Privacy Policy

Contact

Privacy questions and requests can be sent to inkscheduleapp@gmail.com.

Who This Policy Covers

Information We Collect

• Account and identity information: name, email address, phone number, account and user IDs, role, authentication records, profile photo, and account status.
• Business and studio information: business or studio name, physical address, public contact details, timezone, operating hours, team relationships, tax profile, business settings, licenses, and certification records.
• Client, appointment, and service information: client contact details, services, dates and times, duration, price, deposits, status, notes, reference images, cancellation history, and artist or studio assignments.
• Waiver and sensitive information: waiver terms, signatures, photo identification when required, age or identity confirmation, and the client's acknowledgement of health- and healing-related waiver terms. InkSchedule does not currently provide structured fields for a client's medical history. If a user chooses to include sensitive details in a free-form note, message, or uploaded document, we process that content only to provide the requested workflow. We do not use waiver or health-related information for advertising.
• Payment and financial information: transaction amount, payment method category, status, tips, booking and online service fees, refunds, disputes, payout and transfer activity, connected-account status, tax and write-off records, invoices, and payment-provider references. Stripe processes card, bank, and identity-verification details; InkSchedule does not store full card numbers.
• Messages and support: in-app messages, SMS delivery and opt-in status, support requests, feedback, notification preferences, and communication history.
• User content and files: portfolio media, profile and banner images, chat attachments, appointment reference images, receipts, certification documents, reviews, social posts, and other files you choose to upload.
• Connected-service information: social account IDs, page names, access tokens, posts and analytics from connected Meta accounts; Google Business Profile and calendar connection data; and payment handles such as Venmo, Cash App, or Zelle when enabled.
• Device, permissions, and location: device and app version, operating system, push-notification token, IP address, approximate IP-derived location, and permission status. When Tap to Pay requires it, device location may be processed to enable and secure in-person payments. We do not use Tap to Pay location for advertising.
• Website usage, advertising, and diagnostics: pages viewed, referring page, campaign parameters, browser and device details, App Store link clicks, security events, and error or diagnostic logs. Website analytics and advertising providers may use cookies, pixels, or similar identifiers.

How We Collect Information

• Directly from you when you register, configure a workspace, book, pay, message, upload, or contact us.
• From an artist, studio, team member, or client who enters information into a shared workflow.
• Automatically from the website, application, device, and security or diagnostic systems.
• From providers you connect or use, including Stripe, Meta, Google, Apple, and notification providers.

How We Use Information

• Provide accounts, workspaces, booking pages, scheduling, client records, messaging, and notifications.
• Process appointment payments, fees, tips, refunds, disputes, transfers, payouts, and financial records.
• Create and retain waivers, signatures, identification records, and document history when configured.
• Provide reports, tax and write-off tools, receipts, exports, and business-management features.
• Connect social, calendar, review, and payment accounts at the user's request.
• Provide support, respond to requests, and communicate service or security information.
• Protect users and the Service, prevent fraud, debug problems, and enforce our Terms.
• Measure website campaigns and App Store link interest and improve marketing and product performance.
• Comply with legal, tax, accounting, dispute, and regulatory obligations.

Camera, Photos, Files, and Location

• Camera, photo-library, and file access is requested only when you choose to capture or upload content. Where the operating system provides a limited picker, you can select only the items you want to share.
• Location permission may be requested when required to use Tap to Pay or supported card-reader features. If you decline, those payment features may be unavailable, but you can use another supported payment method.
• We do not use camera, photo, file, or Tap to Pay location data for unrelated advertising.

Public and Shared Content

Artist, studio, and booking pages may be public and may display names, photos, portfolios, bios, specialties, social links, booking links, and business locations. Reviews may also be public. Workspace information, messages, appointments, client records, and financial information may be visible to authorized workspace members according to their role. Do not place sensitive personal information in public profile fields.

Service Providers and Other Disclosures

We may disclose information to the following categories of recipients:

• Supabase for authentication, databases, and file storage.
• Stripe for payment processing, connected accounts, identity checks, Tap to Pay, disputes, and payouts.
• Twilio for transactional SMS and Resend for email delivery.
• Expo and Apple for mobile app delivery and push notifications.
• Google for connected Business Profile, calendar, places, maps, and website analytics features.
• Meta for connected Facebook and Instagram features and website advertising measurement.
• Vercel for website and application hosting, delivery, and operational logs.
• Authorized studio members, artists, clients, or recipients as needed for the workflow you request.
• Authorities, advisers, or other parties when required by law or needed to protect rights and safety.
• A successor in connection with a merger, financing, acquisition, reorganization, or sale of assets.

We require service providers that process personal information for us to protect it consistently with their contractual and legal obligations. Their independent services are also governed by their own privacy terms.

Website Analytics and Advertising

Cookies and Advertising Choices

SMS Consent

• Transactional SMS is sent only after the applicable user or client provides consent.
• Message frequency varies and message and data rates may apply.
• Reply STOP to opt out and HELP for assistance.
• SMS consent and phone numbers are not sold or shared for third-party marketing.

Data Retention and Deletion

• Account and workspace data is generally kept while an account is active and as needed to provide the Service.
• Appointment waivers, signatures, required photo IDs, and replaced waiver-document versions are retained for at least three years. A longer period may apply if required by law, configured by a studio, or needed for a legal claim.
• Payment, payout, tax, invoice, refund, and dispute records may be retained as required for accounting, fraud prevention, contractual, and legal obligations.
• Connected-account tokens are retained until disconnected, expired, revoked, or no longer needed.
• Support, security, analytics, and diagnostic records are retained only as reasonably needed for those purposes.
• When an account is deleted, we remove sign-in access and delete or de-identify personal information that we are not required or permitted to retain. Residual copies may remain temporarily in protected backups.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is completely secure, and we cannot guarantee absolute security.

Your Privacy Choices and Rights

• Access and correct profile and workspace information through the Service.
• Manage email, SMS, in-app, and push-notification preferences where available.
• Disconnect connected Meta, Google, calendar, or payment accounts through available controls.
• Request access, correction, deletion, or a copy of personal information, subject to applicable law.
• Request to opt out of applicable targeted-advertising sharing.
• Withdraw optional permission through device settings; this may disable the related feature.

Submit a request to inkscheduleapp@gmail.com. We may need to verify your identity and may direct a client request to the responsible artist or studio. We will not discriminate against you for exercising an applicable privacy right.

Account Deletion

Account holders can initiate deletion in the mobile app under Settings, Security, Delete Account. If you cannot access the account, email us using the address above. Deletion removes sign-in access and starts the deletion or de-identification process described in this policy. Records that must be retained—for example, certain waivers, payment records, disputes, or tax records—will remain protected until the applicable retention period ends.

Children

InkSchedule business accounts are not intended for children under 18. We do not knowingly allow a child under 13 to create an account. Artists and studios are responsible for complying with age, guardian-consent, and recordkeeping rules when they provide services involving a minor.

United States Service

InkSchedule currently operates as a United States service. Information may be processed in the United States and other locations where our service providers operate.

Changes to This Policy

We may update this policy as the Service or legal requirements change. We will post the revised policy with a new effective date and provide additional notice when required by law.

Related Terms

Please also review our Terms of Service.