Privacy policy

Who we are and what this covers

AI Tattoo Lab is operated by [LEGAL ENTITY]. This policy covers the website at aitattoolab.com, the tattoo design generator and any account you create with us. [LEGAL ENTITY] is the data controller for the personal data described here.

You can contact us about anything in this policy at hello@aitattoolab.com.

What we collect

We try to collect as little as the product allows. In practice that is the following.

• Account data: your email address and a password hash, plus your plan and subscription status.
• Prompts: the text you type into the generator and the style, placement and size settings you choose.
• Generated designs: the images the generator returns for your account, and any edits you make.
• Uploads: reference photos or images you choose to upload.
• Usage analytics: pages viewed, features used, approximate location from IP address, device and browser type, and error logs.
• Support messages: anything you send us by email, and our replies.

Why we use your information

We use account data to create and secure your account and to apply the limits of your plan. We use prompts and settings to generate designs, to show you your history and to investigate faults. We use generated designs to display your library and, on the free plan, to populate the public gallery.

We use usage analytics to understand which features are used and to fix bugs and abuse. We use your email to send service messages such as billing receipts, password resets and changes to these policies. We send marketing email only if you opt in, and you can unsubscribe at any time.

Legal bases for processing

If you are in the EU, the EEA or the UK, we rely on the following legal bases under the GDPR and the UK GDPR.

• Contract: creating your account, generating designs, storing your library and handling billing.
• Legitimate interests: keeping the service secure, preventing abuse, and basic product analytics, balanced against your rights.
• Consent: optional cookies and marketing email. You can withdraw consent at any time.
• Legal obligation: tax and accounting records, and responding to lawful requests.

Payments

Paid plans are handled by a third party payment processor. Card numbers are entered on the processor’s systems and are never stored on our servers. We receive a customer reference, the plan you bought, the status of the subscription and enough billing detail to issue receipts and handle refunds and tax.

The processor is an independent controller for its own fraud prevention and compliance purposes, and its privacy notice applies to that processing.

How long we keep data

Retention is deliberately short where we can make it short.

• Uploads: deleted 30 days after you upload them.
• Generated designs and prompts: kept while your account exists, then deleted when you delete the account.
• Account data: deleted when you delete your account, apart from records we must keep by law.
• Billing records: kept as long as tax and accounting law requires.
• Usage analytics and server logs: kept for a limited retention window, then deleted or aggregated.
• Support email: kept while it is useful for support history, then deleted.

Who we share data with

We do not sell personal data and we do not share it with advertisers. We use service providers who process data on our behalf under written contracts: cloud hosting and storage, the AI model provider that generates images from your prompt, the payment processor, email delivery for service messages, analytics and error monitoring, and customer support tooling.

We may also disclose data if the law requires it, to protect the rights and safety of users, or as part of a merger or sale of the business, in which case we will tell you before your data becomes subject to a different policy.

Cookies and similar technologies

We use strictly necessary cookies to keep you signed in, to remember your plan and to protect forms against abuse. These cannot be switched off without breaking the site. We use analytics cookies to count visits and understand which features people use, and these run only where you have accepted them or where local law allows.

You can clear or block cookies in your browser. If you block the necessary ones, signing in and generating designs will not work.

Your rights in the EU and the UK

Under the GDPR and the UK GDPR you can ask us to do the following, free of charge in most cases, and we will respond within one month.

• Access a copy of the personal data we hold about you.
• Correct data that is wrong or incomplete.
• Delete your data, including your account and your generated designs.
• Restrict or object to processing that relies on our legitimate interests.
• Receive your data in a portable, machine readable format.
• Withdraw consent for optional cookies or marketing at any time.
• Complain to your local data protection authority if you think we have got it wrong.

Your rights in California

Under the CCPA and the CPRA, California residents can request the categories and specific pieces of personal information we have collected, the purposes for collecting it and the categories of third parties it was disclosed to. You can request deletion and correction, and you can ask us to limit the use of sensitive personal information.

We do not sell personal information and we do not share it for cross context behavioural advertising. We will not discriminate against you for exercising any of these rights. To make a request, email hello@aitattoolab.com from the address on your account.

International data transfers

Our service providers may process data in countries other than the one you live in, including the United States. Where data leaves the EEA or the UK, we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision where one applies, together with the technical and organisational measures set out in our contracts with those providers.

Age limit and deleting your account

AI Tattoo Lab is for adults. You must be 18 or older to create an account, and the service is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, email hello@aitattoolab.com and we will delete it.

You can delete your account at any time from your account settings, or by emailing hello@aitattoolab.com from the address on the account. Deletion removes your prompts, generated designs and account record, apart from billing data we are required to keep. Deletion is permanent and we cannot restore designs afterwards.