Privacy policy

Two roles: controller and processor

For the data in your own account (studio, artist or client), Tinctura is the controller: we decide how and why that data is processed.

Studios also keep records of their own clients in Tinctura: name, contact details, appointments, tattoos and notes. For that data, the studio is the controller and Tinctura is the processor. We process it only to provide the service to the studio, following the studio's instructions. If you're a studio's client and want to exercise your rights over that data, contact the studio; we'll help the studio handle your request.

What data we process

• Account: name, email, password (stored only as a cryptographic hash that nobody can read), chosen language and theme, last sign-in date.
• Studio profile: name, description, logo and cover image, city, state, postal code, phone, email and Instagram.
• Artist profile: name and artist name, bio, photos, phone, specialties, years of experience and Instagram.
• Client profile: name, display name, photos, date of birth, phone, email, city, state, postal code, country, bio and preferred styles.
• Use of the service: appointments, quote requests (description, body placement, size, reference images, dates and budget), tattoo records (photos, videos and notes), posts, likes, followers, notifications and the change history of these records.
• Subscription (studios): plan, subscription status and Stripe identifiers. Card details are entered directly with Stripe; Tinctura never sees or stores your card number.
• Technical data: IP address, date and time of access, browser, and error and security logs.

Tinctura doesn't ask for sensitive data such as health, religion or biometrics. If a studio records that kind of information in its notes (for example, a client's allergies), the studio is responsible for having the proper legal basis.

Why we use it and on what legal basis

• Creating and keeping your account, providing the service and sending verification, password reset and service emails: performance of a contract (art. 7, V).
• Charging studios' subscriptions and issuing tax documents: performance of a contract and compliance with a legal obligation (art. 7, V and II).
• Showing public profiles, the portfolio and posts: performance of a contract (art. 7, V).
• Keeping access logs for 6 months: legal obligation under Brazil's Internet Civil Framework, Law No. 12,965/2014, art. 15 (art. 7, II).
• Protecting the service against fraud and abuse (for example, limiting sign-in attempts) and fixing errors: legitimate interest (art. 7, IX).
• Defending rights in legal or administrative proceedings (art. 7, VI).

We don't sell personal data, use your data for advertising or build marketing profiles.

What is public

Studio and artist profiles, posts and the portfolio are public: anyone can see them, even without an account, including any contact details you add to those profiles.

Client profiles publicly show name, photos, city, state, country, bio and preferred styles. Phone, email, date of birth and postal code are not shown to other people.

Photos of clients' tattoos only appear in the public portfolio when the studio marks that the client has authorized it. The studio is responsible for getting that authorization.

Who we share it with

• Amazon Web Services (AWS): hosting, database, image storage and email delivery, in the São Paulo region, Brazil.
• Stripe: processing subscription payments. Stripe is the controller of the payment data you give it and handles it under its own privacy policy.
• Studios and artists: when you, as a client, send a request or have an appointment, the studio and artist involved see the data they need to serve you.
• Authorities: when required by law or a court order.

International transfers

Tinctura's data is stored on servers in Brazil. Payment data may be processed by Stripe in the United States and other countries, with the safeguards required by article 33 of the LGPD.

Cookies

We only use cookies the site needs to work: a session cookie that keeps you signed in and can't be read by scripts, and a cookie that remembers your chosen language. We don't use advertising cookies or third-party analytics.

How long we keep it

• Account and usage data: while the account is active.
• After a deletion request: deleted or anonymized within 30 days, except what the law requires us to keep.
• Access logs: 6 months, as required by the Internet Civil Framework.
• Billing and tax records: for the period required by tax law (generally 5 years).
• Backups: replaced within 30 days.
• Client data recorded by a studio: while the studio keeps its account. When a studio closes its account, that data is deleted within 90 days, unless the studio instructs otherwise.

Your rights

Under the LGPD (art. 18), you can ask for:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
• portability of your data to another provider;
• information about who we share your data with;
• deletion of data processed based on your consent, and withdrawal of that consent;
• review of decisions made solely by automated processing (Tinctura doesn't make such decisions today);
• objection to processing that breaches the LGPD.

How to exercise your rights

You can correct much of your data yourself in your profile. For anything else, contact us using the details below, preferably from your account's email. We may ask you to confirm your identity first. We reply within 15 days.

You can delete your account in Settings, from the menu under your picture. The account is deactivated right away and its data is deleted for good within 30 days; until then, contact us if you want to undo it. If you have a studio, its subscription is cancelled at the same moment.

If you're not satisfied with our answer, you can complain to Brazil's National Data Protection Authority (ANPD) at gov.br/anpd.

Security

We use encrypted connections (HTTPS), passwords stored with bcrypt hashing, encrypted storage, permissions that limit what each person can see, servers with restricted access and daily backups.

No system is completely secure. If a security incident could cause significant risk or harm, we'll notify the ANPD and the people affected, as the LGPD requires (art. 48).

Minors

Tinctura is meant for people aged 18 or over, and we don't create accounts for minors. A studio that serves minors, where the law allows it and with a guardian's authorization, is responsible for the data it records about them.

Changes to this policy

We may update this policy. The date at the top shows the version in force, and we'll announce important changes by email or on the site.