Privacy Policy

1. What we collect

When you create an account: your email, name, city, and date of birth (used only to verify you're 18+, per our Terms of Service), plus your phone number if you choose to provide it. If you're an artist: your portfolio images, bio, pricing, and availability. When you use the app: messages between you and artists or clients, reviews you leave, and basic usage data (such as which pages you visit and general device information). When you book: your payment information is processed by Stripe — we don't store your full card number.

2. How we use it

To operate the marketplace: matching clients with artists, processing bookings and deposits, enabling in-app messaging, sending booking and message notifications (in-app, push, or email, depending on what you've enabled), calculating artist ratings from reviews, and keeping the platform safe and working. We do not sell your personal data, and we do not share it for advertising.

3. Who we share it with

The other party in a booking or conversation sees what's necessary to complete it (such as your name, message content, and review text). Beyond that, we share data only with the service providers that help us run Tatuo, and only so they can perform those services for us:

• Supabase — database, authentication, and file storage.
• Stripe — payment processing (deposits and subscriptions).
• Vercel — application hosting and delivery.
• Resend — transactional email.
• Web-push services — delivery of push notifications you've opted into.

These providers process data on our behalf under their own terms and standard data-processing agreements. We do not sell or share your personal data with advertisers.

4. Your date of birth

We collect date of birth specifically to verify you meet the 18+ minimum age for tattoo services. It's stored on your account and is not shown to other users.

5. Cookies

We use only essential session cookies to keep you signed in and to maintain your session. We don't use third-party advertising or tracking cookies.

6. Data retention & deletion

You can delete your account at any time from Settings. Self-serve deletion permanently removes your profile, bookings, messages, reviews, and uploaded images (portfolio and avatar). Because bookings and reviews involve another party, deleting your account also removes shared conversation history and reviews from the other person's view — this is a deliberate design choice, not a bug. We may retain limited records where required for legal, tax, or fraud-prevention purposes.

7. Your choices & rights

You can view and edit most of your profile information from Settings at any time, and you can request a copy of your data or ask us to delete it. Even though Tatuo is not yet legally required to do so at this scale, we honor access and deletion requests voluntarily — consistent with California's CCPA-style rights — as a matter of good practice. To make a request, reach us at privacy@tatuo.app.

8. Children

Tatuo is for adults only. The service is intended for users who are 18 or older, and we do not knowingly collect personal data from anyone under 18.

9. US-only service

Tatuo is intended for users in the United States. It is not directed at, or intended for, users in the European Union, and we do not offer the service there.

10. Changes to this policy

We may update this policy from time to time. When we do, we'll update the "Last updated" date above. Continued use of Tatuo after a change means you accept the updated policy.

11. Contact

Questions about your data? Email us at privacy@tatuo.app or visit our Contact & Support page.