Legal

Privacy Policy

Last Updated: July 3, 2026

InkLine Concierge is a product of TPADA Technologies, LLC ("TPADA Technologies," "InkLine," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in connection with:

the InkLine Concierge website at inklineconcierge.com (the "Website"), including our demo-request form; and
the InkLine Concierge service, our AI-powered concierge, messaging, booking, and customer-service tools offered through participating tattoo studios (the "Concierge Service").

The Website and the Concierge Service are together the "Services." By using the Services, you acknowledge the practices described in this Policy.

1. Who We Are and Our Role

Depending on the context, we act in one of two roles:

When we control the data: for visitors to the Website (for example, when you submit our demo-request form) and for our own business and marketing, TPADA Technologies is the business/controller responsible for that personal information.
When we process data on behalf of a studio: for information collected through the Concierge Service about a studio's clients, the participating tattoo studio (the "Studio") is the business/controller, and TPADA Technologies acts as a service provider/processor that handles the information only to provide the Services under the Studio's instructions and our contract with the Studio. If you are a Studio client and want to exercise privacy rights over data held on the Studio's behalf, contact the Studio; we will assist the Studio in responding.

2. Information We Collect

a. Information you provide through the Website

When you request a demo or otherwise contact us through the Website, we collect the information you submit, typically your name, studio name, email address, and, optionally, phone number and message. We use this to respond to your inquiry and follow up about InkLine Concierge.

b. Information collected through the Concierge Service

When you interact with a Studio through the Concierge Service, we may collect:

Contact details such as your name, phone number, and email address when you text a participating Studio or submit information through web forms.
Conversation content, including information you provide to ask about studio hours, services, pricing, or policies, or to request and prepare for a tattoo consultation.
Consultation and booking details, which may include preferences, scheduling information, consent or waiver information, and health-related disclosures you choose to share (for example, allergies, skin conditions, or medical notes relevant to a tattoo). See Section 3.

c. Information from Studios

When a Studio uses InkLine Concierge, we collect business and account information such as the Studio's name, contact details, authorized-user information, and configuration settings.

d. Information collected automatically

When you use the Website, we and our providers may automatically collect log, device, and usage information (such as IP address, browser type, pages viewed, referring/exit pages, and timestamps) through cookies and similar technologies. See Section 6.

3. Sensitive and Consumer Health Information

Some information handled through the Concierge Service may be sensitive, including health-related disclosures you provide to prepare for a tattoo consultation (for example, allergies, skin conditions, or medical notes). This may qualify as "sensitive personal information" under the California Consumer Privacy Act (as amended, the "CCPA/CPRA") and as "consumer health data" under laws such as the Washington My Health My Data Act and similar state laws.

We handle this information as follows:

We collect it only when you choose to provide it for the purpose of your inquiry or consultation, and we use it only to provide the Concierge Service, coordinate your consultation with the Studio, and for the related purposes in Section 4.
We do not sell sensitive or consumer health information, and we do not share it for cross-context behavioral advertising.
We do not use or disclose sensitive personal information for purposes other than those permitted by applicable law.
Where required, we collect this information with your consent, which you may withdraw at any time by contacting us (withdrawal does not affect processing already carried out).

4. How We Use Information

We use personal information to:

Operate and provide the Services, including responding to your customer-initiated questions and facilitating consultation booking and handoff to Studio staff.
Respond to demo requests and communicate with you and with Studios about the Services.
Enable the automated AI assistant to answer inquiries, collect details needed for consultations, and coordinate with Studio staff.
Operate, maintain, secure, debug, and improve the quality and reliability of the Services.
Prevent fraud and abuse and protect the rights, safety, and security of users, Studios, and TPADA Technologies.
Comply with applicable laws and enforce our terms.

We do not use the information you submit to make legally or similarly significant decisions about you without human involvement. See Section 15.

We share personal information only as described here, and we do not sell personal information:

With the Studio you are contacting, so it can respond to and serve you.
With service providers and sub-processors that perform functions on our behalf under contracts that restrict their use of the information to providing services to us. These currently include, for example: Supabase (database hosting), Resend (transactional email), Vercel (website hosting), Twilio (message delivery), and Google Workspace (business email). A current list is available on request.
For legal and safety reasons, when we believe disclosure is necessary to comply with law or legal process, enforce our agreements, or protect the rights, property, or safety of users, the public, or TPADA Technologies.
In a business transfer, such as a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy or provide notice of any material change.

Mobile / SMS data (10DLC). No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all sharing and will not be shared with any third parties.

6. Cookies and Analytics

The Website uses cookies and similar technologies that are necessary for the site to function and, where applicable, to understand site usage and improve performance. You can control cookies through your browser settings; disabling some cookies may affect Website functionality. If we use analytics or measurement providers, they process usage data on our behalf. We do not use the Website to serve cross-context behavioral advertising, and we honor recognized opt-out preference signals (such as Global Privacy Control) where required by law.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. In general:

Demo-request / Website inquiries: retained while we are in active contact with you and for up to 24 months after our last interaction, then deleted or de-identified.
Concierge Service data: retained on the Studio's behalf for the duration of the Studio's use of the Services and for a limited period afterward as set out in our contract with the Studio, after which it is deleted or de-identified, subject to legal-hold or recordkeeping requirements.
Sensitive / consumer health information: retained only for as long as needed for the consultation purpose for which it was provided, then deleted or de-identified.

Retention periods may be extended where necessary to comply with law, resolve disputes, or enforce our agreements.

8. Data Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal information, including encryption in transit and at rest, access controls, and use of infrastructure providers that maintain recognized security programs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding personal information we control:

Access / Know the personal information we hold about you and how we use and share it.
Correct inaccurate personal information.
Delete personal information, subject to legal exceptions.
Portability: receive a copy of certain information in a portable format.
Opt out of sale or sharing: we do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of, but you may still submit a request.
Limit the use of sensitive personal information to permitted purposes.
Non-discrimination: we will not discriminate against you for exercising your rights.

How to exercise your rights. Submit a request using the contact details in Section 18. We will verify your request, respond within the timeframe required by applicable law (generally 45 days, extendable where permitted), and, where you have a right to appeal a decision, we will provide instructions to do so. You may use an authorized agent to submit a request on your behalf, subject to verification.

If your data is held by us on a Studio's behalf (Section 1), please direct your request to the Studio; we will support the Studio in responding.

10. Text Messaging (SMS)

Text messaging is governed by our SMS Text Messaging Terms & Conditions, available in our Terms of Service. You may opt out of messages at any time by replying STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT to any message, or by contacting us. Message and data rates may apply.

11. Children's Privacy

The Services are not directed to children. The Concierge Service is intended for individuals 18 years of age or older, and the Website is intended for adults. We do not knowingly collect personal information from children under 13 (or under the minimum age required by applicable law). If you believe a child has provided us personal information, contact us and we will delete it.

12. International Users

We operate in the United States, and personal information is processed and stored in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your location.

13. Automated Processing and AI

The Concierge Service uses automated tools, including an AI assistant, to respond to inquiries and gather information needed to assist you. The AI assistant supports, but does not replace, human judgment by Studio staff, and we do not use it to make legal or similarly significant decisions about you without human involvement.

14. Third-Party Links

The Website or messages may link to third-party sites or services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy policies.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date above reflects the most recent changes. For material changes, we will provide additional notice as required by law. Your continued use of the Services after an update takes effect constitutes acknowledgement of the updated Policy.

16. Contact Us

If you have questions about this Policy or wish to exercise your rights, contact us at:

TPADA Technologies, LLC (operator of InkLine Concierge) Email: privacy@inklineconcierge.com or support@inklineconcierge.com

17. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Massachusetts and applicable United States federal law, without regard to conflict-of-laws principles.