Privacy Policy

Collabo.ink is operated by Colabo Labs LLC, a Wyoming, USAlimited liability company (“Collabo”, “we”, “us”). Registered address: 30 N Gould St, Ste N, Sheridan, WY 82801, USA.

• Artists: email, name, city, timezone, payout details via Stripe, Instagram handle if connected (Pro tier).
• Clients (booking on an artist’s mini-site): name, email, phone (optional), tattoo idea description, body placement, approximate size, reference image links.
• Operational data: bookings, payments, soft-holds, intake responses, internal artist notes.

• Date of birth (we use a self-attested 18+ checkbox).
• Medical history (we recommend artists collect this in-person on the day of the session).
• Government ID, social security number, or comparable identifiers.
• We don’t sell, rent, or share your data with advertisers.

If you provide a mobile phone number, we use it solely to send transactional text messages about your account or bookings on Collabo.ink — for example verification codes, booking confirmations, reminders, and cancellations.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

Message frequency varies based on your bookings and account activity. Message and data rates may apply. Reply STOP at any time to opt out, or HELP for help.

Client intake submissions are visible only to the Artist they were sent to. Artists’ public mini-site fields (name, city, bio, services, availability) are public by design — that’s the point of the link.

Payments use Stripe Connect Express. We never see card numbers; Stripe handles all PCI-compliant storage.

These companies process data on our behalf, under contract and only on our instructions, so that Collabo.ink can function. They are not permitted to use your data for their own purposes, and we do not sell, rent, or otherwise disclose your information to third parties or affiliates for their marketing or promotional purposes.

• Twilio — delivers the text messages described above. Twilio receives your mobile number solely to transmit those messages to you, and never for marketing.
• Supabase — database, authentication, file storage.
• Stripe — deposit payments and Connect payouts.
• Vercel — hosting + edge delivery.
• Resend — transactional email (booking confirmations, etc.).
• Google Calendar API — only for artists who opt in to Google Calendar integration. See below for full details.
• Meta Graph API — only for artists who opt in to Instagram DM integration.
• OpenAI — only for AI auto-reply; processes incoming DM text to generate replies; no DMs are used to train models.

Artists may optionally connect their personal Google Calendar account. When connected, Collabo.ink accesses Google Calendar data solely to provide the following features:

• Booking events (auth/calendar.events): confirmed bookings are written to the artist’s Google Calendar as events so sessions appear in their existing workflow.
• Availability blocking (auth/calendar): existing Google Calendar events are read to identify unavailable time slots and prevent double-bookings on the artist’s public booking page.

The Google Calendar data we access (event titles, times, and descriptions) is used exclusively to provide the two features above. It is not shared with any third party, not used for advertising, and not used to develop, improve, or train any AI or machine learning model. Artists can disconnect Google Calendar at any time from their dashboard settings, at which point we delete the stored OAuth tokens immediately.

Data protection: Google Calendar OAuth tokens are stored encrypted in our database. Access is scoped to the minimum permissions required (read events for availability; write events for booking confirmations). We do not cache, copy, or retain raw calendar event data beyond what is necessary to render availability in real time.

The use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Account data: kept while the account is active. Deleted immediately on account deletion. Payment records are retained per applicable financial regulations (~7 years).
• Intake reference images: kept in a private bucket; only the owning artist can read. Soft-holds that expire without intake submission are auto-cleaned.

You can request access to, correction of, or deletion of your personal data by emailing hello@collabo.ink. Artists can also delete their account from Settings → Account & Security. Client data removal requests submitted via /data-deletion are fulfilled within 30 days.