Privacy Policy

Effective Date: January 20, 2025

1. Introduction

Inkdesign ("we," "our," or "us") operates the inkdesign.space website and AI tattoo generation service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Australian Privacy Principles (APPs), and Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Information We Collect

2.1 Personal Information

• Account Information: Email address, password (encrypted), and account preferences
• Payment Information: Processed securely through Polar.sh (we do not store payment card details)
• Communication Data: Messages you send to us, including support requests

2.2 Usage Information

• Service Usage: Tattoo prompts, generated designs, style preferences, and generation history
• Technical Data: IP address, browser type, device information, and usage patterns
• Analytics Data: Website interactions, feature usage, and performance metrics

2.3 AI-Generated Content

• Input Data: Text prompts and parameters you provide for tattoo generation
• Generated Images: AI-created tattoo designs based on your inputs
• Metadata: Generation parameters, timestamps, and associated user accounts

3. How We Use Your Information

3.1 Service Provision

• Generate AI tattoo designs based on your prompts
• Manage your account and subscription status
• Process payments and maintain billing records
• Provide customer support and respond to inquiries

3.2 Service Improvement

• Analyze usage patterns to improve our AI models
• Enhance website functionality and user experience
• Develop new features and services
• Conduct research and analytics (using aggregated, anonymized data)

3.3 Legal and Security

• Comply with legal obligations and regulatory requirements
• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service and other policies
• Respond to legal requests and court orders

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

• Payment Processing: Polar.sh for subscription and payment management
• AI Services: Third-party AI providers for image generation (data is processed securely)
• Email Services: For sending verification codes and service communications
• Hosting and Infrastructure: Cloud service providers for website and data hosting

4.2 Legal Requirements

We may disclose your information when required by law, court order, or government request, or to protect our rights, property, or safety, or that of our users or the public.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the same privacy protections.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure data centers and infrastructure

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Until account deletion or 3 years after last activity
• Generated Images: Until deletion by user or account termination
• Payment Records: As required by law (typically 7 years)
• Analytics Data: Aggregated data may be retained indefinitely

7. Your Rights and Choices

7.1 Access and Control

• Account Access: View and update your account information
• Data Download: Request a copy of your personal data
• Data Deletion: Delete your account and associated data
• Generation History: View and delete your generated designs

7.2 Regional Rights

EU/UK Users (GDPR): Right to access, rectification, erasure, portability, restriction of processing, and objection to processing.

California Users (CCPA): Right to know, delete, and opt-out of sale of personal information.

Australian Users (Privacy Act): Right to access and correct personal information.

Canadian Users (PIPEDA): Right to access and request correction of personal information.

8. International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Adequacy decisions where applicable
• Other legally recognized transfer mechanisms

9. Cookies and Tracking

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us provide you with a better experience by remembering your preferences and enabling essential functionality.

9.2 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality, including user authentication and security
• Functional Cookies: Remember your preferences and settings to enhance your experience
• Analytics Cookies: Help us understand how visitors use our website to improve performance
• Third-Party Cookies: Used by our payment processor (Polar.sh) and other integrated services

9.3 Cookie Management

You can control cookie preferences through:

• Our cookie consent banner when you first visit the site
• Your browser settings to block or delete cookies
• Opting out of analytics tracking through your account settings

Note: Disabling essential cookies may affect website functionality, including the ability to log in and use our services.

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware of such collection, we will delete the information promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and updating the effective date.

12. Contact Information

For data protection inquiries or to exercise your rights, please contact us using the information above. We will respond to your request within the timeframes required by applicable law.