Tatvaro provides booking, deposit, and digital-waiver tools for independent tattoo artists. We take privacy seriously — especially the sensitive information collected on tattoo consent forms. This policy explains what we collect, how we use and protect it, who we share it with, and the rights you have.
Tatvaro ("we", "us") operates the Tatvaro platform at tatvaro.com. For questions about this policy or your data, contact us at privacy@tatvaro.com.
Tattoo artists using Tatvaro to collect their clients' information are the data controllers of that client data; Tatvaro acts as their data processor, handling it on their behalf.
When an artist creates an account: name, email, business name, and (for password sign-ups) a securely hashed password. If you sign in with Google, we receive your name and verified email from Google.
Booking requests and digital waivers may include a client's name, email, phone, date of birth, tattoo details, medical/health questionnaire answers, a drawn signature, and an optional photo of a government ID. Medical answers, date of birth, signature, and ID photo are treated as sensitive personal data.
Payments are processed by Stripe. Tatvaro does not store card numbers — card details go directly to Stripe. Deposits and balances are paid to the artist's own connected Stripe account.
Basic technical information such as IP address and device/browser data, and essential cookies needed to keep you signed in.
For users in the UK/EU, our legal bases are: performance of a contract, your consent (for waiver/health data, given at signing), legitimate interests (running and securing the service), and legal compliance.
We share data only with service providers who help us run Tatvaro ("sub-processors"), each under their own privacy commitments:
We do not sell personal data, and we do not use it for advertising.
Tatvaro and its providers may process data in the United States and other countries. Where data is transferred internationally, we rely on our providers' safeguards (such as Standard Contractual Clauses) for that transfer.
We keep account and waiver data for as long as the account is active or as needed to provide the service and meet legal/record-keeping requirements. Artists can delete individual client waivers at any time, and can request deletion of their account and associated data by contacting us.
Depending on where you live (including under UK/EU GDPR, Canada's PIPEDA, and Australia's Privacy Act), you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing.
Requests can be sent to privacy@tatvaro.com.
Tatvaro is intended for tattoo professionals and adult clients. Tattoo waivers require confirmation that the client is 18 or older. The service is not directed to children.
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.
Questions? Email privacy@tatvaro.com.