Privacy Policy

This policy explains what personal data CustomTattoo AI collects, why, and the choices you have. We are the data controller for the personal data described here.

The data controller is Elliot Ronsin, individual entrepreneur (France), reachable at support@customtattooai.com.

What we collect

• Account data: your email address and name, managed for us by Clerk.
• Payment metadata: which pack you bought and when, via Stripe. Stripe handles your card details directly. We never see or store your card number.
• Prompts and generated images: the text you enter and the tattoo designs the service creates for you.
• Uploaded body/skin photos (try-on): photos you upload for the try-on preview are sent to Google Gemini to render the preview, and stored in your private library on Supabase. We do not use them to train any model, and you can delete them at any time (see below).
• Product analytics: PostHog records how you use the product only if you accept analytics cookies. Vercel also provides cookieless, aggregate traffic analytics that do not identify you.
• Error data: when something breaks, Sentry (hosted in the EU) records technical details to help us fix it. This is never used for marketing.
• Operational logs: we keep basic signup and generation event records to run and monitor the service.

Why we can use your data (legal bases)

• Contract: to run your account, process payments, and generate the designs and previews you ask for.
• Consent: for analytics cookies (PostHog). You can withdraw this at any time.
• Legitimate interest: to keep the service secure, prevent abuse, monitor errors, and understand overall usage.
• Legal obligation: to keep purchase and accounting records.

How long we keep it (retention)

We keep your account data until you delete your account. Your prompts, generated images, and uploaded try-on photos stay until you delete them or delete your account, whichever comes first. When you delete your account, we purge your profile, library, stored images, and event logs. We keep purchase records (for example Stripe payment records) for as long as tax and accounting law requires; after account deletion these are retained only to meet that legal obligation and are dissociated from your deleted account.

Who processes your data (subprocessors)

We rely on a small set of trusted providers to run the service. They only process your data to provide their part of the service.

• VercelHosting and cookieless aggregate analytics
• ClerkAccount and authentication
• SupabaseDatabase and image storage
• StripePayment processing (we never see your card number)
• GoogleGemini image model: processes prompts and uploaded images to generate results
• PostHogProduct analytics (only after you accept cookies)
• Sentry (EU)Error monitoring, hosted in the EU
• ResendTransactional email
• DiscordInternal ops notifications (no user data beyond a masked email)

We never sell your data

We do not sell or rent your personal information to anyone, and we do not use your uploaded photos to train AI models.

Your rights

Under the GDPR you can request access to your data, correct it, delete it (erasure), or receive a portable copy, and you can object to or restrict certain processing. To exercise them:

• Delete your account yourself at any time from your account page. This removes your profile, library, stored images, and event logs.
• Email us at support@customtattooai.com for any other request.

If you believe we have mishandled your data, you can lodge a complaint with the French data protection authority, the CNIL, or with your local EU supervisory authority.

Cookies

We keep cookies to a minimum:

• Clerk session cookie:It is essential and keeps you signed in. The service can't work without it.
• PostHog analytics: These are set only if you accept them in the cookie banner. Decline and none are set.

You can change your choice at any time: Cookie settings.

Children

The service is not intended for anyone under 16. Tattoo content is meant for adults, and getting a tattoo is an 18+ decision.

Contact

Questions about your privacy? Email support@customtattooai.com.