1. About pure.ink

pure.ink (“Pure,” “we,” “us,” or “our”) is operated by Colabo Labs LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA.

Pure is a platform for independent tattoo artists to showcase their work, communicate with clients, manage inquiries and bookings, and organize their availability. Artists independently choose their services, booking requirements, and intake questions. An artist you contact may have additional privacy practices of their own.

2. Information we collect

Artist accounts and profiles

We may collect an artist’s name, email address, account and authentication identifiers, profile photo, Instagram handle, studio and location information, time zone, biography, services, prices, booking preferences, availability, and portfolio images. Information published on an artist’s public page is visible to visitors.

Client inquiries and bookings

When you contact or book an artist, we process the information you provide, such as your name, contact details, tattoo idea, placement, approximate size, preferred times, reference images, booking and deposit status, and responses to the artist’s intake questions. Depending on the questions the artist enables, this may include body-area photographs or sensitive details, such as medical or skin-related concerns. Please provide only information needed for your request.

Payment records

Pure’s current deposit workflow allows clients to report a payment and artists to verify it manually. We may store agreed prices, deposit amounts, payment status, and any uploaded payment evidence. Pure does not collect payment-card numbers through this workflow.

Messages and connected accounts

When an artist enables an integration, we process relevant account identifiers, content, and messages as described below.

Technical and usage information

We may collect IP addresses, browser and device characteristics, interactions with the service, timestamps, security and error logs, and cookies or other session identifiers.

3. How we use information

We use information to create and secure accounts; provide public artist profiles and portfolios; receive and manage tattoo inquiries; schedule appointments; maintain booking, intake, and deposit records; deliver communications; support third-party integrations selected by artists; troubleshoot problems; prevent misuse; and improve the service.

Client intake responses and private files are intended for the artist receiving the inquiry, not for public display. Clients may access their own booking information using a private booking link. Anyone who has that link may be able to use it until it expires or is revoked, so it should not be shared publicly.

We do not sell personal information. We do not use information obtained through Google APIs for advertising or to develop or train general-purpose AI models.

4. Google Sign-In

If you choose to sign in with Google or connect Google to your Pure account, we receive the Google account identifier and authorized profile information, which may include your email address, name, and profile picture. We use this information to authenticate you, associate your Google identity with your Pure account, and protect account access.

Using Google Sign-In does not give Pure access to your Gmail messages or Google Drive files. Alternative sign-in methods may be available.

5. Google Calendar

Connecting Google Calendar is optional and requires the artist’s authorization.

Permissions

Our Calendar integration requests openid, email, calendar.calendarlist.readonly, calendar.events.readonly, and calendar.app.created. These permissions allow Pure to identify the connected Google account, list its calendars, read calendar events, and create and manage a separate calendar created by Pure. We do not request permission to change events in the artist’s pre-existing calendars.

Information accessed and stored

Artists choose which of their Google calendars to use with Pure. For selected calendars, we may read and store calendar identifiers and names, time zones, and relevant event data such as dates, times, free/busy status, titles, locations, descriptions, recurrence information, and links to original events. We keep a private, limited synchronization cache to display events in the artist workspace and calculate booking availability. We do not import event attendee lists for this functionality.

Who can see calendar data

Imported event details from an artist’s existing calendars are available within Pure only in that artist’s authenticated workspace. Booking clients and public visitors see availability, not event names, locations, descriptions, or other private details from those calendars.

Pure Bookings calendar

Pure may create a separate Google calendar called Pure Bookings and add or update appointment events in it. These events may include appointment times, booking status, service or design information, and client names. This information is sent to Google as part of providing the integration and may be visible to anyone with whom the artist shares that Google calendar. Depending on the artist’s settings, permitted changes made to these managed booking events may also be reflected in Pure’s booking records.

Disconnecting and deleting data

An artist can deselect individual source calendars or disconnect Google Calendar in Pure settings. Deselecting a calendar removes its locally cached event details. Disconnecting stops normal synchronization, removes cached imported event details, and retires the integration’s credentials. If the artist requests deletion of the Pure-created Google calendar, limited encrypted credentials may be temporarily retained solely to complete that cleanup.

An artist may instead preserve that calendar. Disconnecting does not automatically erase booking records in Pure, and an artist can separately revoke Pure’s Google permissions through their Google Account.

Limits on Google data use

We use information obtained from Google Calendar only to provide and maintain the Calendar and booking features the artist enables, including synchronization, scheduling, conflict detection, security, and troubleshooting. We do not use Google Calendar content for advertising, sell it to data brokers, or use it to train AI models. We restrict human access to such data, except with the user’s affirmative permission, as needed for security, or as required by law.

Service providers may process data only as needed to operate these features and subject to applicable safeguards. Pure’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Instagram integration

Artists may optionally connect an eligible professional Instagram account. Depending on the permissions granted and features enabled, Pure may access their Instagram account identifier, username, profile photo, and available media to help set up their profile and portfolio.

Artists can choose to import Instagram images into their Pure portfolio. Imported images published on an artist’s public page remain there after Instagram is disconnected unless the artist removes them.

If an artist separately enables Instagram messaging, Pure processes relevant direct messages and conversation identifiers to display conversations in the artist’s inbox and send replies the artist initiates through Pure. We do not use Instagram messages for unrelated advertising.

7. Sharing information and service providers

We share information when necessary to provide the service, including with:

• The artist you contact, who receives the details you submit in an inquiry, booking, or message.
• Hosting and storage providers, including Vercel for application hosting, Neon for database and authentication services, and Cloudflare R2 for media storage.
• Analytics and diagnostic providers, including PostHog for understanding usage, diagnosing problems, and masked session recordings where enabled.
• Communications and connected-service providers, including services used for transactional emails, Google for enabled Google integrations, and Meta for enabled Instagram integrations.

We may also disclose information where required by law, to protect the security of the service, or as part of a legitimate business transaction subject to applicable protections. Transfers of Google API user data are further limited by Google’s User Data Policy, including its requirements for prior consent where applicable.

We do not sell Google user data or share Google Calendar event content with advertising networks or data brokers.

8. Cookies, analytics, and security

We use cookies and related technologies for account login, session management, and security. Where enabled, PostHog collects information about usage and interactions, and may record sessions for usability and troubleshooting. Session recording is configured to mask text and form inputs. Our analytics and operational logging are designed to avoid collecting sensitive intake answers, private messages, credentials, and Google Calendar event content.

We use measures such as HTTPS, access restrictions, separation of artists’ data, private media access controls, and encryption of connected-service credentials. However, no internet service can guarantee perfect security.

9. Data retention, disconnection, and deletion requests

We retain personal information while it is needed to deliver Pure’s services and for legitimate purposes such as maintaining booking history, resolving disputes, security, or complying with legal obligations. Some records may remain for a limited period in backups or security logs. Expiry of a private booking link does not necessarily delete the underlying booking.

Google Calendar’s cached event details are removed when the relevant calendar is deselected or the connection is disconnected, subject to completing any outstanding cleanup. Connected-service credentials are retired on disconnection, except for temporary cleanup credentials as described above. Published portfolio content may remain after disconnecting Instagram until removed separately.

To request access to, correction of, or deletion of your personal information, contact hello@pure.ink. We may need to verify your identity, coordinate with the artist involved, and retain limited information where required by law or necessary to resolve outstanding obligations. Clients can also contact the artist who received their information.

10. International processing and privacy rights

Pure and its service providers may process information in the United States and other countries. Depending on your location, privacy laws may give you rights to access, correct, delete, or restrict the processing of your personal information, or to object to certain uses. Contact us to exercise those rights.

11. Age requirements

Pure is intended for adults aged 18 and older. Booking forms require clients to confirm that they are at least 18. We do not knowingly offer the service to children under 18.

12. Updates and contact

We may update this policy as Pure changes. The latest version will be published here with an updated date. Where required, we will give additional notice and seek consent before materially changing how we use Google user data.

For privacy questions and requests, email hello@pure.ink.

Colabo Labs LLC
30 N Gould St, Ste N
Sheridan, WY 82801, USA