Legal
Privacy Policy
What we collect, why we have it, and what we will never do with it.
Last updated 22 September 2026
WaivePro Ink is software that tattoo studios use to take consent forms, run their appointments, and send clients their aftercare afterwards. This policy covers two different groups of people, and it is worth being clear which one you are.
- Studios — the shops that hold an account with us. They decide what to collect from their clients and what to send them.
- Clients — the people getting tattooed, who fill in a studio's consent form. If that is you, the studio is who holds your information. We store and protect it on their behalf.
What a client gives their studio
A studio chooses which of these its form asks for, so not every studio collects all of it. A consent form can include:
- Legal name, date of birth, mobile number, email address and street address
- Photographs of a government-issued ID, front and back
- Answers to health questions, and any notes the client adds
- Emergency contact details
- For a client under 18, a guardian's name, relationship and contact details
- Typed initials, a drawn signature, and the exact release wording that was on screen when they signed
- Photographs of the finished tattoo, taken by the studio
- The IP address and browser the form was submitted from, recorded with the signature
ID photographs, signatures, health answers, notes and guardian details are encrypted with AES-256-GCM before they are stored. Within a studio, ID images and the waiver PDF can only be opened by owners and managers, and every time someone opens a waiver or an ID it is recorded with their name and the time.
Text messages and email
This is the part most people want spelled out, so it is spelled out. A studio can send a client two different kinds of message, and they rest on two different permissions.
Messages about a booking
Booking confirmations, appointment reminders, a link to the consent form, and a deposit request are sent because the client gave the studio their number in order to arrange a tattoo. They relate to that specific appointment and nothing else.
Aftercare and review messages
After a session, a client can be sent their photo, their aftercare instructions and a request for a review. These are only sent when the client has ticked a box on the consent form, unchecked by default, that reads:
“Text and email me my photo, aftercare, and healing check-ins. Msg & data rates may apply. Reply STOP to opt out.”
Marketing messages, if a studio sends them at all, need a third permission of their own. Each of these is stored separately against the client with the date it was given.
Frequency, cost and stopping
- Message frequency varies with your appointments. A typical session produces a confirmation, one reminder, one aftercare message and at most one review reminder about three weeks later.
- Message and data rates may apply. We do not charge clients anything.
- Reply STOP to any message to opt out. It takes effect immediately. Reply START to resume, or HELP for the studio's contact details.
- An opt-out is recorded against the phone number itself, not just one client record — so it holds across every studio on WaivePro Ink, and it holds even for someone who has never signed a form with us.
- Email has its own unsubscribe link at the bottom of the aftercare page and every email.
Every outbound message passes a permission check on our servers before it is sent. A message that fails the check is written to the studio's log with the reason instead of being delivered.
We do not sell your information, and we never will. Mobile opt-in data and consent are not shared with, sold to, or rented to any third party for marketing purposes, and they are not passed between studios. No third party receives your phone number from us for their own use.
Who else touches this data
We use a small number of suppliers to run the service. They process data on our instructions and for no other purpose.
| Supplier | What they handle |
|---|---|
| Vercel | Hosting, and encrypted storage of files |
| Neon | The database |
| Twilio | Sending and receiving text messages |
| Resend | Sending email |
Tip links and deposit links belong to the studio and its artists. When a client taps one they go to that provider's own site — Venmo, Cash App, PayPal, Square, Stripe or similar — and whatever happens there is covered by that provider's terms. WaivePro Ink does not process payments, hold funds, or take a percentage of anything.
Review buttons link out to Google, Facebook or Yelp. We record that a client tapped the button. We cannot see whether they left a review or what it said.
How long it is kept
A studio sets its own retention period to match its state's health department rules, and that period is printed on its records. Signed waivers are kept as the studio's legal record of consent. A studio can export its data at any time, and can ask us to delete its account and its clients' records.
If you are a client and want your information corrected or removed, contact the studio that tattooed you — they hold it and they decide. If you cannot reach them, write to us and we will help.
Your choices
- Stop texts at any time by replying STOP. Stop emails with the unsubscribe link.
- Ask a studio for a copy of what it holds about you, or for it to be corrected or deleted.
- Decline the aftercare box on the form and still get your tattoo — it is optional, and nothing about the appointment depends on it.
Children
The service is not for children. A studio can choose to allow clients under 18, and where it does, the form will not submit without a guardian named, contactable and recorded as present. Guardian details are encrypted along with everything else.
Changes and contact
If we change this policy we will change the date at the top. If a change materially affects how messages are sent, studios will be told before it takes effect.
Questions, or a request about your data: support@waiveproink.com.