Privacy Notice

In Short: We process your information to provide, improve and administer the Services, generate your tattoo concepts and brief, process payments, communicate with you, prevent abuse, and comply with law.

We process your personal information for the following reasons:

• — To create and authenticate accounts. So you can sign in, save projects, and return to them.
• — To deliver the Service. To run the discovery conversation, generate tattoo concept images, on-body mockups and the artist-ready brief, and to make those outputs available to you across devices.
• — To process payments. To take your payment via Stripe and apply your unlock entitlements to your projects or subscription.
• — To respond to support requests. To resolve any issues you may have.
• — To send administrative messages. Receipts, security alerts, deletion confirmations and material changes to our Terms or this Notice.
• — To prevent fraud and abuse. To detect misuse of generation quotas, payment fraud, and content that violates our Acceptable Use rules.
• — To protect vital interests. Where strictly necessary to prevent harm.

Limited-purpose AI processing. Your inputs — the words you write and the photos you upload — are sent over encrypted connections to our AI processing partner solely to produce your tattoo concept and brief. They are not used to train any third-party model. See section 6.

In Short: We only process your personal information when we have a valid legal basis to do so under applicable law — your consent, the performance of our contract with you, a legitimate interest, a legal obligation, or to protect vital interests.

If you are in the EU or UK:

• — Consent. Where you have given us permission to use your information for a specific purpose. You can withdraw consent at any time.
• — Performance of a contract. Where processing is necessary to provide the Services you have asked for.
• — Legitimate interests. Where processing is necessary for our legitimate interests (e.g. fraud prevention, keeping the service running) and not overridden by your rights.
• — Legal obligations. Where processing is needed to comply with our legal obligations, cooperate with a law-enforcement body, or defend our legal rights.
• — Vital interests. Where processing is needed to protect your vital interests or those of a third party.

If you are in Canada:

We process your information under your express or implied consent, which you may withdraw at any time. In limited cases (e.g. fraud investigations, legal obligations, journalistic purposes), Canadian law permits processing without consent.

In Short: We share information only with the service providers we need to run TattooProof, and in a few specific situations described below.

Vendors, service providers and processors. We share your data with third parties who perform services on our behalf. They are bound by contract to process your data only on our instructions and to safeguard it. The categories of third parties we share with:

• — Authentication providers — Google (and, in the future, Apple).
• — AI processing — OpenAI, accessed through Emergent's managed integration. Used only to produce your tattoo concepts, mockups and brief.
• — Payment processor — Stripe.
• — Hosting & cloud infrastructure — our managed cloud provider.
• — Email / transactional messaging — for receipts, security alerts and account-deletion confirmation.
• — Performance monitoring & error reporting — to keep the service healthy.

Business transfers. We may share or transfer your information in connection with a merger, sale of company assets, financing or acquisition.

We do not sell your personal information. We do not run third-party advertising inside TattooProof.

In Short: We use a small number of strictly necessary cookies. We do not run advertising or cross-site tracking.

TattooProof uses a single secure, httpOnly session cookie to keep you signed in. We use no advertising cookies, no cross-site tracking pixels and no third-party analytics that profile you. You can clear cookies in your browser at any time (you will be signed out as a result).

In Short: Yes. The discovery conversation, brief synthesis, concept image generation and on-body mockups are powered by AI.

We provide our AI features through third-party AI service providers ("AI Service Providers"), currently OpenAI, accessed via Emergent's managed integration. Your inputs, outputs and personal information shared with the AI Service Provider are processed transiently and only to deliver the requested output to you. Our AI providers contractually agree not to use your data to train their general-purpose models on your behalf.

Our AI features include:

• — Conversational discovery (text generation).
• — Brief synthesis (structured text generation).
• — Tattoo concept image generation.
• — On-body realistic mockup generation.
• — Vision-based description of uploaded existing tattoos (redesign flow).

You must not use our AI features in any way that violates the terms or policies of our AI Service Providers, or in any way prohibited by our Terms of Service.

In Short: If you sign in using a third-party account (Google today; Apple in the future), we receive limited profile information from that provider.

When you sign in with Google we receive your name, email address and profile picture. We use this information only for the purposes described in this Privacy Notice. We do not control, and are not responsible for, the independent practices of your social login provider — please review their privacy notice to understand how they handle your data.

In Short: Our servers are located in the United States. Your information may be transferred to, stored and processed in countries other than your own.

If you reside in the European Economic Area (EEA), the United Kingdom or Switzerland, these countries may not have data-protection laws as comprehensive as your own. Where personal data is transferred out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses and equivalent safeguards with our sub-processors. Copies of the relevant clauses are available on request from privacy@tattooproof.com.

In Short: We keep your personal information only for as long as it is necessary, or as long as you have an account with us.

Account data, project content, uploaded photos, generated concepts and briefs are retained for as long as your account exists. If you delete an individual project, its contents are permanently removed from our active database.

Payment-transaction records are retained for up to seven (7) years to satisfy tax and accounting obligations, after which they are anonymized.

When we no longer have an ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or — where this is not possible (for example because it has been stored in backups) — isolate it from further processing until deletion is possible. Backups roll over within 30 days.

In Short: We protect your information with organizational and technical security measures.

All traffic to TattooProof is encrypted in transit (TLS). Sessions use httpOnly, Secure cookies. Photos and generated artwork are stored on managed infrastructure with access restricted to the application. Despite our safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. Transmission of personal information to and from the Services is at your own risk; please only access TattooProof within a secure environment.

In Short: We do not knowingly collect data from anyone under 18.

TattooProof is not directed at and may not be used by anyone under 18 (or the equivalent age of majority in your jurisdiction). By using the Services you represent that you meet this age requirement. If we learn that we have collected information from a minor we will promptly deactivate the account and delete the data. If you believe we may hold data from a minor please contact us at privacy@tattooproof.com.

In Short: Depending on where you live, you may have the right to access, correct, port, restrict or delete your personal data. You may review, change or terminate your account at any time from your studio.

In regions including the EEA, the UK, Switzerland and Canada, you have the right to (i) request access to and obtain a copy of your personal information; (ii) request rectification or erasure; (iii) restrict the processing of your information; (iv) where applicable, data portability; and (v) not be subject to solely automated decision-making producing legal or similarly significant effects. You may exercise these rights by emailing privacy@tattooproof.com.

If you are in the EEA or UK and believe we are unlawfully processing your personal information, you also have the right to lodge a complaint with your Member State data-protection authority or the UK Information Commissioner's Office. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing consent. Where we process your personal information based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your privacy preference. No uniform technology standard for recognizing and implementing DNT signals has been finalized; therefore we do not currently respond to DNT browser signals. If a future standard is adopted, we will update this Notice.

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have additional rights regarding your personal information.

In Short: Yes — we will update this Notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top. For material changes we will post a prominent in-app notice at least 14 days before they take effect, or notify you by email. We encourage you to review this Notice regularly.

For questions, requests or concerns: privacy@tattooproof.com.

(A postal contact address will be published once the TattooProof business registration is finalized. Updates will be reflected in this Notice.)

You can review and edit your profile from your studio settings. To permanently delete your account and every project, photo, concept, mockup and brief associated with it, sign in and click Delete my account in the Danger Zone of your studio. The action is immediate and irreversible. Backups are purged within 30 days. Payment-transaction records may be retained for up to seven (7) years to satisfy tax and accounting obligations, after which they are anonymized.

You may also submit a written request to privacy@tattooproof.com and we will respond within 30 days.