Privacy Policy
Effective date: September 16, 2026
Last updated: September 16, 2026
This Privacy Policy explains how Get Needle Inc. ("Needle," "we," "us," or "our") collects, uses, discloses, and protects personal information through the Needle mobile application, get-needle.com, and related services (collectively, the "Service").
Registered office and legal-notice address: Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States
Privacy contact: privacy@get-needle.com
1. Scope and roles
Needle provides booking and business-management software for tattoo artists and studios. This Policy applies to artists, studio personnel, clients with Needle accounts, website visitors, waitlist participants, and people whose information an artist or studio enters into Needle.
Artists and studios decide what client information they collect and why. For those records, the artist or studio is responsible for required notices, consent, record accuracy, lawful use, and responding to the client. Needle processes those records to provide the Service and may assist with verified privacy requests.
2. Information we collect
Account and professional information
Names, usernames, email addresses, phone numbers, profile images, authentication information, studio names and locations, professional profiles, hourly rates, availability, and portfolio images.
Booking and client information
Appointment dates and times, services, tattoo placement, prices, deposits and payment status, booking status, style preferences, reference images, artist notes, emergency contacts, and communications.
Sensitive health, consent, and treatment information
An artist or studio may record allergies, skin conditions, blood conditions, pregnancy or nursing status, confirmation that a client is at least 18 and not under the influence, signed consent or waiver records, photo-release choices, policy and aftercare acknowledgments, and the brand, color, and batch number of ink used during a session.
This information may be considered sensitive or health-related. It is used for safety, treatment records, recalls, and professional or legal obligations. We do not use it for advertising or sell it.
Identity-verification records
Needle may store the type of identification shown, the last four characters of the identification number, confirmation that the date of birth was checked, and the time of the check. Needle does not store full government-identification numbers. Artists and studios must not place full identification numbers in notes or other free-text fields.
Payments
Stripe processes deposits, payments, and payouts. Needle receives transaction amounts, status, and Stripe identifiers but does not receive or store complete payment-card numbers.
Connected services
If an artist connects a calendar, Needle reads authorized event information to identify scheduling conflicts and does not write events to the external calendar. If an artist connects Instagram, Facebook, or Threads, Needle publishes only content the artist directs us to publish and does not read social feeds, followers, or private messages.
Website forms
We collect information submitted through get-needle.com, including waitlist contact information, optional phone numbers and messages, and information submitted through any privacy-request form we make available. We also collect information sent to our privacy contact address.
Technical information
We may collect device and browser information, IP address, timestamps, authentication and security events, server and error logs, and audit records concerning significant actions. The website currently does not use a third-party analytics provider.
3. How we use information
We use personal information to:
- provide, maintain, secure, and improve the Service;
- manage accounts, bookings, client records, calendars, messages, payments, and payouts;
- send operational messages and respond to support, privacy, and deletion requests;
- help artists and studios meet safety, consent, recordkeeping, and recall obligations;
- prevent fraud, abuse, unauthorized access, and other harmful activity;
- comply with law, enforce our terms, and protect rights and safety; and
- operate optional AI features as described below.
Where a law requires a legal basis, we rely on performance of a contract, consent, compliance with legal obligations, and legitimate interests in providing and protecting the Service. Artists and studios are responsible for any additional lawful basis required for sensitive client information they collect.
4. How we disclose information
We do not sell personal information and do not share it for cross-context behavioral advertising. We disclose information only as needed to operate the Service, at a user's direction, or as otherwise described here.
| Provider | Purpose |
|---|---|
| Supabase | Authentication, database, file storage, and server functions |
| Stripe | Payment processing and payouts |
| Anthropic | Artist- and studio-facing AI features |
| Resend | Transactional email |
| Calendar connections authorized by an artist | |
| Meta | Publishing to connected Instagram, Facebook, or Threads accounts at an artist's direction |
| Apple and Google | Mobile application distribution and related platform services |
We may disclose information to professional advisers and authorities when reasonably necessary to comply with law, respond to valid legal process, protect rights or safety, investigate misuse, or complete a merger, financing, acquisition, reorganization, or sale of assets. A successor remains subject to this Policy for information collected under it unless legally required notice of a change is provided.
5. Artificial intelligence
Needle includes an AI assistant for artists and studio owners. It is not a client-facing chatbot. When an authorized user invokes it, Needle may send relevant business context to Anthropic, including client names, appointments, prices, business metrics, and message-thread content when that context is enabled and requested. Needle does not send identification numbers to the AI assistant.
Any AI-assisted action that writes data or sends a message requires the authorized user to review and approve it first. Needle may retain AI conversation content, tool-call arguments and results, and audit records. Tool results can include client information retrieved to answer an authorized user's request.
6. Retention
Client intake, consent, and treatment records are retained for up to seven years by default (2,555 days), unless a different period is required by law or configured by the responsible studio. We retain other information for as long as reasonably necessary to provide the Service, keep transaction and tax records, resolve disputes, prevent abuse, and meet legal obligations. Periods vary by record type and jurisdiction.
When information is no longer needed, we delete or de-identify it where reasonably practicable. Backup copies may remain for a limited period before routine deletion.
7. Your choices and privacy rights
Depending on where you live, you may have rights to request access, correction, deletion, or a portable copy; restrict or object to certain processing; or appeal a decision. We may verify identity and may deny or limit a request where permitted by law, including when records must be retained for safety, transactions, fraud prevention, or legal obligations.
- Account holders: Use the deletion control in the Needle application or submit a request at https://get-needle.com/data-deletion.
- People without accounts: Submit a request at https://get-needle.com/data-deletion or contact the artist or studio that collected the information.
- Other requests: Email privacy@get-needle.com.
A privacy request does not automatically delete application records. We or the responsible artist or studio may contact the requester to verify identity and determine which records can be deleted. We will not discriminate against a person for exercising applicable privacy rights.
8. Consumer Health Data Privacy Notice
This section supplements the rest of this Policy for information treated as consumer health data under applicable state law.
Categories and sources. Consumer health data may include health-screening answers, pregnancy or nursing status, consent and waiver records, tattoo placement and treatment information, ink brand/color/batch records, and inferences necessarily derived from those records. We receive it directly from clients and from the artists or studios that enter records into Needle.
Purposes. We collect and use it only to provide client-intake, consent, booking, treatment-record, safety, recall, recordkeeping, support, security, and legally required functions; to process an authorized privacy request; or for another purpose disclosed with any consent required by law.
Disclosure. We may disclose it to the artist or studio responsible for the record, authorized studio personnel, Supabase as our infrastructure processor, and professional advisers or authorities when legally necessary. Anthropic may receive limited client context only when an authorized artist or studio user invokes the AI assistant; identification numbers are not sent, and message or record changes require user approval. We do not sell consumer health data.
Rights. Subject to applicable law, a consumer may request confirmation of collection or sharing, access, a list of third parties or affiliates receiving the data, withdrawal of consent, or deletion. Submit a request at https://get-needle.com/data-deletion or privacy@get-needle.com. If we deny a request, the response will explain how to appeal by replying to the decision email with “Appeal” in the subject line. We will respond within the period required by applicable law.
9. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including authenticated access, encrypted network connections, restricted database access, and audit records. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
10. International processing
Needle and its providers may process information in the United States and other countries with different data-protection laws. Where required, we use contractual or other recognized safeguards for cross-border transfers.
11. Children
The Service is intended only for people age 18 or older. Needle does not knowingly collect personal information from children. Contact privacy@get-needle.com if you believe a child provided information to Needle.
12. Third-party services
Connected services and third-party websites are governed by their own terms and privacy policies. Needle is not responsible for their independent privacy practices.
13. Changes
We may update this Policy as the Service or law changes. We will post the revised version at https://get-needle.com/privacy and update the date above. If a change materially affects how we use information, we will provide additional notice when required by law.
14. Contact
Email privacy@get-needle.com with privacy questions or requests.
Get Needle Inc.
Registered office and legal-notice address:
Legalinc Corporate Services Inc.
131 Continental Dr, Suite 305
Newark, DE 19713
United States