Privacy policy

Stencil is booking software used by tattoo studios. This policy covers the information handled when you message a studio through its website chat or through Instagram, and when a studio records your booking.

The studio you are contacting is the data controller for its own client records. Stencil provides the software and processes that information on the studio's behalf.

• The messages you send, and the assistant's replies, kept as a transcript so the studio can see what was agreed.
• Contact details you choose to give: name, and an email address or phone number.
• What you want tattooed: the design, placement, rough size and style.
• Booking and payment records once a session is arranged, including what deposit is expected or received.
• On Instagram, an account identifier Meta provides so replies reach the right conversation.

Health information such as allergies or reactions to ink is collected only on a consent form, in person at the studio, and never through a chat. Do not send payment card details, bank details or identity document numbers in a message. The assistant is instructed to refuse them.

To answer your questions, check real availability, quote honestly, and put a booking request in front of the studio. A member of the studio confirms every booking; the assistant cannot book chair time by itself.

Aggregate counts, such as how many enquiries arrived from Instagram versus the website, are used to help the studio understand where its work comes from. That reporting does not identify you.

Replies in the website chat and in Instagram direct messages are generated by an automated assistant, which says so in its first message. To produce a reply, the text of the conversation is sent to OpenAI, which provides the language model, and is not used by them to train models. You can ask to speak to a person at any point and the conversation will be handed over.

• The studio you contacted, and its artists.
• Supabase, which hosts the database, inside the EU.
• Vercel, which runs the application.
• OpenAI, which generates the assistant's replies.
• Meta, if you chose to message through Instagram, under its own privacy policy.

Your information is not sold, and it is not used for advertising.

Conversations and client records are kept while the studio has a reason to keep them, normally so it can look after work it has already done for you. Consent forms are legal records and some jurisdictions require studios to retain them for a set number of years, so those may outlive a request to delete other information.

You can ask the studio for a copy of what it holds about you, ask for it to be corrected, or ask for it to be deleted. Contact the studio directly and it will action the request, subject to the retention rule above for consent forms.

For anything about this policy, contact the studio you were speaking to. For questions about the software itself, contact the operator of this deployment.