Privacy Policy

Last updated: May 17, 2025

Inkhub (“we,” “us,” or “our”) is a platform for tattoo artists to manage their clients, bookings, and business. This policy explains clearly what data we collect, why, who we share it with, and what rights you have over it.

We believe in plain language. If something is unclear, email us at contact@inkhub.io and we will explain it.

1. Who this policy applies to

This policy applies to two groups of people:

• Artists — tattoo professionals who create an Inkhub account to manage their business.
• Clients — people who fill out a quote request or anamnesis form via an artist's public link. Clients do not create an Inkhub account.

2. What data we collect

2.1 Artist account data

When you sign up as an artist, we collect:

• Name, email address, profile photo
• Username and public profile information
• Language and currency preferences
• Stripe account details (for receiving payments — handled entirely by Stripe)
• Subscription status

2.2 Client data (entered by the artist)

Artists store information about their clients inside Inkhub, including:

• Name, email, phone number, Instagram handle
• Address and date of birth
• CPF (Brazilian tax ID) — optional, used for issuing receipts
• Emergency contact
• Notes and tattoo history
• Quote requests, tattoo ideas, session dates, and payment records
• Reference images uploaded for tattoo planning

2.3 Health and medical data (anamnesis)

When a client fills out an anamnesis (health questionnaire) via an artist's public link, we collect sensitive health information such as allergies, skin conditions, medications, and other medical history relevant to safe tattooing.

This is special-category data under GDPR Article 9 and LGPD Article 11. Clients must explicitly consent before submitting the form. This data is:

• Only accessible by the artist who received the form
• Never sold, shared with third parties, or used for marketing
• Stored securely in an encrypted database
• Used solely to allow the artist to conduct the tattoo session safely

2.4 Usage analytics

With your consent (via the cookie banner), we collect anonymous usage data through Vercel Analytics and Vercel Speed Insights. This includes page views, device type, and performance metrics. No personally identifiable information is collected in analytics. If you decline, no analytics data is collected.

3. Why we collect this data

• To provide the Inkhub platform and its features to artists
• To allow artists to manage their client relationships and bookings
• To send transactional emails (booking confirmations, quote notifications) via Resend
• To process subscription payments via Stripe
• To improve the platform through anonymous usage analytics (consent-gated)
• To comply with legal obligations

We do not use your data for advertising. We do not sell your data.

4. Who we share data with

We use the following third-party services to operate Inkhub. Each one only receives the data needed to perform their function:

All providers are contractually required to handle data securely and comply with applicable data protection laws (GDPR, LGPD, or equivalent).

5. Cookies

We only use analytics cookies (Vercel Analytics) and only with your explicit consent. When you first visit Inkhub, a banner asks for your choice. If you decline, no cookies are set and no analytics data is collected. You can change your choice at any time by clearing your browser's local storage for inkhub.io.

We do not use advertising cookies, tracking pixels, or third-party retargeting.

6. Data retention

• Active accounts: data is retained for as long as the account exists.
• Deleted accounts: all associated data is removed within 30 days of deletion.
• Inactive accounts: data is retained for 12 months, then deleted.
• Anamnesis / health data: retained as long as the artist's account is active, then deleted within 30 days.

7. Your rights

Under GDPR and LGPD, you have the right to:

• Access — request a copy of the data we hold about you
• Export (portability) — artists can download all their client data at any time from Settings → Data Export
• Correction — request that inaccurate data is corrected
• Deletion — request that your data is deleted (right to be forgotten)
• Withdraw consent — for health data and analytics at any time
• Object — to certain types of processing

To exercise any of these rights, email us at contact@inkhub.io. We will respond within 30 days.

8. International data transfers

Inkhub is based in Brazil and serves users globally. Data may be processed in the United States (Supabase, Clerk, Stripe, Vercel, Render, Resend). All providers offer adequate data protection guarantees and, where applicable, use Standard Contractual Clauses under GDPR.

9. Security

All data is transmitted over HTTPS. Data at rest is encrypted by Supabase. We do not log personally identifiable information in our application logs. However, no system is 100% secure — if you discover a security issue, please contact us immediately at contact@inkhub.io.

10. Children

Inkhub is not intended for users under 18 years old. We do not knowingly collect data from minors. If you believe we have collected data from a minor, contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. When we do, we will update the date at the top. For significant changes, we will notify artists by email.

12. Contact us

• Email: contact@inkhub.io
• Company: Inkhub LLC, Servidão professor Bonifácio Francisco Vieira, 104, Brazil