← Back to the website

Legal

Privacy notice

How Tatnivo processes information, images and technical data.

Updated: November 1, 2026 · Version 2026-11-01

1. Controllers and contact

The operator of Tatnivo and controller for its own website, studio account, security and billing data is Daniel Fischlin, Husmattstrasse 2, 6416 Steinerberg, Switzerland. Privacy enquiries may be sent to this postal address. This notice was last updated on 1 November 2026.

The tattoo studio named in the relevant form is the controller for the purpose of a tattoo enquiry, subsequent consultation and its customer administration. Tatnivo generally processes this content on behalf of that studio. Enquiries about a specific tattoo should first be addressed to the studio concerned.

2. Data we process

For password-protected studio sign-in, Supabase processes a user identifier, the verified email address, the selected account language and session data. Tatnivo does not store passwords in plain text. We also process the studio name, settings, reference work, prices, tattooing times and contract and subscription status. For newly created studios, we also store the accepted versions of the terms and data processing agreement and the acceptance time recorded by the server.

The customer form processes the design description, images, style, body placement, length and width, preferred artist, cover-up information, optional budget and language. On submission, the customer’s name, email address and required telephone number are added. The studio can update the status and add internal notes. Images and free text may identify people even without a name field.

3. Purposes and legal bases

The data is used to provide the studio workspace, prepare and forward tattoo enquiries, plan prices and time, communicate, administer contracts and prevent misuse. The AI estimate is non-binding; the design and final price are agreed personally with the studio.

Where the GDPR applies, processing relies, depending on the activity, on performing a contract or taking steps before entering into one, legitimate interests in a secure and functioning service, legal obligations or separate consent where required. For studio customer data, the responsible studio determines the appropriate legal basis. Confirming that contact may be made is not blanket consent to advertising.

4. AI assessment of designs

An automatic estimate requested by a customer may take place before contact details are entered or submitted. The requested design image and design information, together with up to six selected studio reference images and information such as dimensions, style, placement, actual tattooing time and price, are sent to the OpenAI API. Separate contact fields for names, telephone numbers and email addresses are not part of this AI request. Such information may nevertheless appear in uploaded images or free text.

The API request uses store:false. This does not guarantee immediate deletion or Zero Data Retention. Under OpenAI’s published default policy, API content is not used to train models unless data sharing is expressly enabled. Security logs may be retained for up to 30 days under the provider’s rules and longer in legal or security-related exceptional cases. Additional review and retention rules apply to flagged image content.

5. Hosting, sign-in and payment providers

Tatnivo operates through ChatGPT Sites using Cloudflare infrastructure. Structured data is stored through D1 and images through R2. OpenAI is used for platform operation and for the separate AI API. Supabase handles studio sign-in, email verification, password recovery and sign-in sessions. Resend processes recipient addresses, message content and delivery data to send studio account verification and recovery messages. Provider access depends on the relevant service and contractual role.

Studio subscriptions are handled through Stripe Checkout and Stripe’s subscription management portal. Stripe receives, in particular, studio contact, transaction and payment data for this purpose. Full card details are entered on the Stripe payment page and are not stored as card fields in the Tatnivo workspace. Depending on the purpose, Stripe acts as a processor or as an independent controller.

6. International processing

The providers used operate internationally; recipients or group companies are located in countries including the United States. Processing and access outside Switzerland and the European Economic Area are possible. ChatGPT Sites does not provide guaranteed data or inference residency for this deployment. Storage exclusively in Switzerland or the EU is not promised.

Where required by law, transfers to third countries require an applicable adequacy decision or appropriate safeguards and, where necessary, additional measures. This notice does not replace any required transfer agreement. Information about the recipients and safeguards relevant to a specific processing activity may be requested from the operator.

7. Retention and deletion

Workspace enquiries and reference work remain stored for as long as they are needed for the relevant purpose and deletion has not been requested. The studio must review its retention regularly. At present, the workspace is not deleted automatically when a trial or subscription ends; existing data remains available to view and export. Deletion enquiries are handled through the responsible studio or the operator.

Technical form sessions expire after approximately one hour. Expired session and rate-limit records and unused uploads are removed during subsequent cleanup procedures; an expiry time is not a guaranteed physical deletion time. Statutory retention duties and the necessary defence of legal claims may require certain contract and billing data to be retained for longer.

8. Technical data and local preferences

For operation and security, the hosting and sign-in services may process IP addresses, timestamps, technical request information and security logs. Tatnivo uses an identifier derived from the studio association and IP address to limit access to public forms. The language preference is stored in the browser’s local storage and can be deleted there. Sign-in uses necessary, protected session cookies. To limit abuse of authentication flows, identifiers derived by hashing the email address or IP address are also processed.

The application’s own code currently contains no advertising pixels or analytics trackers. Necessary sign-in, hosting or payment technologies used by providers may nevertheless use cookies or similar storage. Adding analytics or marketing functions requires the notices to be updated accordingly and, where necessary, a choice to be provided.

9. Rights, security and careful uploads

Depending on applicable law, rights may include access, rectification, erasure, restriction, provision or portability of data, and objection. Consent may be withdrawn for the future. Where applicable, there is a right to complain to the competent supervisory authority, which in Switzerland is the FDPIC. Reasonable identity verification may be required to handle a request securely.

Studio access and retrieval of images that have not been approved for public display are associated on the server with the relevant sign-in and studio assignment. Absolute security is not guaranteed. Please limit images to the necessary design and do not upload identity document copies, medical records or unnecessary data about other people. Mandatory country-specific rights are governed by the applicable legal rules. Reference work is available internally for AI assessment by default. If the studio enables “Show in customer form” for an individual work, a suitably similar reference may appear in the public customer form with its photo, title, artist, dimensions, style, placement, recorded price and total tattooing time. Approval can be removed for future requests; this does not retrieve copies already viewed or saved.