Privacy policy
Effective date: 23 September 2026
What we collect
When you open a Studio account, we collect your email address, sign-in identifiers, and the information you add to an artist or studio profile, including names, handles, bios, locations, portfolios, flash images, opening hours, and links. We also process information prospective clients submit through your public page or consultation form: names, contact details, messages, form answers, reference images, consent choices, and follow-up status. When you send a booking link, we also keep the appointment time, the deposit and any balance amount, the rules that applied, and the email address the client gives us on the booking page or at checkout, so we can send confirmations and reminders. If you connect Google Calendar, we read your events with read-only access and keep each event’s start time, end time, and title so those hours show as unavailable, along with the Google account email that shows which account is connected. We never write to your Google Calendar, and disconnecting removes the imported times. We keep limited operational data such as page views, feature events, error reports, IP-derived region, browser and device type, and timestamps. Stripe processes Studio subscription billing and shares plan, status, billing country, and receipt details with us. We never see or store full card numbers.
How we use it
We use this data to publish your page, run consultation forms, turn form answers into structured briefs and readiness scores calculated with fixed rules, let authorized roles review and follow up on inquiries, send consultation and account notices, and keep subscriptions and seat counts accurate. We also use it to send booking links, deposit confirmations, appointment reminders, and payment reminders, and Stripe processes the deposit itself. Clerk supports sign-in, Supabase the database, Cloudflare hosting and image storage, Stripe subscription billing and deposits, Resend transactional email, and Google the calendar sync you choose to connect. They may use data only to provide these services for us. We do not sell personal data or use client consultation content to train our own models. Aggregated, non-identifying usage may guide product development. You control the client data that flows through your studio; we process it on your instructions.
A note on health information
Tattooing touches on health. In a consultation form a client may mention allergies, skin conditions, medication, pregnancy, or how a previous session healed, either because the form asks or because they volunteer it. In many countries this counts as a special category of personal data with stricter rules. That is why the consultation form carries an explicit consent checkbox: a client has to tick it before the form is sent, and they are told the studio will use what they share to review the request and follow up. We use these details only to pass the request on to you. We do not use them for advertising, profiling, or any decision that gets made without a person involved. A client can withdraw consent at any time by asking the studio, and the studio can delete the consultation from the dashboard. This is not medical advice and it is not a substitute for the health screening you carry out before working on someone.
How long we keep it
Account and profile data remains while your Studio account is open. Consultations, form answers, conversations, and uploaded reference images remain until you delete them or close the account. Booking and deposit records, including the client's email, stay with the appointment and are kept as long as a refund or payment dispute could still arise. After account closure, we delete or anonymize associated data. Subscription records may be kept where tax, accounting, or payment-dispute law requires it, and security or abuse logs may be kept for a limited period. Backups rotate on their own schedule, so deleted information can remain in backup briefly before it is overwritten.
Your rights
You can ask us to show, correct, export, or delete personal data linked to your account. Write to support@openink-studio.com from your account email so we can verify your identity. We normally answer within 30 days and will explain if a legal requirement or identity check needs more time. If you are a studio client rather than an account holder, contact the studio first because it controls the record. If you cannot reach the studio, contact us and we will help route the request. Any additional local rights, including objection, restriction, withdrawal of consent, or a complaint to a data protection authority, continue to apply. Data may be processed across countries through providers that commit to appropriate transfer safeguards.
Contact
Questions about this policy, or about a specific piece of data, go to support@openink-studio.com. If you are writing about a consultation or booking, include the studio handle so we can find it. When this policy changes in a way that affects you, we update the effective date above and tell account holders before the change takes effect.