Privacy Policy
This policy explains what Bookink collects, why we collect it, and what you can do about it. We aim for plain English. If anything is unclear, write us at hello@bookink.ai.
1. Who we are
Bookink ("we", "us") is an AI booking assistant for tattoo artists and studios, operated independently by its founder. The data controller for personal data processed through Bookink is the founder. For any privacy question, write to hello@bookink.ai.
2. What data we collect
From studios (Bookink customers)
- Account data: name, email, studio name, country, WhatsApp number, payment method (stored by Stripe, not by us)
- Workspace configuration: pricing rules, artist profiles, restriction settings, AI tone preferences
- Usage data: how often you log in, which features you use, error reports
From your clients (people who use your Bookink link)
- Conversation data: the messages they send to your AI booking assistant — tattoo idea, references, size, placement, dates, contact info
- Contact data: name and WhatsApp number (so the AI can pass the brief to your studio's WhatsApp)
- Browser metadata: approximate location, device type, language
We do not collect payment information from your clients (deposits, if any, are handled outside Bookink and outside this policy).
3. Why we collect it
- To deliver the service you signed up for — running the AI, sending the brief to your WhatsApp, storing your opportunities
- To bill you correctly (Stripe handles your card data — we never see it)
- To improve the AI's responses over time (in anonymized, aggregated form)
- To respond when you write to support
- To meet legal obligations (tax records, fraud prevention)
4. Who we share data with
We only share data with companies that help us run Bookink. They are bound by contracts that require the same level of protection we offer.
- OpenAI — to generate the AI responses (messages are sent to OpenAI's API for processing; OpenAI does not train its models on Bookink data per our agreement)
- WhatsApp Business Cloud API (Meta) — to deliver formatted briefs to your studio's WhatsApp number
- Supabase — to host your workspace data (EU + US regions)
- Stripe — to process subscription payments
- Vercel — to host the bookink.ai website
- Rewardful — to track referral signups
- PostHog — to understand how the product is used (anonymized)
- Resend — to send transactional emails (trial nudges, billing receipts)
We do not sell your data or your clients' data. We do not share it with advertising networks.
5. Where data lives
Workspace data is hosted on Supabase in EU or US regions, depending on which is closest to your studio. WhatsApp messages flow through Meta's infrastructure. AI processing happens on OpenAI's infrastructure (typically US-based).
6. How long we keep it
- While you're an active customer: indefinitely, so you have access to your history
- If you cancel: we keep your data in a read-only state so you can come back. You can request full deletion at any time
- If you request deletion: we remove your workspace within 30 days (some logs retained up to 90 days for fraud / legal reasons)
7. Your rights
You have the right to:
- Access the data we hold about you
- Correct anything that's wrong
- Delete your data (subject to legal retention requirements)
- Export your data in a standard format (CSV)
- Opt out of non-essential email communications
- Lodge a complaint with your local data protection authority if you believe we're not meeting our obligations
To exercise any of these rights, email hello@bookink.ai. We aim to respond within 7 days.
8. Your clients' rights
Your clients (the people who use your Bookink link) also have the rights listed above. If one of them contacts you with a privacy request, you can forward it to hello@bookink.ai — we will help you respond.
9. Cookies and analytics
The bookink.ai website uses a minimal set of cookies — only what's needed to keep you logged in and to measure aggregate usage (via PostHog, which is GDPR-friendly and does not share data with third parties). No third-party advertising cookies. No tracking pixels across the open web.
10. Children
Bookink is built for tattoo professionals, and tattoo studios typically have minimum-age requirements for their clients. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided data through a Bookink link, write to hello@bookink.ai and we will remove it.
11. Changes to this policy
If we make material changes, we will email you and update the "Last updated" date at the top. For minor edits (clarifications, fixing typos), we just update the date.
12. Contact
For any question about this policy, your data, or how we handle it: