Privacy Policy

Demo Ink Studio (“we”, “the studio”) operates this website and its booking assistant. This policy explains what we collect, why, and what your choices are. We collect only what a tattoo booking genuinely needs.

What we collect

• Contact & booking details — your name, phone number, email, and the appointment itself: the design you describe, size, placement, and dates.
• Photos you upload — reference images and photos of where you want the tattoo, seen only by the studio and your artist. In most browsers the site removes a photo's hidden data, including the location where it was taken, before it is uploaded.
• Age verification — a photo of your ID, used solely to confirm you are 18+ as the law requires.
• Health declaration — the short questionnaire you fill before a session (allergies, medical conditions), used only so your artist can work safely.
• Payments — deposits are processed by Stripe. Your card number never touches our servers; we store only the payment status and amount.
• Chat conversations — messages you exchange with the booking assistant, processed by our AI providers (Anthropic, TypeSafe) to answer you and prepare your booking. Email addresses and phone numbers are removed from a message before it is sent to them; anything else you type in the message travels as written.
• Newsletter — your email, only if you opt in. Every mail includes an unsubscribe link.

What we use it for

Booking and running your appointment, sending you confirmations and reminders (email, SMS or WhatsApp), keeping the studio schedule, and — with your consent — occasional marketing. We do not sell your data, and we do not use it for anything unrelated to the studio.

Who processes it

Trusted providers process data on our behalf, each only for its job: Supabase (secure database and file storage), Stripe (payments), Anthropic and TypeSafe (the booking assistant), Resend (email), Twilio (SMS/WhatsApp), Google (calendar sync for our artists). Each is bound by its own privacy commitments.

Google Calendar

Our artists can connect their own Google Calendar so bookings land in it automatically and the site never offers you a time the artist is already busy. That connection belongs to the artist — as a client you are never asked to connect a Google account. When an artist connects theirs, we ask Google only for:

• Managing calendar events — we create an event when a booking is confirmed, update it if the appointment moves, and delete it if the appointment is cancelled. Only appointments booked through this site.
• Seeing when the artist is busy — used solely to avoid double-booking.

We do not use calendar data for advertising, we do not sell it, and we do not pass it to anyone beyond the providers named above. An artist can disconnect at any time from their portal, which deletes the stored access token immediately.

How long we keep it

• ID photos — deleted automatically about a month after your last appointment concludes (they exist only to verify age).
• Reference images — deleted automatically 90 days after the appointment they belong to ends or is cancelled; photos uploaded without a booking are deleted after 2 days.
• Chat conversations — transcripts are deleted 90 days after the conversation ends.
• Booking records & health declarations — kept as part of the studio's records, as the law and safe practice require.

Ask us and we will tell you exactly what we hold about you.

Your rights

You can ask to see, correct, or delete the personal information we hold about you, and you can withdraw marketing consent at any time. Reach us at 050-000-0001 or via WhatsApp and we'll sort it out — we reply within a couple of hours during opening hours — always same day.

Cookies

We use a session cookie to keep you signed in to your appointments. No third-party advertising cookies.