Privacy Policy

Effective 2 September 2026 · Scaled Intelligence Inc., 3 Bates Court, Barrie, Ontario, L4N 8L9, Canada

1. Two different roles we play

This policy covers two kinds of information, and our responsibility differs for each. (a) Studio account information: the details of studios and their staff who use Stipple. We decide how that is handled, so we are responsible for it directly. (b) Studio customers' information: the client records a studio keeps in Stipple. There, the studio decides what is collected and why; we hold and process it on the studio's instructions. If you are a tattoo client and want your record changed or removed, contact the studio first; we will support them in acting on your request.

2. What we collect

From studios and their staff: name, business details, email, phone, login credentials, and billing information. From studio customers, as entered by the studio or submitted through a studio's booking page: name, contact details, appointment and payment history, consent and waiver records, and any notes the studio records, which may include health-related details such as allergies or medical conditions relevant to tattooing, and reference or healing photographs. We also collect basic technical logs (IP address, browser, timestamps) needed to run and secure the service.

3. Why we use it

To provide the platform: bookings, reminders, records, consent capture, payments and reporting. To secure the service and investigate misuse. To provide support. To bill studios. We do not sell personal information, and we do not use studio customers' information to market to them on our own behalf.

4. Sensitive information and consent

Health-related notes and signed waivers are sensitive. Studios must obtain express consent before recording them and must only record what is necessary for safe tattooing. Tattoo services are restricted to adults or otherwise in line with provincial rules; studios are responsible for verifying age.

5. Messages

Studios send appointment emails and text messages to their customers through the platform. These are sent on the studio's behalf, and require consent in line with Canadian anti-spam law. Every marketing message must offer an unsubscribe, and reminders stop on request.

6. Who else touches the data

We use service providers to run Stipple: hosting and database (Supabase, Netlify), email delivery (Resend), text messaging (Twilio), payment processing (Helcim and/or Stripe, depending on the studio's choice), and error monitoring. Each receives only what it needs, and is bound to protect it. Payment card details are handled by the payment processors: we never store full card numbers.

7. Where it is stored

Our infrastructure providers may store or process information in Canada or the United States. Information stored outside Canada may be accessible to authorities in that country under its laws. We choose providers that commit to appropriate protection.

8. How long we keep it

Account information is kept while the account is open. After closure, data may be exported for 30 days and is then deleted in the ordinary course, except where we must keep records longer, for example financial records for tax purposes, or consent and waiver records a studio is required by provincial rules to retain.

9. Security

Access is restricted and separated so one studio cannot see another's data. Payment credentials are encrypted at rest. Access to production systems is limited to those who need it. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify those affected and the relevant regulator as the law requires.

10. Your rights

You may ask for access to the personal information we hold about you, ask for corrections, withdraw consent, or ask us to delete it, subject to legal limits. Studio customers should contact their studio first. Requests to us can be sent to the contact below and we will respond within the time the law allows. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada or your provincial regulator.

11. Changes and contact

We will post updates to this policy and change the date below; material changes will be notified. Privacy contact: support@scaledintelligence.ai, Scaled Intelligence Inc., 3 Bates Court, Barrie, Ontario, Canada.

Questions about this document: support@scaledintelligence.ai