Privacy Policy

From artists: your name, email address, studio details (such as address, social links, and timezone), the services and prices you offer, your working hours, and your booking settings.

From clients booking with an artist: your name, email address, phone number, date of birth, details about the tattoo you want, reference images you upload, your signed waiver, and your booking history with that artist.

From waitlist sign-ups: your email address, whether you are an artist or a shop owner, and your name or shop name and Instagram handle if you choose to give them. We also keep a scrambled (hashed) form of your network address to limit abuse. It is not used to identify you.

Payments: deposits are processed by Stripe. Card details go directly to Stripe and are never stored by Inkbook. We keep a record of the payment status and amount.

• To let clients request and book bookings, and to let artists review, confirm, and manage them.
• To collect deposits and record payment status.
• To send booking confirmations, reminders, and aftercare emails.
• To keep Inkbook secure, prevent abuse, and fix problems.
• To email waitlist members once when Inkbook is ready.

A client’s information is shared with the artist they book with, so that artist can provide the service. We do not sell personal information, and we do not use it for advertising.

Artists can optionally connect a Google Calendar so Inkbook can avoid double bookings and keep confirmed bookings in their calendar. When an artist connects Google Calendar, Inkbook:

• Reads the list of calendars the artist owns or can edit, so the artist can choose which ones to check for conflicts.
• Reads only the start time, end time, status, and ID of events on the chosen calendars. We do not request or store event titles, descriptions, locations, or attendees.
• Creates an "Inkbook" calendar in the artist’s account and adds, updates, or removes events there for Inkbook bookings. These events include the client’s name, the service, the time, and any booking notes, so the artist can see their bookings.

Clients never see anything from an artist’s Google Calendar. The booking page only shows which times are available.

Inkbook’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the calendar features described above. It is not sold, not used for advertising, not used to train AI models, and not read by people except with the artist’s permission, for security reasons, or where required by law.

Artists can disconnect Google Calendar at any time from Settings. Disconnecting revokes Inkbook’s access token and deletes the stored connection and synced busy times. You can also remove access from your Google Account permissions page.

We use a small number of providers to run Inkbook. They process data only on our behalf:

• Supabase, for our database, sign-in, and private file storage.
• Vercel, for hosting.
• Stripe, for payments.
• Resend, for sending email.
• Google, for the optional Google Calendar connection.

Data is encrypted in transit. Each artist can only access their own records, enforced at the database level. Waivers and reference images are stored in private storage and are only shown to the artist they belong to, through short-lived links.

We keep information for as long as an artist’s account is active or as needed to provide the service. Artists can ask us to delete their account and its data. Clients can ask the artist they booked with, or contact us, to access, correct, or delete their information. We may keep limited records where the law requires it, such as payment records.

Inkbook is not intended for anyone under 18, and we do not knowingly collect their data.

If we make material changes, we will update this page and the effective date above, and notify artists by email.

Questions or requests about your data: hello@inkbook.studio