Privacy Policy

1. Introduction

InkBook (“we,” “us,” or “our”) takes privacy seriously — and we take it especially seriously when it comes to health data. The tattoo booking process involves collecting information about your body and medical history so artists can provide you with safe, informed service. We handle that information with care.

This Privacy Policy describes what personal information we collect about tattoo artists and their clients, how we use and protect that information, with whom we share it, and the choices you have regarding your data. This policy applies to all users of the InkBook platform available at inkbook.pro and related subdomains.

By using InkBook, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

2. Information We Collect

2.1 Artist Account Information

When you create an artist account, we collect:

• Identity information: First name, last name, and display name as you choose to present yourself to clients.
• Contact information: Email address and, optionally, a phone number for notification purposes.
• Authentication: Your password is hashed using bcrypt before storage. We never store your plaintext password and we cannot retrieve it.
• Studio information: Studio name, street address, city, state, zip code, and country that you provide on your profile.
• Portfolio images: Photos of your tattoo work that you upload to your profile. These are stored on Vercel Blob storage and are publicly accessible via your booking page.
• Business settings: Your booking preferences, availability schedule, deposit requirements, cancellation policy, tattoo styles, and any other settings you configure in your dashboard.
• Subscription data: Your current subscription tier and billing status as reported by Stripe.

2.2 Client Booking Information

When a client submits a booking request through InkBook, we collect:

• Contact information: Full name, email address, and phone number.
• Tattoo details: Tattoo description, placement on the body, approximate size, style preferences, color vs. black-and-grey preference, and estimated budget.
• Reference images: Any photos you upload as design references for the artist.
• Health and medical information: Allergy history (including latex, ink pigments, and medications), current use of blood thinners or anticoagulants, pregnancy or nursing status, known skin conditions (including keloid tendency, eczema, psoriasis, and similar), current medications that may affect healing or the tattooing process, and any other medical conditions you disclose that are relevant to receiving a tattoo safely.
• Identity verification documents: On platforms that have enabled ID verification (Pro tier), a photo of a government-issued ID uploaded by the client.
• Digital consent signatures: On platforms that have enabled digital waivers (Pro tier), an electronic signature and the timestamp of your consent.
• Preferred appointment date: The date or date range you request for your appointment.

This booking information is associated with the specific artist you are booking. It is stored in our database and in Vercel Blob storage for file attachments.

2.3 Payment Information

All payment processing is handled by Stripe, Inc. We do not collect or store raw payment card numbers, bank account numbers, or full card details on our servers at any time. When you make a payment through InkBook, your card information is transmitted directly to Stripe’s secure payment infrastructure.

InkBook retains only the following payment-related data:

• Your Stripe customer ID (an opaque identifier assigned by Stripe to your account).
• Your current subscription status and plan tier (e.g., Free, Basic, Pro).
• Stripe subscription and payment intent IDs for record-keeping and support purposes.

For more information on how Stripe handles your payment data, please review Stripe’s Privacy Policy.

2.4 Usage Data

We collect standard web analytics data, including pages visited, time on page, referring URL, browser type, and device type. This data is collected in aggregate and is used to understand how InkBook is used and to improve the platform. We do not use third-party advertising trackers.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service operation: To create and maintain your account, operate the booking platform, process booking requests, and facilitate communication between artists and clients.
• Notifications: To send transactional emails, including booking request notifications, acceptance or decline confirmations, appointment reminders, and account updates. We use Resend for transactional email delivery.
• Billing: To process subscription payments, manage your subscription status, and send billing-related communications via Stripe.
• Safety: To surface health and allergy information to the booking artist so they can make informed decisions about whether and how to proceed with a service.
• Platform improvement: To analyze aggregate usage patterns and improve InkBook’s features, performance, and user experience.
• Legal compliance: To comply with applicable laws, respond to lawful legal processes, and protect the rights and safety of InkBook, its users, and the public.

4. Health Information

We treat health and medical information with heightened care and apply additional protections to it:

• Health information you provide in a booking request is shared only with the specific artist you are booking. It is not visible to other InkBook users or the general public.
• Health information is never sold, rented, or licensed to any third party. It is never used for advertising, profiling, or any purpose unrelated to the booking for which it was provided.
• Health data is stored encrypted at rest in our database, hosted on Vercel’s infrastructure.
• We do not share health information with advertisers, data brokers, insurance companies, or any party not directly involved in providing you with the Service.

While we take significant precautions to protect your health data, no internet transmission or storage system is 100% secure. You provide health information at your own risk and in recognition of the safety-critical purpose for which it is requested.

5. ID Verification Data

When an artist’s booking page requires ID verification (a Pro tier feature), clients upload a photo of a government-issued identification document as part of their booking request. This document is:

• Stored securely on Vercel Blob storage with access controls that restrict retrieval to authenticated requests associated with the booking.
• Accessible only to the artist associated with that specific booking. It is not viewable by InkBook staff in normal operations or by any other party.
• Never used for identity verification services, background checks, or any purpose beyond confirming the client’s identity to the booking artist.

You may request deletion of your ID verification document at any time by emailing hello@inkbook.pro. We will process your request within 30 days. Note that if you have an active booking, the artist may have already reviewed your document prior to deletion.

6. Sharing Your Information

We do not sell your personal information. We share your information only in the following circumstances:

• With the artist you are booking: Your full booking request, including contact details, tattoo description, health information, reference images, ID verification documents, and digital consent signatures, is shared with the specific artist whose booking page you submitted through. The artist uses this information to evaluate and respond to your request.
• Stripe (payment processing): Payment details are transmitted to Stripe for processing subscription fees and client deposits. Stripe processes payment data under their own privacy policy.
• Resend (transactional email): Your name and email address are shared with Resend to deliver transactional emails such as booking confirmations and reminders. Resend processes email data under their own privacy policy.
• Vercel (hosting and storage): All application data is hosted on Vercel’s infrastructure, including our database, file storage, and application runtime. Vercel processes this data under their Data Processing Addendum.
• Legal requirements: We may disclose your information if required to do so by law or in response to a valid legal process (such as a subpoena, court order, or search warrant), or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

We do not share personal information with third-party advertisers or data brokers under any circumstances.

7. Data Retention

We retain your information for the following periods:

• Booking data (including health information, reference images, ID documents, and consent signatures) is retained for three (3) years from the date the booking was submitted. This retention period supports legitimate legal and safety purposes, including in cases of adverse health events that may surface after a tattoo session.
• Artist account data is retained for as long as your account is active. If you delete your account, we will delete your personal profile data within 30 days, subject to our legal obligations and the booking data retention period above.
• Client accounts (if applicable in future) will be retained for as long as the account is active and deleted within 30 days of a verified deletion request.
• Usage and analytics data is retained in aggregate form indefinitely and is not associated with individual users after 90 days.

After the applicable retention period, data is permanently deleted or anonymized. We cannot recover deleted data.

8. Your Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Access: You have the right to request a copy of the personal information we hold about you.
• Correction: You have the right to request correction of inaccurate or incomplete personal information. Artists can update most of their profile information directly in the dashboard settings.
• Deletion: You have the right to request deletion of your personal information, subject to our legal obligations and the data retention periods described above. We will process verified deletion requests within 30 days.
• Data portability: You have the right to request a machine-readable export of your personal information in a commonly used format.
• Opt out of communications: You may opt out of non-essential communications at any time by following the unsubscribe link in any email we send. Note that transactional emails related to active bookings or account security cannot be disabled.

To exercise any of these rights, please email hello@inkbook.pro with a description of your request and sufficient information for us to verify your identity. We do not charge a fee for reasonable requests.

9. Cookies

InkBook uses a minimal set of cookies necessary to operate the platform:

• Session cookies: We use a single session cookie to maintain your authenticated session after you log in. This cookie is deleted when you log out or when your session expires.

We do not use:

• Third-party advertising cookies or tracking pixels.
• Cross-site tracking technologies.
• Persistent cookies that follow you across the web after you leave InkBook.

Because we only use essential session cookies, no cookie consent banner is required under most cookie consent frameworks. If you disable cookies in your browser, you will not be able to log in to your account.

10. Children’s Privacy

InkBook is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. Tattooing is a service performed exclusively on adults in nearly all jurisdictions.

If you are a parent or guardian and you believe that your child under 18 has provided us with personal information, please contact us immediately at hello@inkbook.pro. We will promptly delete any information we have collected from anyone we identify as being under 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or our Service. When we make material changes, we will update the “Last updated” date at the top of this page. For significant changes that affect how we handle health data, ID documents, or other sensitive information, we will notify users by email with at least 14 days’ notice before the changes take effect.

Your continued use of InkBook after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy, want to exercise your data rights, or have a privacy concern, please contact us:

InkBook
Email: hello@inkbook.pro

We aim to respond to all privacy-related inquiries within 5 business days.