Privacy Policy

Introduction

InkOrigins ("we", "our") is a tattoo culture gallery and AI design studio. This policy explains what data we collect, why, and the choices you have. The short version: your AI-generated works are private by default — nothing becomes public unless you actively share it.

Information We Collect

• Account information: name, email address and login credentials you provide when registering. We require email verification to prevent abuse of free generation quotas.
• Your creations: reference images, text prompts, generated designs and their metadata (model version, timestamps). Private works are visible only to you.
• Community content you publish: works you actively share, plus likes and favorites. Shared works get a public page URL.
• Usage data: pages visited, searches and generation success rates, used to improve the gallery and monitor costs.
• Payment data: processed by our payment provider and merchant of record, Waffo Pancake. We store order records (amount, currency, status) but never full card numbers; card data is handled by Waffo and is not stored on our servers.
• Device data: IP address, browser type and approximate region for security, rate limiting and fraud prevention.

How We Use Your Information

• To provide the gallery, AI generation, personal library and community features
• To enforce generation quotas and prevent abuse (one lifetime free quota per account)
• To process download purchases and manage licenses
• To moderate public content and respond to copyright or safety reports
• To send transactional emails (verification, password reset, order receipts)

Private by Default

• New AI generations are private. Only you can view, download or delete them.
• A work enters the community list or a public URL only after you choose to share it. You can unpublish or delete it at any time; we remove public access promptly and purge caches on a best-effort basis.
• Private works, account pages, orders and the admin console are excluded from search indexing.

AI Processing

• When you generate a design, your reference image and prompt are sent to our AI image provider (fal.ai) for processing. Their handling of this data is governed by their own terms.
• Models we use: image-to-image customization and text-to-image run on Nano Banana (Google's Gemini image model), enhancement uses Clarity Upscaler, and background removal uses BiRefNet. We name the active model in the studio and update this list when models change.
• We log model versions, timings and error types to track reliability and cost.

Cookies & Analytics

We use strictly necessary cookies for login sessions and locale preferences. If we enable analytics, it will be privacy-respecting (no cross-site tracking profiles) and disclosed here.

Data Retention & Deletion

• You can delete individual works at any time from My Tattoos.
• You can delete your account from Settings → Security, which removes your profile, works, quota records and orders' personal links (anonymous accounting rows may remain for tax compliance).
• Backups expire on a rolling basis (typically ≤ 90 days).

User Data Rights

You can exercise the rights below wherever you live; where the GDPR, UK GDPR, CCPA/CPRA or similar laws apply, these rights are legally guaranteed.

• Access — obtain a copy of the personal data we hold about you. Request an export by email.
• Correction — fix inaccurate or incomplete information (name, email, etc.). Edit your profile in Account Settings, or email us.
• Deletion — delete specific works or your personal data. Delete works in My Tattoos, or email us.
• Portability — receive your data in a machine-readable format. Request an export by email.
• Restriction / objection — ask us to restrict or stop certain processing. Email us.
• Withdraw consent — withdraw consent for consent-based processing. Use Account Settings, or email us.

How to make a request

• In-product (fastest): edit your profile in Account Settings; delete individual designs in My Tattoos; delete your whole account in Settings → Security.
• By email: write to support@tattoofactory.one (or use our Contact page) from your account email, stating the right you want to exercise and any details that help us locate the data.
• Identity verification: to protect your account we may ask you to confirm the request from your registered email address.
• Authorized agents: may submit requests on your behalf with proof of authorization.

Account closure (deletion)

Deleting your account removes your profile, private works, quota records and the personal links on your orders; anonymous accounting and tax records may be retained as required by law. Any works you had shared publicly are unpublished. You can close your account from Settings → Security, or by emailing us.

Processing times

• We acknowledge requests within 2 business days and respond within 30 calendar days.
• If a request is complex, we may extend this by up to 60 days and will tell you why.
• Deletion and data exports are usually completed within 30 days; backups then expire within 90 days.
• If we cannot fulfill a request (for example, because the law requires us to keep a record), we explain the reason.

Complaints

If you are not satisfied with our response, you may lodge a complaint with your local data protection authority (for example, in the EU/EEA or the UK). We ask that you contact us first so we can try to resolve it.

Children

InkOrigins is not directed at children under 13 (or the minimum age in your jurisdiction). Accounts found to belong to children will be removed.

Changes to This Policy

We will post updates here and revise the date above. Material changes will be announced by email or in-product notice.

Contact Us

Questions about privacy or data deletion? Please contact us.