Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how InkReset ("we," "us," "our," or the "Company") collects, uses, discloses, and safeguards your information when you visit our website, use our mobile application, or otherwise interact with our services (collectively, the "Services").

By accessing or using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree with the terms of this Policy, please do not access or use the Services.

This Policy applies to information we collect through the Services and in email, text, and other electronic messages between you and the Services. It does not apply to information collected by third parties, including any websites, applications, or services that may link to or be accessible from the Services.

2. Information We Collect

We collect several types of information from and about users of our Services. The information we collect helps us provide, maintain, improve, and personalize our Services.

2.1 Personal Information You Provide Directly

When you use our Services, you may provide us with personal information, including:

• Contact Information: Name, email address, phone number, and mailing address when you submit lead forms, request consultations, create an account, or communicate with us.
• Tattoo Information: Photos of your tattoo(s), details about the tattoo such as age, size, colors, location on body, ink type (professional or amateur), and other characteristics relevant to removal estimates.
• Personal Characteristics: Skin type, skin tone (Fitzpatrick scale), health information relevant to tattoo removal (allergies, previous laser treatments, medical conditions), and other information you choose to provide in questionnaires or forms.
• Account Information: Username, password, and profile information if you create an account on our platform.
• Clinic Information: For clinics applying to join our network: business name, contact person, address, phone, email, website, services offered, credentials, licenses, certifications, equipment details, pricing information, scheduling availability, and testimonials.
• Communications: Any information you provide when you contact us for support, provide feedback, participate in surveys, or communicate with us through email, chat, or other channels.

2.2 Information Collected Automatically

When you access or use our Services, we and our service providers may automatically collect certain information about your device and usage, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (such as IP address, device ID), and mobile network information.
• Usage Data: Pages or screens viewed, time spent on pages, links clicked, search queries, dates and times of access, referring and exit pages, and other actions taken on the Services.
• Location Data: General geographic location (city, state, ZIP code) based on your IP address or, with your permission, more precise location data from your mobile device.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar tracking technologies. See Section 9 for more details.

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Partner Clinics: Clinics may provide us with feedback about leads, appointment outcomes, or service quality.
• Analytics Providers: Third-party analytics services that help us understand how users interact with the Services.
• Advertising Partners: Information from advertising networks to help us deliver relevant advertisements.
• Social Media Platforms: If you connect your account with social media platforms, we may receive information from those platforms in accordance with their policies.
• Public Sources: Publicly available information, such as reviews, testimonials, or business information about clinics.

2.4 Sensitive Information

We may collect sensitive personal information, including health-related information and photos of your body (tattoo images). We take special precautions to protect this information as described in Section 8.

By providing such information, you explicitly consent to our collection, use, and disclosure of this information as described in this Policy.

3. How We Use Your Information

We use the information we collect for various purposes, including:

3.1 Providing and Improving Services

• Generate personalized tattoo removal cost estimates, session counts, and timeline projections based on the information and photos you provide
• Match you with relevant tattoo removal clinics in your geographic area
• Facilitate communication between you and partner clinics
• Process and respond to your inquiries, requests, and support needs
• Maintain, operate, and improve the functionality and performance of the Services
• Develop new features, products, and services
• Conduct research, analysis, and testing to improve user experience

3.2 Communication

• Send you service-related communications, such as confirmation emails, appointment reminders, and notifications about changes to the Services or this Policy
• Respond to your comments, questions, and requests for customer support
• Send you educational content, tips, and information about tattoo removal
• With your consent, send you promotional materials, newsletters, special offers, and marketing communications about our Services or partner offerings

3.3 Clinic Network Management

• Evaluate and process applications from clinics wishing to join our network
• Verify credentials, licenses, and qualifications of partner clinics
• Monitor clinic performance, responsiveness, and compliance with our standards
• Facilitate quality assurance and dispute resolution

3.4 Legal and Security

• Comply with legal obligations, court orders, and regulatory requirements
• Enforce our Terms of Service and other agreements
• Protect against fraud, abuse, security risks, and illegal activities
• Investigate and respond to claims, complaints, and disputes
• Protect the rights, property, and safety of InkReset, our users, and the public

3.5 Analytics and Advertising

• Analyze usage trends, demographics, and user behavior to understand how the Services are used
• Measure the effectiveness of our marketing campaigns and advertisements
• Deliver targeted advertisements and personalized content based on your interests and location
• Conduct A/B testing and other experiments to optimize the Services

3.6 Aggregated and De-Identified Data

We may aggregate and de-identify your information so that it can no longer be used to identify you individually. We may use such aggregated or de-identified data for any purpose, including research, analytics, and sharing with third parties.

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 With Partner Clinics

Lead Sharing: When you submit a lead form or request a consultation with a specific clinic through our platform, we share your contact information (name, email, phone number), tattoo photos, questionnaire responses, and any other information you provided with that clinic. This enables the clinic to evaluate your case and contact you to schedule a consultation.

Important: Once we share your information with a clinic, that clinic's use, storage, and protection of your information is governed by their own privacy policies and practices. We have no control over, and are not responsible for, how clinics handle your information. We encourage you to review each clinic's privacy policy before sharing your information.

4.2 With Service Providers

We engage third-party companies and individuals to perform services on our behalf, including:

• Hosting and cloud storage providers
• Payment processors (if applicable)
• Email delivery and communication services
• Customer support and helpdesk software
• Analytics and data analysis providers
• Advertising networks and marketing platforms
• Security and fraud prevention services

These service providers have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose. We require them to implement appropriate security measures to protect your information.

4.3 For Legal Reasons

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

• To comply with a subpoena, court order, or other legal process
• To respond to lawful requests from law enforcement, regulatory agencies, or government authorities
• To enforce our Terms of Service and other agreements
• To protect our rights, property, or safety, or that of our users or the public
• To investigate, prevent, or take action regarding suspected fraud, illegal activities, security threats, or violations of our policies

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, sale of assets, or other business transaction involving InkReset, your information may be transferred to the acquiring or successor entity. We will notify you via email or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing. For example, if you agree to participate in a promotional campaign with one of our partners.

4.6 We Do Not Sell Personal Information

Important: We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We only share your information as described in this Policy.

5. Cookies and Tracking Technologies

We and our third-party partners use cookies, web beacons, pixels, local storage, and similar tracking technologies to collect information about your interactions with the Services.

5.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently, provide a better user experience, and provide information to website owners.

5.2 Types of Cookies We Use

• Essential Cookies: Necessary for the Services to function properly. These cookies enable core functionality such as security, authentication, and session management. The Services cannot function properly without these cookies.
• Performance and Analytics Cookies: Collect information about how visitors use the Services, such as which pages are visited most often and whether users receive error messages. These cookies help us improve the performance and design of the Services. We use services like Google Analytics for this purpose.
• Functionality Cookies: Remember your preferences and choices (such as language, region, or display settings) to provide a more personalized experience.
• Advertising and Targeting Cookies: Used to deliver advertisements that are relevant to you and your interests. They also help limit the number of times you see an advertisement and measure the effectiveness of advertising campaigns. We may use services like Google Ads, Facebook Pixel, and other advertising networks.

5.3 Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages. We do not control the use of these cookies and cannot access them. Third-party cookies are governed by the privacy policies of the respective third parties.

5.4 Managing Cookies

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. You can also delete cookies that have already been set. However, if you disable or decline cookies, some features of the Services may not function properly, and your user experience may be affected.

To learn more about managing cookies, visit: www.allaboutcookies.org

You can also opt out of interest-based advertising by visiting:

• Digital Advertising Alliance (DAA)
• Network Advertising Initiative (NAI)

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.

The criteria we use to determine retention periods include:

• Service Provision: We retain your information for as long as you have an account with us or continue to use the Services.
• Lead Information: Lead submissions (contact details, tattoo photos, questionnaire responses) are retained for up to 2 years from the date of submission to facilitate follow-up and service improvement, unless you request earlier deletion.
• Legal Obligations: We may retain certain information to comply with legal, tax, audit, or regulatory requirements (e.g., records of financial transactions may be kept for up to 7 years).
• Dispute Resolution: We may retain information necessary to resolve disputes, enforce our agreements, and protect our legal rights.
• Aggregated Data: We may retain aggregated or de-identified data indefinitely for analytical purposes.

When information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies and applicable laws.

7. Your Privacy Rights

Depending on your location and applicable laws, you may have certain rights regarding your personal information:

7.1 Access and Portability

You have the right to request access to the personal information we hold about you and, in some cases, receive a copy of that information in a structured, commonly used, and machine-readable format.

7.2 Correction and Updates

You have the right to request that we correct or update inaccurate, incomplete, or outdated personal information. You can update certain information directly through your account settings, if applicable.

7.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions. For example, we may retain information if required by law, to complete a transaction, or to resolve disputes.

7.4 Opt-Out of Marketing Communications

You can opt out of receiving promotional emails and newsletters from us at any time by:

• Clicking the "unsubscribe" link at the bottom of any promotional email
• Adjusting your communication preferences in your account settings
• Contacting us at privacy@inkaway.com

Please note that even if you opt out of marketing communications, we may still send you important service-related messages (such as account notifications or legal updates).

7.5 Restriction and Objection

In certain circumstances, you may have the right to restrict or object to the processing of your personal information. For example, if you believe the information is inaccurate or the processing is unlawful.

7.6 Withdraw Consent

If we are processing your personal information based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

7.7 Automated Decision-Making

Our estimate generation involves some automated processing (e.g., analyzing uploaded photos and questionnaire responses to generate cost and session estimates). If you have concerns about automated decision-making, please contact us.

7.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

• Email: privacy@inkaway.com
• Subject Line: "Privacy Rights Request"

When submitting a request, please provide sufficient information to allow us to verify your identity and locate your information in our systems. We will respond to your request within the timeframe required by applicable law (typically 30-45 days).

7.9 State-Specific Rights

If you are a resident of California, Virginia, Colorado, or other U.S. states with specific privacy laws, you may have additional rights. Please see Section 13 for more details.

8. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical security measures designed to protect your information from unauthorized access, use, disclosure, alteration, or destruction.

8.1 Security Measures

Our security measures include, but are not limited to:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your device and our servers. Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Access to personal information is restricted to authorized personnel who need the information to perform their job functions. All employees and contractors with access to personal information are bound by confidentiality obligations.
• Secure Hosting: Our servers and databases are hosted in secure facilities with physical access controls, fire suppression systems, and 24/7 monitoring.
• Regular Audits: We conduct regular security assessments, vulnerability scans, and penetration tests to identify and address potential security risks.
• Secure Development: We follow secure coding practices and conduct security reviews of our codebase to prevent common vulnerabilities.
• Incident Response: We maintain an incident response plan to quickly detect, respond to, and mitigate security breaches or data incidents.

8.2 No Absolute Security

While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your information.

You are responsible for maintaining the security of your account credentials (username and password). Do not share your credentials with others, and notify us immediately if you suspect unauthorized access to your account.

8.3 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and any applicable regulatory authorities as required by law. Notifications will be provided without undue delay and will include information about the breach, the types of information affected, and steps you can take to protect yourself.

9. Children's Privacy

The Services are not intended for, and we do not knowingly collect personal information from, children under the age of 13 (or the applicable age of consent in your jurisdiction).

If you are under 13 years old, do not use the Services or provide any information through the Services. If you are a parent or guardian and believe that your child under 13 has provided personal information to us, please contact us immediately at privacy@inkaway.com. We will take steps to delete such information from our systems as soon as possible.

In some jurisdictions, the age of consent for processing personal information may be higher than 13 (e.g., 16 in certain European countries). If you are under the applicable age in your jurisdiction, you must obtain parental or guardian consent before using the Services.

10. International Data Transfers

InkReset is based in the United States, and your information will be collected, processed, and stored in the United States. If you are accessing the Services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate.

The data protection laws in the United States and other countries may differ from those in your country of residence. By using the Services, you consent to the transfer of your information to the United States and other countries as necessary to provide the Services.

We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it, including through the use of standard contractual clauses, data processing agreements, and other appropriate safeguards.

11. Third-Party Links and Services

The Services may contain links to third-party websites, applications, or services that are not owned or controlled by InkReset (including links to partner clinics' websites, social media platforms, and advertising partners).

This Privacy Policy applies only to information collected by InkReset through the Services. We are not responsible for the privacy practices or content of third-party websites or services. We encourage you to read the privacy policies of every website you visit and every service you use.

When you click on a third-party link or interact with a third-party service, that third party may collect information about you independently, subject to their own privacy policies.

12. Changes to This Privacy Policy

We reserve the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.

When we make material changes to this Policy, we will:

• Update the "Last updated" date at the top of this page
• Notify you by email (if you have provided us with your email address)
• Display a prominent notice on the Services

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Services after the posting of changes constitutes your acceptance of such changes.

If we make changes that materially reduce your rights under this Policy, we will provide you with advance notice and, where required by law, obtain your explicit consent before the changes take effect.

13. State-Specific Privacy Rights

Residents of certain U.S. states have additional privacy rights under state law. This section provides information for residents of California, Virginia, Colorado, Connecticut, and Utah.

13.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: While we do not "sell" personal information in the traditional sense, we may share information with advertising partners for targeted advertising. You have the right to opt out of such sharing.
• Right to Limit Use of Sensitive Personal Information: If we use sensitive personal information (such as health data) for purposes beyond those permitted by law, you have the right to limit such use.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Categories of Personal Information Collected: In the past 12 months, we have collected the following categories of personal information: identifiers (name, email, phone), personal characteristics (skin type), photos/images (tattoo photos), internet activity (usage data), geolocation data, and inferences drawn from other personal information.

Do Not Sell My Personal Information: To opt out of the sharing of your personal information for targeted advertising, contact us at privacy@inkaway.com with the subject line "Do Not Sell My Personal Information."

13.2 Virginia, Colorado, Connecticut, and Utah Residents

If you are a resident of Virginia, Colorado, Connecticut, or Utah, you have rights similar to those described for California residents, including rights to access, correct, delete, and opt out of targeted advertising and sale of personal information.

To exercise these rights, please contact us as described in Section 14.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact us at:

When contacting us regarding your privacy rights, please include the following information to help us process your request:

• Your full name
• Email address associated with your account (if applicable)
• A description of your request or concern
• Any additional information needed to verify your identity

We will respond to your inquiry or request within the timeframe required by applicable law, typically within 30-45 days.

15. Acknowledgment

By using the InkReset Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Policy, please do not use the Services.