Privacy Policy

Last revised September 15, 2026

Internal draft — requires legal review before publication. Bracketed items are open decisions for counsel. This draft has not been reviewed by an attorney and is not in effect.

Cove Collect, Inc. ("Cove," "we," "us") provides a managed collection service for private collectors and institutions. This policy describes what information we collect, how we use it, and the choices you have. It applies to www.covecollect.com and to the Cove service.

Our starting principle is simple: your collection record is yours. We collect what the service requires, we share it only at your direction or as the law requires, and we do not sell it to anyone.

Information we collect

Information you provide. When you contact us or become a client, we collect contact details (name, email, phone), information about your role (collector, advisor, institution), and the information the engagement requires.

Collection records. The heart of the service is your collection record: descriptions of works, images, provenance and purchase documents, condition reports, valuations and their supporting evidence, location information, and recordings you choose to make, including voice recordings attached to works. This information is provided by you, gathered with your permission, or researched on your behalf as part of the engagement.

Information collected automatically. Like most websites, we collect standard technical information when you visit: IP address, browser type, pages viewed, and similar log data.

How we use information

We do not sell your personal information or your collection records, and we do not share them with third parties for their own marketing.

How information is shared

At your direction. Sharing is the point of a permissioned record: your advisor, insurer, attorney, family members, and guests see what you have granted them and nothing more. Every grant is set by you and revocable by you.

Service providers. We use a small number of vendors to operate the service (such as cloud hosting and communications). They process information only on our instructions and are bound by confidentiality obligations.

Professional requirements. Appraisal work is subject to professional standards (USPAP) that include recordkeeping requirements. Workfiles are retained as those standards require and are held in confidence.

Legal requirements. We may disclose information when compelled by law, subpoena, or court order. Where we are legally permitted to notify you and it is practicable to do so, we will, and we will give you a reasonable opportunity to object.

Corporate events. If Cove is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy's commitments.

Security

Your records are encrypted in transit and at rest. Access within Cove is limited to the people serving your engagement. Cove's infrastructure providers maintain SOC 2 Type II attestation reports for the services they provide to us. Cove has not yet completed a SOC 2 examination of its own; we are happy to walk any security reviewer through our current controls. More on our approach is on the Security page. Voice recordings you add to your record are stored as media; we do not use them to create voiceprints or for identification.

Retention

We retain your information for as long as you are a client and as long afterward as the law and professional appraisal standards require. When retention is no longer required, information is deleted or de-identified in accordance with our retention schedule; copies held in backups are purged on our ordinary backup cycle. You may request deletion at any time, subject to those same legal and professional obligations.

Your rights and choices

Guests and shared access

When a collector shares part of a record with you as a guest, family member, or advisor, your access is governed by the grants the collector set. We collect minimal information about grantees (such as an email address for authenticated access) and use it only to operate the sharing feature.

Children

The service is not directed to children under 16, and we do not knowingly collect their information. Access grants to family members under 16 are made by the collector, who is responsible for them.

Changes to this policy

If we change this policy, we will post the new version here and update the date above. For material changes affecting active clients, we will tell you directly.

Contact

Questions, requests, or concerns: hello@covecollect.com, or Cove Collect, Inc., c/o A Registered Agent, Inc., 8 The Green, Suite A, Dover, Delaware 19901.