Privacy Policy

Introduction

Welcome to Tatloom, an AI-powered tattoo design platform that helps users create tattoo concepts, transform tattoo artwork into stencil-style designs, and manage their creations.

At Tatloom, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.

By using Tatloom, you acknowledge the data practices described in this Privacy Policy.

Information Collection and Use

We collect the following types of information to provide, operate, secure, and improve Tatloom:

1. Account Information

   • What we collect: Your name, email address, avatar, and other information you provide when creating or managing an account.
   • Purpose: To create and manage your account, authenticate access, maintain your credit balance, provide customer support, and personalize your experience.

2. Prompts, Reference Images, and Uploaded Content

   • What we collect: Text prompts, optional reference images, tattoo images, and other content you submit when using Tatloom's AI tools.
   • Purpose: To process your request, generate the requested tattoo artwork or stencil result, troubleshoot generation issues, and provide the features you choose to use.
   • Uploaded content may be transmitted to third-party AI or infrastructure providers as necessary to complete your requested generation.

3. Generated Content

   • What we collect: Tattoo concepts, stencil images, and other AI-generated results created through Tatloom.
   • Purpose: To display your results, make them available for download, support remix features, and keep eligible creations available in your account and Workspace.

4. Workspace and Generation History

   • What we collect: Information associated with your creations, such as generation type, status, selected options, creation time, generated image location, and related task information.
   • Purpose: To maintain your generation history, display previous creations in your Workspace, support download functionality, and help us operate and troubleshoot the service.

5. Usage Details

   • What we collect: Information about how you use Tatloom, including tools used, feature interactions, generation activity, selected settings, and usage frequency.
   • Purpose: To operate and improve our services, understand how features are used, identify technical issues, prevent abuse, and improve the user experience.

6. Device and Log Information

   • What we collect: Information such as browser type, device type, operating system, IP address, request logs, approximate location derived from IP address where applicable, and basic technical information.
   • Purpose: To maintain security, detect abuse, ensure compatibility, troubleshoot technical issues, and improve website performance.

7. Cookies and Similar Technologies

   • What we collect: Cookies and similar technologies used to maintain sessions, remember preferences, support authentication, analyze website usage, and provide essential functionality.
   • Purpose: To keep Tatloom functioning properly and provide a smoother and more reliable experience.

8. Payment, Billing, and Credit Information

   • What we collect: Information necessary to process purchases, including transaction records, purchased plans, payment status, and related billing information.
   • Purpose: To process purchases, allocate credits, maintain transaction records, prevent fraud, and provide billing support.
   • Important note: Payments are processed by trusted third-party payment providers. Tatloom does not directly store your full payment card information.

9. Communication Data

   • What we collect: Messages, support requests, feedback, reports, or other communications you send to us.
   • Purpose: To respond to your questions, provide assistance, investigate issues, and improve our services.

AI Processing and Third-Party Providers

Tatloom relies on third-party technology providers to operate certain parts of the service, including AI generation, cloud infrastructure, storage, authentication, payment processing, analytics, and other technical functions.

When you use an AI-powered feature, information required to complete your request may be transmitted to an AI service provider. This may include:

• Your text prompt.
• An uploaded reference image or tattoo image.
• Generation settings and parameters.
• Other technical information necessary to process the request.

These providers process information on our behalf or as necessary to deliver their services and may have their own privacy, security, and data retention practices.

Tatloom does not intentionally use your uploaded reference images or generated content to train our own AI models unless we separately disclose that practice and, where required, obtain your consent.

Third-party AI providers may retain or process submitted data for limited operational, security, abuse-prevention, or legal purposes according to their own applicable terms and privacy policies.

How We Use Your Information

We use the information described above to:

• Provide and operate Tatloom's services.
• Process AI generation requests and deliver requested results.
• Maintain your account, Workspace, generation history, and credit balance.
• Process purchases and transaction-related activities.
• Authenticate users and protect accounts.
• Detect, prevent, and investigate fraud, abuse, unauthorized access, and security incidents.
• Diagnose technical problems and improve service reliability.
• Understand how Tatloom is used and improve features and usability.
• Respond to support requests, questions, and feedback.
• Comply with applicable legal obligations and enforce our agreements.

Legal Bases for Processing

Where applicable data protection law requires a legal basis for processing personal information, we may rely on one or more of the following:

• Performance of a contract: Processing information necessary to provide the services you request.
• Legitimate interests: Operating, securing, improving, and protecting Tatloom, provided those interests are not overridden by your rights.
• Legal obligations: Processing information where required to comply with applicable law, taxation, accounting, fraud prevention, or lawful requests.
• Consent: Processing information where you have provided consent and applicable law requires it.

Where processing is based on consent, you may withdraw your consent where applicable.

Data Storage and Security

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction.

These measures may include secure transmission, access controls, authentication mechanisms, restricted administrative access, and cloud storage protections.

Generated content may be stored using third-party cloud infrastructure so that it remains available through your Workspace or other account features.

However, no method of transmission over the internet or electronic storage is completely secure. We therefore cannot guarantee absolute security.

Information Sharing and Disclosure

We do not sell your personal information.

We may share information in the following circumstances:

• Service providers: With trusted providers that help us operate AI generation, cloud infrastructure, data storage, authentication, payment processing, analytics, communications, security, and other essential functions.
• Legal requirements: When reasonably necessary to comply with applicable laws, regulations, court orders, subpoenas, or other lawful requests.
• Protection and security: When necessary to protect Tatloom, our users, our rights, property, systems, or the safety of others, including investigating fraud, abuse, or security incidents.
• Business transactions: If Tatloom is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.
• With your direction or consent: When you ask us to share information or otherwise consent to the disclosure.

We require service providers to handle information appropriately and only for legitimate service-related purposes where applicable.

Data Retention and Deletion

We retain personal information only for as long as reasonably necessary to provide our services, maintain legitimate business records, comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

Different types of information may be retained for different periods.

Uploaded Images

Reference images and other files uploaded for AI processing may be stored temporarily as necessary to complete generation, handle processing failures, maintain service reliability, or support related technical operations.

Temporary files may be removed after they are no longer reasonably required for these purposes.

Third-party AI providers may maintain their own limited retention periods according to their terms and privacy practices.

Generated Content

Generated tattoo concepts and stencil images may be stored so that they remain available in your History or Workspace.

When you delete an eligible creation through Tatloom, we initiate deletion of the associated generated content from active storage where applicable.

Some information may remain temporarily in backups, logs, caches, security records, or other systems where immediate deletion is technically impractical or where retention is required for legitimate operational or legal purposes.

Account and Transaction Records

Account information is generally retained while your account remains active.

Certain transaction, payment, credit, security, tax, fraud-prevention, and compliance records may be retained after account deletion where reasonably necessary or required by law.

Your Rights and Choices

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:

• Access personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information.
• Request a copy of certain personal information in a portable format.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.
• Opt out of certain marketing communications.
• Lodge a complaint with an applicable data protection authority.

You may delete individual eligible creations directly from your Workspace or History where that functionality is available.

You may also request deletion of your account and associated personal information, subject to legitimate operational, security, financial, and legal retention requirements.

We may need to verify your identity before completing certain privacy-related requests.

International Data Transfers

Tatloom is available to users in multiple countries and relies on service providers that may operate infrastructure in different regions.

As a result, your information may be processed, transferred, or stored outside the country or region where you live.

Where required by applicable law, we take reasonable steps designed to ensure that international transfers of personal information are handled using appropriate safeguards.

Cookies and Tracking Technologies

Tatloom may use essential and optional cookies or similar technologies for purposes such as:

• Keeping you signed in.
• Maintaining secure sessions.
• Remembering preferences.
• Preventing fraud and abuse.
• Understanding website performance and usage.
• Improving our services.

You may be able to control certain cookies through your browser settings or other controls made available through Tatloom.

Disabling certain cookies may affect the functionality of the service.

Third-Party Websites and Services

Tatloom may contain links to third-party websites or interact with third-party services.

We are not responsible for the privacy practices, content, or security of third-party websites or services that are not controlled by Tatloom.

We encourage you to review the privacy policies of third parties before providing information to them.

Children's Privacy

Tatloom is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

If we become aware that personal information has been collected from a child under 13 without appropriate authorization, we will take reasonable steps to delete it.

Where local law requires a higher minimum age or parental consent for use of online services, users are responsible for complying with those requirements.

Policy Changes

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements, or business practices.

When we make changes, we will publish the updated Privacy Policy on this page and update the date at the top of the policy.

Where required by applicable law, we may provide additional notice of material changes.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or Tatloom's data practices, please contact us:

Website: tatloom.com
Email: support@tatloom.com

You may also use our Contact page to submit privacy-related questions or requests.