Privacy policy.
Your artwork, your clients and your information deserve care. Here’s what we handle, why we need it and the choices you have.
Who we are
Tattoo Panda, Inc. (“Tattoo Panda”, “we”, “us”) provides the Tattoo Panda website, apps and related services. This policy explains how we collect, use, disclose and retain personal information, and the choices and rights available to you.
It covers visitors, early-access applicants, individual users, studio representatives and people whose information is provided to us. If we introduce design-inspiration tools for individual clients, this policy will also apply to those tools. It does not make an unreleased feature available.
We are responsible for information we use to manage our own service, accounts, security and communications. A studio may instead be responsible for its client information, with Tattoo Panda processing that information on the studio’s instructions. See Client information and studios below. Contact us at team@tattoopanda.app.
Information we handle
- Account and early-access details. Your name, verified email, authentication-provider identifiers, account or workspace membership and registration time. Signing in uses an authentication provider; we do not receive your Google password.
- Artwork and projects. Briefs, prompts, revisions, uploaded designs, references, body-placement photographs, generated images, stencils, calibration information, print settings and project history.
- Client information. Information an artist or studio supplies, such as a client’s name, contact details, social handle, instructions and images. We do not need a client’s medical history to create a design or stencil.
- Support and feedback. Messages, issue reports and feedback you send us. Avoid sending passwords, access tokens or unnecessary sensitive details.
- Technical information. IP address, browser and device information, authentication events, request and error logs, job status and usage records needed to operate, secure and troubleshoot the service.
- Purchases, when enabled. Plan, credit usage, transaction identifiers and payment status. A payment provider handles payment credentials under the information shown at checkout; do not send card details to our support team.
We receive information from you, your studio, authentication and infrastructure providers, and the operation of the service. If a studio supplies your information, you can ask it what it supplied and why.
Images can identify a person through their face, tattoos, surroundings or embedded metadata. We may retain the original upload alongside a processed working image. Removing metadata from a working image does not necessarily remove it from the original: remove unnecessary identifiers before uploading.
Why we use it
Where data-protection law requires a legal basis, we rely on the basis appropriate to the particular use—not a blanket consent to this policy:
- Provide the service and respond to your requests: authenticate you, record an early-access request, manage your workspace, process artwork, retain your versions, calibrate output and prepare prints. The basis is performing our contract with you or taking steps you request before a contract. For studio client data, we act on the studio’s lawful instructions.
- Keep the service reliable and secure: prevent fraud and abuse, investigate failures, manage capacity and enforce service rules. We rely on our legitimate interests, balanced against your rights, or a legal obligation where applicable.
- Communicate with you: answer support requests, follow up on requested early access and send essential account, security and service notices. These uses support your request, our contract or our legitimate interests.
- Improve the product: understand operational performance and use feedback to improve features. We rely on legitimate interests for necessary, proportionate analysis, and obtain consent where required for optional tracking or another use.
- Meet legal obligations: retain required business records, respond to lawful requests and establish or defend legal claims.
Registering interest is not consent to unrelated marketing. Where consent is required for promotional messages, optional tracking or sensitive-data processing, we ask separately. You can withdraw consent without affecting earlier lawful processing.
Some information is necessary to authenticate you or carry out a requested task. Without it, we may be unable to provide that part of the service.
Artwork and AI processing
When you request generation, refinement, stencil preparation or another AI-assisted operation, the relevant prompt, artwork, references and instructions are sent to the providers needed to perform it. The result and associated job information return to Tattoo Panda. Do not include unrelated personal information in a prompt or image.
Our providers may process operational and safety information under their applicable service terms, contractual safeguards and retention rules. A saved project’s deletion and a provider’s safety-log retention are not necessarily the same process. We do not promise that every provider processes information without any retention.
This policy does not grant us a general licence to publish your private artwork, use identifiable client images in advertising or sell your content. Any separate use that requires permission will be explained and requested separately. If we introduce a materially different use of personal information, including model-training uses not covered by the original purpose, we will give the required notice and obtain consent where required.
Design generation and calibration are tools for preparing artwork. We do not use them to make decisions with legal or similarly significant effects about you, such as employment, credit or healthcare decisions.
Client information and studios
A studio decides which client information it collects and uploads, its reasons for doing so, who can access it and how long it needs it. The studio must provide an appropriate privacy notice, have a lawful basis and obtain any permission required to process photographs or other sensitive material.
For client information we process solely on a studio’s behalf, the studio is the controller or business and Tattoo Panda is its processor or service provider. We handle that information to provide the requested service, not for unrelated independent purposes. Applicable data-processing terms must be in place where required by law.
If your artist supplied your information, contact the artist or studio first about access, correction or deletion. You may also contact team@tattoopanda.app; we will identify the appropriate route and assist the studio as applicable. We may still act as a separate controller for our own security, legal compliance or account administration.
Body photographs are not automatically biometric identification data. We do not use them to establish identity through facial recognition. Nevertheless, photographs and designs can reveal health, religion or other sensitive information. Do not upload such information unless it is necessary and you have the required lawful basis and permissions. Never upload sexual images of anyone under 18.
International processing
Tattoo Panda and its providers may process information in the United States and other countries outside your country of residence. Privacy laws and government-access rules may differ between those countries.
Where a transfer is restricted by applicable law, we use the required transfer mechanism and safeguards, such as an applicable adequacy decision or approved contractual clauses with supplementary protections where necessary. Contact team@tattoopanda.app for information about the safeguards relevant to your data or to request a copy, subject to appropriate redactions.
Retention and deletion
We keep personal information for as long as reasonably necessary for its stated purpose. This depends on whether you have an active account or project, whether your early-access request remains relevant, your instructions, support needs, security risks, contractual requirements and legal retention obligations.
You can delete your account or workspace and export available data through the service. Workspace actions require the appropriate authority. You can also request help, deletion of an early-access registration or other privacy action at team@tattoopanda.app. Deleting an account does not automatically delete a separate studio’s client records where that studio remains responsible for them.
Deletion removes or anonymises information unless a lawful exception requires retention, such as legal records, a dispute or proportionate security and abuse-prevention records. We restrict retained information to those purposes. Backups, provider records and queued processing may expire on their own protected retention cycles rather than disappearing immediately. We will explain applicable exceptions when responding to a request.
Version history is a product feature, not a promise to retain personal information forever. Copies you or your studio downloaded, printed or shared are controlled by their recipients.
Protecting information
We use technical and organisational safeguards appropriate to the information and service, including access controls, authenticated requests and protected storage and network connections. Access is limited according to operational need.
No system is completely secure. Keep your sign-in account and devices secure, use appropriate workspace permissions and report suspected unauthorised access to team@tattoopanda.app. We assess incidents and notify affected people or regulators where the law requires.
Your privacy rights
Depending on where you live and the law that applies, you may have rights to access or obtain a copy of your personal information, correct it, request deletion, restrict processing, receive a portable copy and withdraw consent.
Your right to object
You may object to direct marketing at any time. You may also object to processing based on legitimate interests because of your particular circumstances. Where applicable, we will stop unless we have compelling lawful grounds to continue or need the information for legal claims. Contact team@tattoopanda.app to object.
Use the account’s export or deletion controls, or email team@tattoopanda.app with your request. We may need proportionate information to verify your identity and authority, but do not send identity documents unless we request them through an appropriate channel. We respond within applicable legal time limits, explain any lawful refusal or extension and do not discriminate for exercising protected privacy rights.
Where applicable, an authorised agent may act for you subject to verification, and you may appeal a refusal by replying to our decision or contacting us. You can also complain to your local data-protection authority; you do not have to contact us first. EEA and UK residents can complain to their competent supervisory authority. California and other US residents may have additional access, correction, deletion, opt-out and appeal rights under applicable state law.
We do not use personal information for sale, cross-context behavioural advertising or consequential automated profiling, so we do not offer a control for an activity we do not perform. If our practices change, we will provide the notices, consent choices and opt-out mechanisms required by law, including recognition of legally applicable opt-out preference signals.
Adults only
Tattoo Panda accounts and services are for people aged 18 or older. We do not knowingly collect personal information directly from children using the service. If you believe someone under 18 has registered or supplied information as a user, contact team@tattoopanda.app so we can investigate and take appropriate action, including deletion where required.
Artists must not use Tattoo Panda to evade laws protecting minors or upload a minor’s identifiable client information without a lawful basis and any legally required permission.
Changes and contact
We update this policy when our practices or legal requirements change. The date at the top identifies this version. We will provide additional notice of material changes and obtain consent where required before applying a new use that requires it.
For privacy requests, questions or complaints, contact Tattoo Panda, Inc. at team@tattoopanda.app.