business as Lucent Marketing
6970 E. State Road 46 Bloomington, IN 47401
support@flashrack.app
Privacy requests: support@flashrack.app