Private viewing rooms that inherit live inventory (and what breaks when they do not)

Private viewing rooms fail quietly. The collector clicks a link from Tuesday's email, spends four minutes on a painting you reserved Wednesday afternoon, and writes back with interest you can no longer honour. The room looked professional. The inventory graph underneath did not update when the hold landed.

Stale rooms are not a design problem. They are a data plumbing problem. This post explains what registrar-grade viewing rooms should inherit from inventory, what to keep private, and the failure modes that still send galleries back to PDF attachments.

One work ID from catalogue to room to invoice

A viewing room is not a slideshow. It is a filtered, permissioned view of works that already exist in inventory. Titles, dimensions, edition position, primary images, list price, and availability should render from the object record — not from JPEGs pasted into a deck on Monday night.

When a registrar edits a dimension after framing, every room referencing that work should reflect the correction on the next load. When a work sells, it should disappear from availability, show a sold badge where your policy calls for it, or remain visible only to audiences you explicitly allow.

That propagation is the difference between a room tool and a room surface on the same graph as inventory management, CRM, and invoicing.

What to publish vs what to redact

Not every field belongs in a collector-facing room. Consignor identity, net splits, reserve holder, and internal condition notes stay internal. Public list price may differ from VIP net quotes. Confidential consignments should never leak because someone duplicated a fair checklist into a room without redaction rules.

Strong systems separate visibility from existence. A work can be in inventory, on consignment under negotiation, and absent from every public surface until strategy says otherwise. Rooms inherit that policy instead of requiring a second manual list.

Per-recipient grants, not one password for everyone

Sharing a single URL and password across a mailing list trains collectors to forward links you cannot revoke per person. Per-recipient share grants let you expire access, watermark images for forensic traceability, and see which contact opened which work.

Offer emails and campaign blocks should mint grants automatically so the room URL in the message maps to one collector, not to the entire segment. Follow-up tasks belong on the contact timeline when someone views a work for more than a threshold without replying.

Multi-currency display without FX guesswork

International collectors expect to read prices in familiar currencies. Rooms should show per-artwork display prices you documented in inventory — not live FX conversion that shifts between page load and invoice issue.

When a room enables a currency menu, each option should trace to a field on the work. The invoice should inherit the currency and amount quoted in the room, not a surprise conversion on checkout.

Rooms in email, on the site, and at the fair

Three surfaces, one checklist:

Email embed. Campaign blocks pull a live room with per-recipient URLs and optional password merge tags. Sold works drop out before the next resend.

Website embed. An iframe block on your public site can show a room for a current exhibition without rebuilding a static gallery page after every sale.

Fair week. Lock the booth checklist in inventory, publish early rooms for invited collectors, and reconcile holds back to the catalogue each evening. Booth staff should confirm availability on a tablet without calling the office.

PDF export is a snapshot, not a second catalogue

Collectors still ask for PDFs. Export should read the same fields the room displays, in the language and currency context you chose, without retyping captions. If the PDF disagrees with the link you sent an hour ago, trust erodes faster than any layout polish can recover.

Failure modes to watch for in demos

• Room works are copies that do not update when inventory changes.
• Sold state updates in inventory but not on the public site or in email embeds.
• Confidential consignments appear because the room was built from an unfiltered export.
• Prices in the room, PDF, and invoice are three different numbers.
• Analytics show opens but do not tie back to contacts or pipeline stages.

The bottom line

The right viewing room is the public face of records you already maintain. Build the room from a saved inventory selection, send it through per-recipient grants, and let sold and reserved states propagate everywhere the work appears. That is how private sales stop being a parallel project and become the downstream consequence of accurate inventory.

Art.industries links rooms to CRM, pipeline, offer emails, and Website Studio on one workspace. Publish one fair checklist as a room, watch reserves update the same record your invoicing reads, and measure which collectors opened which works before you write the follow-up. The room is only as honest as the catalogue behind it.