Privacy Policy

At TatMap, your privacy isn't just a legal checkbox — it's a core value. We collect only what we need to give you a great experience, we never sell your personal data, and we're transparent about everything we do with your information.

This Privacy Policy explains what data we collect, why we collect it, and how you can control it. It applies to all users of TatMap, whether you're a client looking for your next tattoo or an artist building your business.

Account Information: When you sign up, we collect your name, email address, and password. Artists additionally provide their studio name, location, styles, rates, and portfolio images.

Booking Information: When you make or receive a booking, we process appointment details including date, time, description, and payment information. Payment processing is handled securely by Stripe — we never store your full credit card number.

Verification Documents: Artists who apply for verification submit government ID and health certifications. These documents are encrypted, stored securely in Firebase Storage, and are only accessible by TatMap administrators.

Messages: Messages between clients and artists are stored to provide the messaging service. We do not read your messages unless required to investigate a reported safety concern.

Usage Data: We collect standard analytics data including pages visited, features used, and device information. This helps us improve the platform and fix bugs.

Location: With your permission, we may use your location to show nearby artists on the map. You can revoke location access at any time through your browser settings.

We use your information to operate and improve TatMap, connect clients with artists, process payments, send appointment reminders, provide customer support, and protect against fraud.

We may send you emails about your bookings, important platform updates, or (with your consent) occasional newsletters about new features. You can unsubscribe from marketing emails at any time.

We use industry-standard security measures including encrypted data transmission (HTTPS/TLS), secure authentication through Firebase, encrypted storage for sensitive documents, and role-based access controls that limit who can see what.

Verification documents (government IDs and health certificates) receive extra protection: they are stored in a restricted area of our cloud storage, accessible only to verified TatMap administrators, and are never shared with other users, clients, or third parties.

We never sell your personal data. Period.

We share limited information with trusted service providers who help us run TatMap: Firebase (hosting and database), Stripe (payments), Resend (email), and Vercel (deployment). Each of these providers has their own privacy commitments and processes data only as needed to provide their services.

Artist profiles (name, portfolio, rates, reviews) are publicly visible by design — that's how clients find you. Clients' personal information is only shared with artists they book with, and only to the extent needed to complete the appointment.

You have the right to access your personal data, correct inaccurate information, delete your account and associated data, export your data, opt out of marketing communications, and revoke location permissions.

To exercise any of these rights, contact us at hello@tatmap.ca or use the account settings in the app.

Under Canadian privacy law (PIPEDA) and applicable provincial legislation, you have additional rights regarding the collection, use, and disclosure of your personal information. We comply with all applicable Canadian privacy regulations.

TatMap uses essential cookies to keep you logged in and remember your preferences (like dark mode). We use basic analytics to understand how people use the platform. We do not use advertising cookies or sell data to advertisers.

TatMap is not intended for anyone under 18 years of age. We do not knowingly collect personal information from minors. If we learn we have collected information from someone under 18, we will delete it promptly.

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain certain records for legal or financial compliance purposes.

Booking records and financial transactions may be retained for up to 7 years as required by Canadian tax law.

We may update this Privacy Policy from time to time. If we make significant changes, we'll notify you through the platform or by email. The "Last updated" date at the top of this page indicates when the policy was last revised.

If you have any questions, concerns, or requests regarding your privacy, please reach out to us at hello@tatmap.ca.

We take every privacy inquiry seriously and will respond within 30 days.