Privacy Policy
How we collect, use, and protect your personal information.
Last updated: 2026-10-31
Introduction
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.
Information We Collect
We collect the following types of information to provide and improve our service:
- Account Information — Your name, email address, and other details you provide when creating an account.
- Usage Data — Information about how you interact with the service, including features accessed, frequency of use, and interaction patterns.
- Device Information — Device type, operating system, and browser type, used to optimize compatibility and performance.
- Cookies — Small data files stored on your device to remember preferences and improve your experience.
- Payment Information — Billing details handled by trusted third-party payment processors. We do not store full card numbers on our servers.
How We Use Your Information
We use the data we collect to:
- Provide, maintain, and improve the service.
- Process transactions and send related confirmations.
- Send technical notices, security alerts, and support messages.
- Respond to your questions, feedback, and support requests.
- Detect, prevent, and address fraud and abuse.
Data Sharing
We do not sell your personal information. We may share data only in these limited cases:
- With service providers who help us operate the service, under confidentiality agreements.
- To comply with legal obligations or respond to lawful requests from public authorities.
- To protect our rights, property, or safety, or that of our users.
Analytics
We use Google Analytics 4 and Microsoft Clarity (when enabled for this site) to understand how visitors use public pages: pages viewed, the site that referred you, device and browser type, approximate country, clicks and scrolling, and a small set of product steps. They never receive your photos, file names, email address, or account, request and order identifiers.
- Visitors in the EEA, the UK and Switzerland: analytics and advertising storage start denied and we ask first. Nothing from Google Analytics or Clarity loads and nothing is sent to them until you choose Allow. If you later choose Decline, both stop and their cookies are deleted.
- Visitors elsewhere: analytics start on. You can turn them off at any time with Privacy settings at the bottom of every page.
Your region is worked out from your IP address at the moment of the request and is not stored. Your choice is kept in this browser and applies to Google Analytics and Clarity together. See the Cookie Policy.
Photos You Upload and Designs We Make
We use an uploaded photo only to make the tattoo designs you asked for. Uploaded photos are deleted after 24 hours (sooner once your designs are ready) and generated designs after 30 days. We don't run face recognition or age detection, there is no public gallery, and we never sell photos. Designs are generated with an OpenAI image model through our provider Kie, which keeps its own copy of uploaded photos for up to 24 hours and of generated images for up to 14 days; we cannot delete those copies sooner. Photos and designs are also checked by our content-safety provider before they are shown.
Photos of Children
You may upload photos that include children only if you are their parent or guardian or have permission. Email hello@drawtat.com to delete what we hold sooner; we delete within 24 hours of a valid request.
Data Security
We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information.
Your Rights
You have the right to access, update, export, or delete your personal information. You can do this through your account settings or by contacting us at the email address below.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service.
Contact Us
If you have questions about this Privacy Policy, please contact us at the email address provided on our website.