Privacy Policy

Last updated: July 30, 2026

InkXed ("we," "us") is booking and client-management software for tattoo artists, operated in the United States. This policy explains what information we collect, why, and what your choices are. It covers the InkXed app at app.inkxed.com, this website, and the public pages artists share with their clients (booking, payment, consent, and aftercare pages).

What we collect

From artists (account holders):

• Account details: name, email address, studio name, and password (stored only as a secure hash).
• Business settings: rates, availability, policies, branding, and message templates.
• Payment account information: if you connect Stripe, we store your Stripe account identifier. We never see or store your bank details — those live with Stripe.
• Platform fee records: the transaction fee InkXed charges on card payments, handled by Stripe.

From artists applying to the Founding Artists Program:

• What you send us on the application form: your name, email address, artist or studio name, city and state, a link to your work, how you describe your current setup, how long you have been tattooing, roughly how many appointments you do in a month, and your written answers about how you run your business today and what you would want better software to solve.
• We use it only to review your application and to contact you about the program. It is not shared with anyone, it is not used for advertising, and applying does not create an InkXed account.
• You can ask us to delete your application at any time by emailing hello@inkxed.com.

From tattoo clients, on behalf of their artist:

• Booking details: name, phone number, email, requested design, dates, and reference images.
• Unfinished inquiries: if someone starts an artist’s inquiry form and gives their name and a way to be reached, we save what they have filled in so far — before they press send — so the artist can follow up if they never finish. Reference photos are not saved until an inquiry is sent. A client can ask their artist to delete it at any time.
• Consent form responses: the questions an artist's consent form asks, which can include date of birth, emergency contact, and health questions relevant to being tattooed, plus a signature and — if the artist's form requires it — a photo of government ID.
• Payment records: amounts, dates, payment method, and receipt numbers. Card numbers are handled entirely by Stripe and never touch our systems.
• Photos of tattoo work, where a client chooses to share healed photos.

Automatically: basic technical logs (such as IP address and browser type) used for security, rate limiting, and diagnosing errors. Our error reports strip email addresses, phone numbers, and card-number patterns before storage.

What we do NOT do

• We do not sell personal information. To anyone, for anything.
• We do not use client data for advertising, and we do not share it across studios — each artist sees only their own clients.
• We do not use health-related consent answers for any purpose other than showing them to the artist the client gave them to.

How information is used

• To run the service: bookings, calendars, reminders, payments, receipts, and consent records.
• To send messages an artist initiates or configures — appointment reminders, booking links, payment links — by SMS to clients who provided a phone number for that purpose.
• To secure the service: fraud prevention, rate limiting, and debugging.

Who we share it with

Only service providers needed to run InkXed, each bound to use the data solely to provide their service to us:

• Supabase — database and file storage (hosted in the United States).
• Stripe — payment processing. Card data goes directly to Stripe.
• Telnyx — SMS delivery, when an artist has messaging enabled.
• Netlify — website and application hosting.

We may also disclose information if required by law, or to protect the rights and safety of users. If InkXed is ever acquired or merged, data would transfer under this policy's protections and users would be notified.

Security

All data moves over encrypted connections (HTTPS). Access is scoped per studio — the database itself enforces that one studio can never read another's records. Government ID photos are held in a private storage area that requires authenticated, time-limited links to view. Payment card details never touch our servers.

Retention and deletion

• Artists can archive clients and export their studio's data at any time from Settings.
• Artists can close their account from Settings → Close Account. The account stays open for 30 days so the decision can be reversed, and it can be cancelled at any point during those 30 days from a banner in the app.
• After those 30 days, the studio's data is permanently deleted — clients, appointments, inquiries, messages, photos, uploaded ID images, settings, and the artist's login itself. Two things are kept, described below.
• Signed consent forms are kept. They are the legal record of what a client agreed to before being tattooed, including date of birth, health answers, signature and any ID photo, and a question about a tattoo can surface years after a shop closes. They are deleted seven years after the account closes.
• Payment records are kept, with the client's name removed. We are required to keep records of money handled for tax purposes; the amount, date and method remain, the person does not. They are deleted seven years after the account closes.
• Error and security logs age out automatically (resolved reports after 30 days, all reports after 90).

Your choices and rights

• Artists can access, correct, export, or delete their studio's data in the app, or by emailing us.
• Clients can ask their artist what information is held about them, and ask for it to be corrected or deleted. Artists can serve those requests with the tools in the app. If a client can't reach their artist, they can contact us and we'll help.
• Depending on where you live (for example, California or the EU), you may have specific legal rights to access, correct, delete, or port your data, and to not be discriminated against for exercising them. Email us and we'll honor applicable rights.
• SMS: reply STOP to any message to stop receiving texts, or ask your artist to remove your number.

Text messages (SMS)

Texts sent through InkXed are sent by an artist, to their own client, about that client's own appointment. They are transactional, never marketing.

• How we get your number: you give it to your artist yourself — on their inquiry form, when booking, or on a consent form — for the purpose of them contacting you about your appointment. We never buy, rent, or otherwise obtain phone numbers.
• What you'll receive: booking confirmations, appointment reminders, consent form links, payment links, and aftercare instructions. Message frequency depends on your appointments — typically a handful around each one.
• Opting out: reply STOP to any message and you will not receive more. Reply HELP for help, or contact your artist directly. You can also simply ask your artist to remove your number.
• Costs: message and data rates may apply, depending on your mobile plan. InkXed does not charge you for texts.
• We do not share mobile opt-in information or phone numbers with third parties or affiliates for their own marketing. Numbers are shared only with our SMS carrier (Telnyx) for the sole purpose of delivering the artist's message to you.

Cookies and local storage

The app uses browser local storage to keep you signed in and remember preferences (like dark mode). We don't use advertising cookies or third-party trackers.

Children

InkXed is not directed at children and we don't knowingly collect information from anyone under 13. Tattooing minors is governed by state law; verifying a client's age and legal eligibility is the artist's responsibility.

Changes

If this policy changes materially, we'll post the new version here and update the date at the top. Continued use after a change means acceptance of the updated policy.

Contact

Questions, requests, or complaints: hello@inkxed.com.