Privacy Policy

1. Scope and our role

This Privacy Policy explains how Studio Waiver collects, uses, stores, and shares personal information through the Studio Waiver mobile application and website (the “Service”).

Tattoo studios use the Service to collect and manage their own waiver and consent records. For information submitted in a waiver, the participating studio determines why the information is collected and how it is used, and Studio Waiver processes that information on the studio’s behalf. Studio Waiver is responsible for platform account, security, and subscription information that it collects for operating the Service.

2. Information we collect

Depending on how you use the Service, we may collect:

• Identity and contact information: name, birth date, phone number, email address, mailing address, and appointment date.
• Waiver and tattoo information: selected artist, tattoo description, body location, acknowledgements, consent responses, and the completed waiver document.
• Health and sensitive information: health-screening answers, disclosed medical conditions or details, pregnancy or nursing status, and impairment or disability acknowledgements.
• Photos and signatures: images of government identification and electronic signatures from clients, parents or guardians, artists, or staff, where required.
• Studio and staff information: studio name and branding, staff names, email addresses, roles, and authentication information.
• Subscription information: subscription tier, purchase status and history, renewal status, and organization or customer identifiers. Apple processes payment-card details; Studio Waiver does not receive full payment-card numbers.
• Technical and security information: information needed to operate, secure, troubleshoot, and prevent misuse of the Service, such as request, error, and authentication records.

3. How we use information

We use information to create and deliver waiver records; provide records to the client and participating studio; authenticate staff; operate studio accounts; manage subscriptions and restore purchases; provide support; maintain security; diagnose problems; comply with legal obligations; and improve the reliability and functionality of the Service.

We do not use personal information for third-party advertising, and we do not track users across other companies’ apps or websites for advertising purposes.

4. How information is shared

Information may be shared with:

• the participating tattoo studio and its authorized staff;
• the client, parent, or guardian receiving a completed waiver;
• service providers that support hosting, encrypted storage, email delivery, authentication, app distribution, payments, and subscription management, including Apple, RevenueCat, and Cloudflare;
• professional advisers, authorities, or other parties when reasonably necessary to comply with law, protect safety or rights, investigate misuse, or complete a business transaction subject to appropriate safeguards.

We do not sell personal information.

5. Storage, security, and retention

Studio Waiver uses organizational access controls and encryption designed to protect stored waiver records and keep each studio’s data separated. No system can guarantee absolute security, and users should protect their account credentials and devices.

Waiver records are generally retained for seven years so participating studios can meet recordkeeping, legal, and dispute-resolution needs. Account, subscription, security, and backup information may be retained for as long as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Information may be deleted or de-identified when it is no longer needed.

6. Google user data and Gmail

Studio Waiver uses the Gmail API only to send transactional emails from the Google account connected by the Service operator. These emails include completed waiver copies, staff sign-in codes, and administrator password-reset verification codes.

The Service requests only the Gmail permission needed to send email. It does not read, list, search, modify, or delete messages in the connected Gmail mailbox, and it does not access Google contacts, calendars, files, or advertising information. OAuth credentials are used only to authenticate these send requests and are protected as confidential application secrets.

Information used to create and address these emails may include recipient email addresses, client and studio names, verification codes, waiver reference information, and completed waiver PDFs. This information is used only to provide the requested Studio Waiver functionality and is not sold or used for advertising.

Google user data is not transferred or disclosed to third parties except as necessary to provide or secure the requested email functionality, comply with law, or protect users and the Service. Studio Waiver's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

8. Minors

The Service is not directed to children for independent use. When a participating studio accepts a minor client as permitted by applicable law and studio policy, information may be collected as part of the waiver process with the involvement and consent of a parent or legal guardian. Parents or guardians may contact the participating studio or Studio Waiver with questions about that information.

9. Changes to this policy

We may update this Privacy Policy as the Service or applicable requirements change. We will post the revised policy here and update the “Last updated” date. Material changes may also be communicated through the Service or another appropriate method.

10. Contact us

For privacy questions or requests, email info@conartists.art. If your request concerns a particular waiver, include the participating studio’s name and enough information for the record to be located, but do not email identification images or sensitive health details.