Privacy Policy

Last updated: 2026-06-26

BookVoya ("we", "us") provides booking and DM-management software for independent tattoo artists ("artists"). This page explains what data we collect, why, and how to control it.

1. What we collect

Artist account data: name, email, studio details, password (hashed), and settings you enter.
Client booking data: name, contact info, and tattoo request details submitted via an artist's public booking page.
Instagram messages (only if you connect your account): when an artist explicitly connects their Instagram account via Instagram Login, we receive direct messages sent to that account so the artist (or BookVoya's AI assistant, if enabled by the artist) can read and reply to them inside the BookVoya dashboard.
Payment data (only if enabled): processed by our payment provider (e.g. Stripe) directly — BookVoya does not store card numbers.

2. How we use it

To operate the booking dashboard, calendar, and client communication tools the artist uses.
To display Instagram messages to the connected artist and, only if the artist turns it on, generate AI-drafted reply suggestions or automatic replies.
To send the artist operational emails (booking notifications, account verification).

We do not sell, rent, or share personal data with advertisers or data brokers. Instagram data is used only to power the artist's own messaging dashboard — never used for ads, analytics products, or shared with any third party other than the infrastructure providers needed to run the service (e.g. our hosting provider, and an AI provider only if the artist enables AI replies).

3. Storage & security

Data is stored in an encrypted database on our hosting infrastructure. Instagram access tokens are encrypted at rest (AES-256-GCM) and are never displayed in plain text. Access to artist data is scoped per-artist — one artist cannot see another's data.

4. Retention

We retain account and conversation data for as long as the account is active, or until the artist requests deletion (see below).

5. Your rights / deletion

Artists can disconnect their Instagram account at any time from the BookVoya dashboard, which deletes the stored access token immediately. To request full deletion of your account and associated data, see our Data Deletion page.

6. Contact

Questions about this policy: privacy@bookvoya.com