Privacy

The short version

• We collect what’s needed to run bookings, payments, artist sites and tatted.studio — nothing to sell.
• We don’t sell personal data or use it for advertising.
• Card numbers go straight to Stripe; we never see or store them.
• tatted.studio keeps your designs on your own device unless you turn on cloud save.

What we collect

• Accounts: name, email, phone (if given), and the handle and settings of an artist’s site.
• Bookings: the service, time, placement, size, description, budget, and the messages between artist and client.
• Reference images: pictures clients send and anything they mark on them. These can show people and their skin.
• Consent forms: answers to the artist’s health and consent questions, which can include health information. Only the artist and the client can see them.
• Payments: amounts, status and payout records from Stripe. Stripe handles card and bank details under its own privacy policy.
• tatted.studio: designs and references are stored in your browser on your device. Cloud save, when you turn it on, stores them in your account.
• Site visits: anonymous counts for artists’ Insights, without cookies and without identifying visitors.

How it’s used

• To run the services: show sites, take and manage bookings, process payments, send confirmations and reminders, and run the tools you use.
• To keep them safe: prevent fraud and abuse, and fix problems.
• To let artists see their own business: clients, bookings, earnings and site visits.

AI tools

When an artist runs a tatted.studio AI tool, the image they chose (for example a client’s reference) is sent to an AI provider to produce the result: Google’s Gemini models or OpenAI’s image models, through OpenRouter or fal.ai. It’s sent only when the artist runs a tool, only for that request, and not to train our own models. Clients’ images aren’t sent to AI providers unless their artist runs a tool on them.

Who we share it with

• The artist or client you’re booking with — what they need for the appointment.
• Service providers that run parts of the services for us: Stripe (payments), Supabase (database and sign-in), Cloudflare (file storage), Vercel (hosting), Resend (email), Twilio (text messages), and the AI providers above.
• When the law requires it, or to protect people from harm or fraud.

How long we keep it

While your account is open, and afterwards only as long as needed for payments, tax, disputes and legal duties. Artists’ booking records are kept for them unless they delete them. Designs stored only in your browser stay there until you clear them.

Deleting your account

You can delete your account yourself — artists from the dashboard (Setup → Account & data), clients from their Profile. Before anything happens you see what goes and what is kept.

• Clients: your name, email, phone and city are removed from every artist’s records (they see “Deleted client”), your sign-in is closed, and your booking links, waitlist spots, referral codes and email choices go. Artists keep their booking and payment records without your details, and signed consent forms, because tax and state tattoo rules require them to.
• Artists: your site comes down; your name, bio, links, studio address, photos, hours, private client notes and tatted.studio cloud files are removed and your sign-in is closed. Booking, payment, order, refund and gift-card records and signed consent forms are kept, because tax and state tattoo rules require them. Your handle stays reserved so nobody can pose as you. Your Stripe account is between you and Stripe.
• Anything still in progress (an upcoming appointment, an unshipped order, an active Pro plan) has to be finished or cancelled first.

Your choices

• See, correct, download or delete your data from your account (artists: Setup → Account & data; clients: Profile), or by emailing mnmncoda@gmail.com.
• Clients can ask an artist to delete their booking details and images.
• Turn off reminder texts and marketing emails at any time: every optional email has an unsubscribe link, and your Profile has all the choices. Emails about your booking or payments always come.

Age

The services are for people 18 and older. We don’t knowingly collect information from anyone younger.

Contact

tatted.me · mnmncoda@gmail.com. We’ll tell you about material changes to this policy before they take effect.