The fine print

Privacy Policy

Inkperch mobile application, Inkperch.com website and Inkperch booking pages · Effective date: October 8, 2026

Introduction

This Privacy Policy is owned and operated by Inkperch LLC (“Inkperch,” “we,” “us,” or “our”), an Illinois limited liability company. It governs the Inkperch mobile application (the “App”), the website at https://www.inkperch.com (the “Site”), the booking pages artists publish at book.inkperch.com (“Booking Pages”), and related communications and services (together, the “Services”).

Inkperch is a back office for professional tattoo artists, at a studio or on the road: booking requests and deposits, clients and sessions, income, expenses, receipts and mileage, trips and conventions, and profit-and-loss reporting. Artists who publish a Booking Page also use Inkperch to receive requests from their clients, so this policy covers two groups of people: artists who use the App (“you”), and the clients who send an artist a request or payment through a Booking Page (see Section 8). Please read this policy carefully; your use of the Services indicates your consent to it.

1. Information we collect

Information you provide directly

Account and profile information: your name, email address, password, and optional profile details such as how often you travel for work and your studio or shop information.
Booking Page details: if you publish a Booking Page, the handle, intro, shop line, portfolio and flash images, request form settings and card-deposit settings you choose to show.
Financial and business records you enter: income entries, deposits and other payments, tips, expenses, expense categories, booth rent or shop-split terms, mileage, trips and their itineraries, session timing, and notes.
Images and documents: receipt images, trip documents (for example confirmations, boarding passes and permits), consent and release form images, and photos you add to a client or piece. Receipt and consent form images are processed to extract text (see Section 3).
Release forms signed on the web: the form you set up (the questions and the wording your clients agree to), and, for each form a client signs, what they were shown, what they answered, their drawn signature, the time it was signed, a record of how it was signed, and what you record when you look it over (the kind of ID you checked, whether aftercare was given, and your name). See Sections 7 and 8.
Forwarded emails: receipts, booking and payment notices, and travel confirmations you forward to your personal Inkperch address, including their contents and attachments (see Section 3).
Client and contact information: information you record about your own clients, and the requests, messages and payments your clients send you through Inkperch. See Sections 7 and 8.
Voice logging: if you log by voice, your speech is turned into text on your device; the audio is not sent to us. When you are online, that text is sent to our AI provider to work out which screen it is for and what goes in each field (see Section 3).
Support and communications: information you provide when you contact us, respond to a survey, or take part in a beta or feedback program.

Information collected automatically

Device and usage information: device type, operating system, app version, unique device or installation identifiers, settings, and how you interact with the Services.
Product-analytics events: the screens you open and a defined set of in-app actions (for example, signing in, logging income or an expense, creating a trip, running a year-end export, or starting a subscription), along with app-lifecycle events such as install, open, and update. These events record that an action happened plus a small amount of context about it. See Section 5.
Notification token: if you allow notifications, a push token for your device, tied to your signed-in session and used only to deliver your notifications. It is removed when you sign out.
Diagnostic and log data: crash reports, error logs, and performance data used to keep the Services reliable.
Location information (approximate, optional): mileage is calculated from the start and end addresses you enter (using a third-party routing service) or from odometer miles you enter manually. The App does not track your location, record your route, or use background location. Optionally, while the App is open, you may use your device’s approximate location to fill in an address or find nearby clients; this is a one-time lookup that is converted to a general place label on your device, and your coordinates are not stored or synced.
Your phone’s calendars (optional): if you connect your calendars in the App’s Settings, the App reads the events on the calendars you choose, on your device, to see when you are busy. Only the date and the start and end time of each busy event are sent to us, with an identifier for that device. Event titles, places, people and notes never leave your device. Events marked free, and calendars you switch off, are skipped. We use these busy times only to keep clients from booking you at those times, and an assistant’s device never sends them. Disconnecting deletes the busy times we hold from that device. If you also choose to put your sessions on your phone’s calendar, the App adds them to a calendar named Inkperch on your device, with the client’s first name, the piece, the place and the time. Your calendar service (for example iCloud or Google) may then sync that calendar as it does your others. Turning that off, or signing out, removes them.

Information from third parties

App stores and payment processors: when you subscribe, the Apple App Store or Google Play Store processes your payment and shares limited transaction and subscription-status information with us. We do not receive your full payment card number.
Stripe: if you connect a Stripe account to take card deposits, Stripe shares the status, amounts and fees of the payments your clients make, and whether your account can take payments. We never receive card numbers.

2. How we use your information

We use the information described above to:

Provide, operate, and maintain the Services, including syncing your data across your devices;
Show your Booking Page, deliver the requests and payments your clients send, and send your clients the confirmations and messages the Services send on your behalf;
Send you the notifications you have turned on, such as a new request, a picked date, a payment, a client reply, or a reminder about tomorrow;
Extract text from images and forwarded emails so records can be created with minimal typing;
Generate your income, expense, mileage, trip, and profit-and-loss summaries and year-end exports;
Manage your account, subscription, free trial, and billing status;
Provide customer support and respond to your requests;
Monitor, troubleshoot, secure, and improve the Services, including diagnosing errors and preventing fraud and abuse;
Send account, administrative, and transactional messages such as email verification, password-reset, welcome, trial-reminder, billing, security, and service-update messages; and
Comply with law and enforce our Terms and Conditions.

We do not use your information for third-party advertising, and we do not sell it. Inkperch shows no ads, does not use advertising networks, and never sends marketing notifications. We use a product-analytics service (PostHog) to understand how features are used and to control which features are turned on for your account; this analytics data is used only for those purposes and never for advertising or sold to anyone.

3. Automated text extraction (AI)

Some features read text from what you give us so you do not have to type it. For these features, the content is sent through our secure server environment to a third-party artificial-intelligence provider (Anthropic), solely to extract the details needed for the record, and the extracted data is returned to your account:

receipt images you upload, to create an expense;
consent and release form images, to fill in the form’s details;
emails you forward to your Inkperch address (receipts, booking and payment notices, travel confirmations), received through our inbound-email provider (Postmark), to create the expense, booking, payment or itinerary entry they describe; and
the text of everything you log by voice, to work out which screen it is for and what goes in each field (your audio stays on your device).

Forward only emails you want processed; the contents of a forwarded email, including anything in it about other people, flow through this pipeline.

4. How we share your information

We do not sell or rent your personal information. We share it only as described below:

Service providers (sub-processors): vendors that help us run the Services, under contracts that limit their use of the information to providing services to us.
Your clients: what you choose to show on your Booking Page, and the messages, offers and receipts the Services send them on your behalf.
Your assistant: if you add an assistant, the parts of your account you turn on for them, which can include your clients’ booking details and, only if you turn it on, their release forms and health answers. You can change or end their access in Settings at any time. If you assist an artist, that artist can see which bookings you made or changed.
Payment and app-store providers: to process subscriptions and card deposits and confirm entitlement.
Legal and safety: when we believe disclosure is required by law or legal process, or necessary to protect the rights, property, or safety of Inkperch, our users, or others.
Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this policy.
With your direction or consent: when you ask us to share information or otherwise agree.

Service providers we use (nonexhaustive; subject to change):

Service provider	Purpose / data handled
Supabase	Application backend, database, authentication, server functions, and secure storage of account data, images and documents.
Apple / Google	App distribution, subscription payment processing through the App Store and Google Play, and delivery of push notifications to your device.
RevenueCat	Subscription management and entitlement status.
Stripe	Card deposits and payments your clients make to your own connected Stripe account, refunds and disputes; Stripe collects the card and account details directly.
Anthropic	AI text extraction from receipt and consent form images, forwarded emails, and voice entries, through our secure server functions (see Section 3).
Google Maps Platform	Address suggestions, distance, and mileage functionality.
Resend	Sending your account emails, such as email verification and password reset.
Postmark	Email with your clients and forwarded email: sending the confirmations, date offers, pick-a-date links, receipts, release form copies and messages the Services send your clients on your behalf; receiving your clients’ email replies, which are placed in your client thread; and receiving the emails you forward to your Inkperch address, with their contents and attachments.
Expo	Mobile application build, delivery and updates, and the push service that carries your notifications to Apple and Google.
Twilio	Sending reminder texts to clients who ask for them on a Booking Page, and receiving their replies and STOP or HELP messages (see Reminder texts, below). Handles the client’s phone number and the text of those messages.
Cloudflare	A bot check (Turnstile) on Booking Page requests, which looks at browser and device signals to tell people from automated abuse.
Netlify	Hosting for the Site, Booking Pages and the page a client signs a release form on.
Sentry	Error monitoring and crash diagnostics to keep the Services reliable.
PostHog	Product analytics and feature flags in the App: screen views and in-app usage events, tied to a device or account identifier, used to understand and improve the App; page views and request steps on the Site and Booking Pages, with no cookies. Hosted in the United States. Not used for advertising, and never on release form pages.

5. Analytics, notifications, and tracking technologies

The Services do not use advertising or third-party tracking cookies and do not track you across other companies’ apps or websites.

Product analytics. The App includes an analytics SDK from PostHog that records the screens you open, a defined set of in-app actions, and app-lifecycle events such as install, open, and update. Before you sign in, these events are associated with a device or installation identifier; after you sign in, they are associated with your account identifier so we can understand how the App is used over time. Signing out disconnects your account identifier from later events on that device. PostHog also delivers feature flags, which tell the App which features to enable for your account. We do not record session replays of the App.

Notifications. If you allow them, the App notifies you about your own account. Reminders, such as tomorrow’s sessions and travel, are scheduled on your device itself. Notifications about something a client did, such as a new request, a picked date, a payment or a reply, are sent from our servers, and their text passes through Expo’s push service and Apple’s or Google’s notification service to reach your device. We keep that text short: a client’s first name and what happened, never what a client wrote. You choose which notifications you get in the App’s Settings, and you can turn them off in your device settings at any time.

Booking Pages. Booking Pages use PostHog to count page views and the steps of a request, such as a step reached, a request or consult sent, a date picked or a deposit checkout opened. They set no cookies and store nothing in the visitor’s browser for analytics, never record what a visitor types or taps, and never send PostHog the visitor’s name, contact details or answers. The private part of a link, such as a pick-a-date or request link, is removed before anything is sent. PostHog receives the visitor’s IP address and browser details, as any website does, and uses the IP address for an approximate location. A page may save an unfinished request in the visitor’s own browser so it survives a reload; it is cleared when the request is sent. A Cloudflare bot check runs when a request is sent (see Section 4).

Release form pages. The page a client signs a release form on carries no analytics SDK and no tracking cookies, asks search engines not to list it, and sends no referrer to other sites.

Device unlock. Before it opens a signed release form, the App asks your device to confirm it is you (Face ID, Touch ID, a fingerprint, or your device passcode). That check happens on your device. We never receive, see or store biometric information.

Opting out. If you prefer not to be included in product analytics, email questions@inkperch.com and we will exclude your account.

The Site. The Site uses no advertising cookies. It uses PostHog to count page views and the links and buttons visitors click, with no cookies, nothing stored in your browser for analytics, and nothing that follows you to other websites. It never records what you type.

Do Not Track. Some browsers can send a “Do Not Track” signal. Because we do not track you across third-party websites or serve targeted advertising, our practices do not change in response to these signals.

6. How we protect your information

We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit, access controls, row-level data isolation between accounts, notification tokens that are tied to a signed-in session and removed at sign-out, signed release forms that cannot be changed once signed, a device unlock in front of them in the App, copies on a device that are removed at sign-out, and restricting sensitive credentials to secure server environments. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you register for an account, keep your username and password confidential and do not share them.

7. Client and contact information you enter

The Services let you record information about your own clients and contacts, and receive it from them through your Booking Page. You are responsible for that information. You represent that you have the right to collect and record it and that you will handle it in accordance with applicable law, including any health details that appear on consent or release forms and how long the law where you work requires you to keep them. A signed release form is kept as it was signed and cannot be edited. Once you have looked a signed form over, the App keeps a PDF copy of it with that client’s other forms, in your account and on the devices you are signed in to. We process client and contact information on your behalf, as your service provider, in order to provide the Services to you.

8. Booking Pages and the clients who use them

This section is for people who send an artist a request or payment through a Booking Page. The artist decides what their page asks for and what happens to your request. Inkperch runs the page and stores what you send on the artist’s behalf.

What you send: your name and the contact details you give, what you would like tattooed, placement, a photo of where it goes, size, budget, availability, reference photos, and your answers to the artist’s questions. It goes to that artist only.
Abuse protection: a Cloudflare bot check runs when you send a request. To limit abuse we keep a one-way, keyed hash of your IP address and your browser type with the request; we do not keep the IP address itself.
Emails: your request confirmation, date offers, pick-a-date links, payment receipts and the artist’s messages are sent through Postmark. When you reply by email, your reply is received through Postmark and placed in the artist’s thread with you.
Deposits and payments: paid through Stripe Checkout to the artist’s own Stripe account. Stripe handles your card details; we receive the payment’s status and amount.
How long it is kept: as long as the artist keeps it in their account. It is deleted when the artist deletes it or deletes their account.
Your choices: to see, correct or delete what you sent, contact the artist. You can also email questions@inkperch.com, and we will pass your request to the artist or help where the law requires us to.

Reminder texts

If an artist has reminder texts on, their Booking Page shows an unticked box under the phone field. Ticking it asks for reminder texts about your booking with that artist. Booking works the same without it.

What we keep: your phone number, the words beside the box when you ticked it, the time, the request it came with, and a one-way, keyed hash of your IP address. This is the record that you asked for texts.
What we send: reminders about your sessions and consults with that artist, and the artist’s aftercare after a session, up to 3 texts per booking, sent through Twilio from an Inkperch number. Message and data rates may apply.
Your replies: a reply to a reminder is placed in the artist’s thread with you.
Stopping: reply STOP to any text to end them. It stops texts from every artist who uses Inkperch. Reply HELP for help, or email questions@inkperch.com.
No marketing, no sharing: we never use your number for marketing. We do not sell, rent or share mobile numbers or text-message consent with anyone for their marketing. They are shared only with Twilio, to send and receive these texts.

Release forms you sign for an artist

An artist may send you a link to a release form to fill in and sign before your session. The artist decides what the form asks and what it says. Inkperch runs the page and stores the signed form on the artist’s behalf.

What you send: your full legal name, the details the artist asks for (such as date of birth, phone, email or address), your answers to their health questions, the statements you agree to, and the signature you draw. It goes to that artist only. We do not use it for anything else, and it is not sent to our AI provider.
The record of signing: the time you signed, your browser type, and a one-way, keyed hash of your IP address; we do not keep the IP address itself. A fingerprint of the signed form is stored with it, so it can be shown later that the form has not been changed.
Your copy: if you give an email address, a copy is emailed to you through Postmark. It lists what you agreed to and when. It does not include your contact details, date of birth or health answers; ask the artist for a full copy.
The link: the link is private to you. Anyone who has it can open the form until it is signed, cancelled or runs out (30 days), so do not forward it. The page never shows details about you beyond your first name.
How long it is kept: as long as the artist keeps it in their account. Many places require tattoo artists to keep signed forms for a set number of years. A signed form cannot be edited by the artist or by us.
Your choices: to see or get a copy of what you signed, or to ask about deleting it, contact the artist. You can also email questions@inkperch.com, and we will pass your request to the artist or help where the law requires us to. You can always ask the artist for a paper form instead.

9. Age limits

The App is intended for professional use by adults. Anyone under the age of eighteen is prohibited from using the App, and we do not knowingly collect personal information from anyone under eighteen through it. Booking Pages are not directed to children under thirteen, and artists may require clients to confirm they are eighteen or older. A release form can only be signed by someone who gives a date of birth that makes them eighteen or older. If you believe a minor has provided us information, contact us and we will take prompt action to delete it.

10. Your privacy rights (California and other U.S. states)

Depending on your state of residence, you may have rights regarding your personal information. These rights follow your residency, not where Inkperch is located, and apply to the extent required by applicable law. Where a comprehensive state privacy law applies to us, you may have the right to:

Know and access the personal information we have collected about you;
Request that we correct inaccurate personal information;
Request that we delete your personal information;
Obtain a copy of your personal information; and
Not be discriminated against for exercising these rights.

Where we hold a client’s information on an artist’s behalf (Sections 7 and 8), we handle requests about it with that artist.

No sale or sharing / no targeted advertising. We do not sell or “share” your personal information, and we do not use it for cross-context behavioral advertising, as those terms are used under the California Consumer Privacy Act (CCPA/CPRA) and similar state laws. Because of this, we do not offer a “Do Not Sell or Share My Personal Information” process: there is nothing to opt out of.

The table below describes the categories of personal information we may collect (using the CCPA category names), what each includes in Inkperch, where it comes from, and how it is used and disclosed. We disclose personal information only to service providers for the business purposes described, and only within the preceding twelve months.

Category of personal information	What this includes in Inkperch	Source	Business purpose & disclosure
Identifiers	Name, email, phone or social handle a client gives, a client’s drawn signature on a release form, account, device and notification identifiers	You; your clients; automatic	Operate the Services, accounts, notifications, support, security; disclosed to hosting, email, push and error-monitoring providers
Customer records / financial information	Income, expenses, deposits, tips, client payments, and payment and billing status	You; your clients; payment processors	Provide the Services and process billing and deposits; disclosed to hosting and payment/subscription providers
Commercial information	Subscription and transaction history; client requests, bookings and deposits; busy times from calendars you connect (dates and times only)	You; your clients; app stores; Stripe	Manage subscriptions, bookings and entitlement; disclosed to app stores, Stripe and billing providers
Internet / device / usage activity	Screen views, in-app events, diagnostics, crash and error logs; page views and request steps on the Site and Booking Pages, with IP address and browser type; for Booking Page requests, a hashed IP	Automatic	Reliability, security, abuse prevention and improvement; disclosed to error-monitoring, product-analytics, bot-check and hosting providers
Geolocation data (approximate)	Optional approximate location to fill in an address or find nearby clients	Device (with permission), foreground only	Convenience only; converted to a place label on-device and not stored; mileage comes from addresses you enter, not tracking
Visual information	Receipt images, trip documents, consent form images, client, placement and reference photos	You; your clients	Provide the Services and extract text; disclosed to hosting and the AI extraction provider (see Section 3)
Sensitive personal information	Health details a client writes on a consent or release form, including one signed on the web, and account login credentials	You; your clients	Used only to provide the Services and secure your account; never to infer characteristics about anyone
Professional / employment information	That you are a tattoo professional; studio or shop details; your Booking Page details	You	Personalize onboarding and features and show your Booking Page; disclosed to hosting providers

Categories we do NOT collect: biometric information; audio recordings (voice logging is turned into text on your device); continuous or precise location tracking and route recording; education records; protected classifications such as race, religion, or sexual orientation, except as a client may write them on a form an artist records; and inferences drawn to create a consumer profile for marketing.

A note on location. The App does not use continuous or precise location tracking and does not record your movements or routes. Any use of device location is optional, happens only while the App is open, and is converted to a general place label on your device without storing your coordinates. Because we do not collect precise geolocation, the “sensitive personal information” category for precise geolocation under the CCPA/CPRA and similar laws does not apply to our location use.

To exercise any of these rights, contact us at questions@inkperch.com, or by mail at Inkperch LLC, 2100 Manchester Rd #1440, Wheaton, IL 60187. We may take steps to verify your identity before responding, and you may designate an authorized agent where the law allows. If we deny a request, you may have the right to appeal by replying to our response.

11. Correcting or updating your information

You can view and edit much of your information directly in the App. If you believe information about you is inaccurate, or you would like it updated or deleted, contact us at questions@inkperch.com, or by mail at Inkperch LLC, 2100 Manchester Rd #1440, Wheaton, IL 60187.

12. Location and international users

The Services are operated from the United States and are intended only for users in the United States. The App is not offered outside the United States at launch. If we expand outside the United States in the future, we will update this policy to address the privacy laws that apply in those regions.

13. App Store privacy disclosures

Apple and Google require that we disclose our data practices in the App Store and Google Play listings. The categories described in this policy will be kept consistent with our store “privacy nutrition” disclosures.

14. Updates to this policy

We may update this policy from time to time. Updates will be posted here. If we make material changes, we will provide notice through the App, and registered users will receive an email. Please check this page for updates.

15. Contact us

Inkperch LLC
2100 Manchester Rd #1440, Wheaton, IL 60187
Email: questions@inkperch.com

Effective date: October 8, 2026