Introduction
InkFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tattoo artist management platform and services, including our integration with Instagram.
By using InkFlow, you agree to the collection and use of information in accordance with this policy.
Information We Collect
1. Information You Provide Directly
- Account Information: Email address, display name, password (encrypted)
- Profile Information: Business/studio name, contact details, location
- Payment Information: Processed securely through Stripe (we do not store your full credit card information)
- Client Data: Information about your clients including names, Instagram handles, email addresses, phone numbers, and booking details
- Communication Data: Messages, notes, and communications with your clients
2. Information from Instagram
When you connect your Instagram account to InkFlow, we collect:
- Instagram Profile Data: Username, profile picture, follower count
- Instagram Direct Messages: Messages sent to and from your Instagram account (only with your explicit permission)
- Instagram Media: Photos and videos you choose to share through our platform
- Instagram Insights: Basic analytics about your Instagram business account (if available)
Important: We only access Instagram data that you explicitly grant us permission to access through Instagram's official API. You can revoke this access at any time through Instagram's settings.
3. Automatically Collected Information
- Usage Data: How you interact with our platform, features used, pages viewed
- Device Information: Browser type, device type, IP address, operating system
- Cookies and Tracking: We use cookies and similar technologies to enhance your experience
How We Use Your Information
Primary Purposes:
- Service Delivery: Provide and maintain our tattoo booking and client management platform
- Instagram Integration: Sync your Instagram DMs, automate responses, and manage client communications
- Client Management: Help you organize, track, and communicate with your clients
- Booking Management: Facilitate appointment scheduling, reminders, and deposit collection
- Payment Processing: Process payments through our secure payment partner (Stripe)
Secondary Purposes:
- Communication: Send you service updates, newsletters, and promotional content (you can opt-out)
- Analytics: Understand how our service is used to improve functionality
- Support: Respond to your inquiries and provide customer support
- Legal Compliance: Comply with legal obligations and protect our rights
Information Sharing and Disclosure
We Share Your Information With:
Service Providers:
- Instagram/Meta: To enable Instagram DM integration and social features
- Stripe: For secure payment processing
- Supabase: For secure database hosting and authentication
- Twilio/SendGrid: For SMS and email notifications (optional features)
We DO NOT:
- Sell your personal information to third parties
- Share your client data with other InkFlow users
- Use your data for advertising to others
- Share Instagram data in violation of Instagram's Platform Policy
Instagram-Specific Privacy Practices
Instagram Platform Policy Compliance
InkFlow complies with Instagram's Platform Policy and Terms of Use. Specifically:
- Data Use Limitations: We only use Instagram data to provide our services to you
- No Unauthorized Sharing: We do not share your Instagram data with third parties except as required to provide our service
- Data Retention: We retain Instagram data only as long as necessary to provide our services
- User Control: You can disconnect your Instagram account at any time from your InkFlow settings
- No Replication: We do not replicate Instagram's core functionality
Revoking Instagram Access
You can revoke InkFlow's access to your Instagram account by:
- Going to Instagram Settings → Security → Apps and Websites
- Finding InkFlow and clicking "Remove"
- Or disconnecting from within your InkFlow settings
Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your data (subject to legal requirements)
- Portability: Export your data in a machine-readable format
- Opt-Out: Unsubscribe from marketing communications
- Disconnect: Remove Instagram integration at any time
Data Security
We implement industry-standard security measures to protect your information:
- Encryption: All data transmission is encrypted using SSL/TLS
- Password Security: Passwords are hashed and never stored in plain text
- Secure Storage: Data is stored on secure, encrypted servers
- Access Controls: Limited employee access to personal data
- Regular Audits: Periodic security assessments and updates
Contact Us
If you have questions about this Privacy Policy or our privacy practices:
Email: privacy@inkflow.app
Website: https://inkflow.app
This privacy policy is designed to comply with Instagram Platform Policy, Meta Platform Terms, GDPR, CCPA, CAN-SPAM Act, and standard privacy best practices.