Privacy Policy

We may collect information such as:

• Client name
• Phone number
• Email address, when provided
• Tattoo ideas, references, placement, size, and style preferences
• Messages exchanged through WhatsApp, Instagram, or the app
• Booking information
• Payment status and transaction references
• Uploaded images or tattoo reference photos

We use this information to:

• Manage client conversations
• Help tattoo artists respond to tattoo enquiries
• Organize leads and bookings
• Send appointment confirmations and follow-up messages
• Process booking deposits or payments
• Improve the user experience inside the app
• Provide automated assistant replies when enabled by the studio

When a studio connects WhatsApp through Meta Cloud API, Tattoo Assistant may receive and process WhatsApp messages, phone numbers, message timestamps, and media shared by clients.

This information is used only to provide the messaging and customer management features requested by the studio.

When a tattoo artist connects their Google Calendar to TAA, we access a limited, specific scope of data (calendar.events) strictly to power real-time appointment scheduling. We do not request access to the artist's full Google Account, Gmail, Drive, or any other Google service.

What we access:

• The start and end times of existing events on the connected calendar, used only to determine availability (busy/free periods). We never read or store the title, description, attendees, or any other content of the artist's existing calendar events.
• The ability to create, update, and view calendar events that TAA itself creates on the artist's behalf (e.g., a confirmed client consultation or tattoo session).

How we use it:

• To check real, live availability before offering appointment slots to a client.
• To automatically create a calendar event when a client confirms and pays for a booking, and to update or reference that event as needed (e.g., rescheduling).

Data sharing — Google Calendar data is never shared with third parties, and is never used to train AI models. Specifically: the content of calendar events (client names, appointment details) is never sent to or processed by our AI/language model providers (such as OpenAI). Only the resulting availability (free/busy time slots) is used within the app's own scheduling logic. We do not sell, rent, or share Google user data with advertisers, data brokers, or any party other than the service providers strictly necessary to operate TAA (see "5. Data Sharing" below).

Data protection — Google account access tokens are encrypted at rest (AES-256-GCM) and are only accessible to TAA's own backend systems. We do not display, export, or transmit raw Google Calendar data to any party outside of the artist's own TAA account.

Data retention and deletion — Your Google Calendar connection remains active until you disconnect it. You can revoke TAA's access at any time in two ways: (1) directly within TAA's Assistant Setup page, or (2) through your Google Account's third-party access settings at https://myaccount.google.com/permissions. Once disconnected, TAA's stored access token for your account is deleted from our systems.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell personal data.

We may share limited data only with trusted service providers required to operate the platform, such as hosting providers, database providers, payment processors, AI service providers, and Meta/WhatsApp API services.

We take reasonable steps to protect user data and store it securely. Access to client data is limited to the studio account that owns the conversation and authorized system processes.

We retain data for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and maintain business records.

Studios may request deletion of their account data by contacting us.

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data.

To request access or deletion, contact us at the email below.

You have the right to request deletion of your personal data from Tattoo Assistant at any time. To request deletion, send an email to marcosfelipe0743@gmail.com with the subject "Data Deletion Request" and include your full name, email, and phone number used in the app.

We will review and process requests within 30 days, unless we are required to retain certain information for legal, tax, security, fraud prevention, payment, or dispute resolution purposes.

For full instructions, visit our User Data Deletion page.

When you apply for a free test on our application page, we keep your contact details (name, email, WhatsApp, Instagram, studio, city and country) and your answers to the questions.

We use them to review your application and to talk to you about it. We send you news and offers from NEXO Labs only if you tick the optional box for that.

We keep an application while we decide on it and, if you become a customer, as part of your account. An application that you start but do not finish is deleted automatically after 90 days. To ask us to delete your application, follow the steps on our User Data Deletion page.

If you have questions about this Privacy Policy or want to request data deletion, contact:

Email: marcosfelipe0743@gmail.com
Website: https://tattooartistassistant.app

We may update this Privacy Policy from time to time. Any changes will be posted on this page.