
Effective Date: September 23, 2026
InkedIn is operated by Ink Empire, a company registered in New Zealand. This policy explains what personal information we collect, how we use it, and your rights. By using InkedIn (the “Platform”), including our website at getinked.in and our mobile application, you agree to the practices described below. We are committed to protecting your privacy in accordance with the New Zealand Privacy Act 2020.
01
We collect information you provide directly, information generated through your use of the Platform, and limited information from third-party services.
| Data Type | Details |
|---|---|
| Account Information | Name, email address, password (encrypted), profile details, and account preferences. |
| Location Data | Approximate location based on IP address or, with your permission, precise location to help you find nearby tattoo artists and shops. |
| Portfolio & Images | Photos, tattoo designs, and portfolio images you upload to the Platform. |
| Messages | Content of messages exchanged between users through the Platform's messaging feature. |
| Usage Data | Search queries, pages visited, features used, device information, and interaction patterns. |
| Security Information | The network address and the browser or device identifier your device sends when you create an account. We use these to investigate fraudulent or abusive signups. The network address is deleted after 90 days. |
| Calendar Data | If you connect a Google Calendar, the start time, end time, all-day flag, status, and title of events on that calendar, plus the email address of the connected Google account. Connecting a calendar is optional. |
02
We use the information we collect to operate and improve the Platform, connect tattoo enthusiasts with artists, personalise your experience, and communicate with you about your account and our services.
Specifically, we use your information to facilitate artist discovery and search, enable messaging and collaboration between users, send transactional notifications such as booking confirmations and messages, analyse usage patterns to improve Platform features and performance, and ensure the security and integrity of the Platform.
We record the network address used to create an account so that we can identify accounts created in bulk or used to abuse the Platform.
We use automated analysis to suggest descriptive tags for uploaded images, so that work can be found in search. These suggestions are shown to you and do not make decisions about you.
We do not sell your personal information to third parties. We do not use your data for automated decision-making or profiling that produces legal effects.
03
We use a limited number of trusted third-party services to operate the Platform. These providers only process data as necessary to deliver their specific function.
Firebase
Push notifications. Processes device identifiers so we can deliver notifications to your device. Governed by Google's privacy policy.
Elastic Cloud
Powers search functionality. Processes artist profiles, portfolio metadata, and search queries to deliver relevant results.
Resend
Transactional email delivery. Processes email addresses to send account-related communications such as verification and notifications.
Amazon Web Services
Stores uploaded images and files. Data is held in the United States.
imgix
Image delivery. Uploaded images are served and resized through imgix’s content delivery network.
OpenAI
Suggests descriptive tags for uploaded tattoo images. We send a link to the image, which OpenAI retrieves and analyses. Under OpenAI’s API terms, content sent through the API is not used to train their models.
Calendar synchronisation when you connect a calendar, sign-in and profile information for that connection, and address lookup when a studio location is added.
Sentry
Error monitoring. Receives technical diagnostics when something fails so we can fix it. Configured not to send personal information.
04
Connecting a Google Calendar is optional. InkedIn works without it. You can disconnect at any time from your calendar page, and you can revoke access directly from your Google Account permissions page.
What we access. We read the times you are already busy, so the Platform does not offer a booking slot when you are unavailable. We create and update events on your calendar for appointments booked through InkedIn. We read your email address and basic profile so you can see which Google account is connected.
What we store. The times, all-day flag, and status of your events, so we can block the matching slots. The title of those events, shown only to you in your own InkedIn calendar and never to clients or other artists. Access and refresh tokens, encrypted at rest. The email address of the connected account. We do not store the descriptions, locations, or attendees of your calendar events.
What we do not do. We do not show your personal event details to clients or other artists. Clients see only that a time is unavailable. We do not sell or transfer your Google data, use it for advertising, or use it to train machine learning or artificial intelligence models. We do not allow humans to read it, except where you have given explicit permission for a support issue, where it is necessary for security purposes such as investigating abuse, or where we are required to by law.
Removing it. Disconnecting from your calendar page immediately deletes the stored events and tokens for that connection. Deleting your InkedIn account removes them along with it.
InkedIn's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
05
Your data is stored on secure servers hosted in the United States. We implement industry-standard security measures including encrypted connections (TLS/SSL), encrypted password storage, and access controls to protect your information.
While we take reasonable steps to protect your data, no method of electronic storage or transmission is 100% secure. We encourage you to use a strong, unique password for your InkedIn account.
06
We retain your personal information for as long as your account is active or as needed to provide you with our services. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it by law or for legitimate business purposes such as resolving disputes or enforcing our agreements.
Some information expires sooner than your account. The network address recorded when you created your account is deleted after 90 days.
Portfolio images and messages associated with deleted accounts will be removed or anonymised.
07
Under the New Zealand Privacy Act 2020, you have the following rights regarding your personal information:
Access
Request a copy of the personal information we hold about you.
Correction
Request that we correct any inaccurate or incomplete information.
Deletion
Request deletion of your account and associated personal data.
Complaint
Lodge a complaint with the NZ Privacy Commissioner if you believe your privacy has been breached.
To exercise any of these rights, contact us using the details below. We will respond to your request within 20 working days, as required by law.
08
Depending on where you live, you may have additional rights under your state's privacy law. Where those rights apply, you can ask us to tell you what personal information we hold about you and how we use it, ask us to correct it, ask us to delete it, and receive a copy of it. You will not be treated differently for exercising any of these rights.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
To make a request, contact us using the details below. We may need to verify your identity before we act on it, so that nobody else can make a request about you. You may also authorise someone to make a request on your behalf.
California residents. The California Consumer Privacy Act gives you the rights described above, along with the right to limit our use of sensitive personal information. If you believe we have not handled your request properly, you can contact the California Attorney General.
09
The Platform uses essential cookies to maintain your session and keep you logged in. We do not use cookies for advertising or cross-site tracking, and we do not use third-party analytics to profile you.
10
InkedIn is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.
11
As our servers and some third-party services are located outside New Zealand, your data may be transferred to and processed in other countries, primarily the United States. We ensure that any such transfers are conducted in compliance with the New Zealand Privacy Act 2020 and that your data receives an adequate level of protection.
12
We may update this privacy policy from time to time. If we make material changes, we will notify you through the Platform or by email. The “Effective Date” at the top of this page indicates when this policy was last updated. Your continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.
13
If you have any questions about this privacy policy or how we handle your data, please contact us:
getinked.in