Privacy Policy

1. Introduction

NeedleSlot ("we", "us", "our") provides booking and light CRM software for tattoo studios and artists. This policy explains what information we collect, how we use it, and the choices you have.

2. Information We Collect

If you're a studio owner or artist: you can sign up with Google or with an email address and password. With Google, we receive your name, email address, and profile picture — we never see your Google password. With email, your password is stored only in hashed form by our authentication provider. We also store what you add to your studio or artist profile: studio name, hours, address, social links, logo, banner, profile picture, and pricing.

If you're booking an appointment with a studio: we collect the information you submit through the booking form — your name, email, phone number, appointment preferences, and any reference or placement photos you upload. If you sign a consent agreement, we store your signature. If you leave a review, we store your rating and comment.

If you pay for a plan: payments are handled by Razorpay. Your card, UPI, or bank details go directly to Razorpay and never reach our servers — we only keep a record of the order: amount, currency, billing period, and payment ID.

If you contact us: we receive the name, email address, and message you send through our contact or help form.

Automatically: we use cookies to keep you signed in, and your browser remembers your light/dark theme choice. We don't currently use any analytics or advertising trackers.

3. How We Use Your Information

• To operate the booking and scheduling features you use
• To send service emails — for example, telling an artist about a new booking request or a signed agreement, or asking a client to review a finished session
• To let studio owners and their artists view and manage their own bookings and clients
• To respond when you contact us for support

4. Who We Share It With

The studio you book with can see the information in your booking. Beyond that, we use a small number of service providers to run NeedleSlot:

• Supabase — hosts our database, handles authentication, and stores signed agreement signatures
• Cloudinary — stores and serves uploaded images (reference and placement photos, studio logos and banners, profile pictures)
• Google — provides sign-in for studio owners and artists who choose it
• Resend — sends our emails (booking notifications, review requests, and replies to contact messages)
• Razorpay — processes plan payments
• Vercel — hosts the application

We don't sell your information, and we don't share it with third parties for their own marketing purposes.

5. Data Retention

We keep your information for as long as your account (or a studio's booking record involving you) is active. Cancelled bookings are deleted automatically about a week after they're cancelled. You can ask us to delete your data at any time — see "Your Rights" below.

6. Your Rights

You can ask us to access, correct, or delete the personal information we hold about you. Send us a request through our contact formand we'll respond within a reasonable time.

7. Security

We take reasonable technical and organizational measures to protect your information, including access controls and encryption in transit. No system is completely secure, and we can't guarantee absolute security.

8. Children's Privacy

NeedleSlot isn't directed at children under 18. If you believe a child has provided us with personal information, contact us and we'll remove it.

9. Changes to This Policy

We may update this policy as the product evolves. We'll update the "Last updated" date above when we do.

10. Contact Us

Questions about this policy? Reach us through our contact form.