Privacy Policy

Canvs is run by Inkd Group Pty Ltd (ABN 86 768 265 615), Sydney, Australia ("Canvs", "we"). Canvs helps people find and book tattoo artists, and helps artists and studios manage their bookings. Questions or requests: support@canvs.ink.

When you create an account: your name, email address and password (stored only as a secure hash).

When you book: the piece you want (size, style, colour and placement), the time you choose, the price and payments, and your answers to the booking consent form. With the consent form we record the date, your IP address and your browser, as a record that you agreed.

If you set preferences: the styles, placements and budget you like, and your suburb.

If you use "Use my location": your browser sends your location to us once so we can find your nearest suburb. We keep only the suburb, never your exact location.

If you are an artist or studio: your profile (name, bio, photos, styles, handle and Instagram name if you add it), your rates and pricing, your working hours, where you work, your arrival notes, and your portfolio. Payout details and identity checks are collected by Stripe, not by us.

If you join the waitlist on canvs.ink: your name, email, Instagram name, city, styles, phone number if you give it, whether you'd like a call, your marketing choice, and how you found us.

When you use the site: our hosting providers keep standard request logs (IP address, browser and pages requested).

Feedback you send us.

To run your account, show artist profiles, take and manage bookings, process deposits and balances, send booking emails and reminders, and prevent misuse. Your email is used for booking and account messages. We only send marketing to people who opt in, and you can opt out at any time.

When you book, your artist (and their studio, if they work for one) sees your name and your booking details. Your artist's street address is shown to you only once your booking is confirmed. Reviews show your first name and last initial.

Artists can connect a Google Calendar. We request access to free/busy information, so we can stop people booking times you're already busy, and, if you allow it, to create a "Canvs bookings" calendar where we add your confirmed bookings (the name of the person booking, the time, the address and the booking reference). We never read the titles or details of your other events. Your Google tokens are stored encrypted. When you disconnect, we revoke our access with Google and delete the busy times we stored.

Canvs's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell Google user data, use it for advertising, or let people read it except where needed to run the service, for security, or where the law requires.

Artists upload portfolio photos, which are public. At the end of a session your artist uploads photos of the finished piece as a record that the work was completed. We don't publish these. At booking you choose whether your artist may photograph the finished piece for their portfolio. Your artist is responsible for following your choice.

Card payments are handled by Stripe. Your card details go straight to Stripe; we never see or store your card number. Your deposit and balance are paid to your artist or studio through their Stripe account.

We share personal information only with the other party to your booking and with the service providers that run Canvs: Stripe (payments), Google (calendar, for artists who connect it), Resend (email), Cloudflare (image storage), Railway and Vercel (hosting), Hetzner (our website host) and Supabase (the waitlist). We don't sell personal information.

Some of these providers store information outside Australia, including in the United States, Finland and India. We choose providers with strong security and contractual privacy commitments.

We keep your account information while your account is open. Booking, payment and consent records are kept for seven years, because tax and consumer law require it. When information is no longer needed, we delete or de-identify it.

You can ask to see or correct the information we hold about you, or ask us to delete your account, by emailing support@canvs.ink. We'll respond within 30 days. Some records (bookings, payments and consent) must be kept as described above. You can unsubscribe from marketing emails at any time.

We use a small number of cookies and browser storage items that are needed to keep you signed in. Stripe sets cookies on the payment step to prevent fraud. We use Google Analytics to count which pages are visited. It sets its own cookies, your IP address is anonymised, and we never send it your name, email or booking details. We don't use advertising cookies.

You must be 18 or older to book a tattoo or create an account.

If you have a concern about how we handle your information, email support@canvs.ink and we'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

If we change this policy, we'll update the date above and, for significant changes, let account holders know by email.