Privacy Policy
Last updated: June 2026
1. What we collect
Artists: name, email, password (hashed), Instagram handle, avatar URL, timezone, Stripe account ID, and subscription status.
Clients (via booking forms): name, email, phone number, appointment details, and digital waiver signatures. This data is collected on behalf of the artist you are booking with.
2. How we use it
We use your data to provide the Tatly service: processing bookings, sending reminders and waivers, collecting deposits via Stripe, and communicating account information. We do not sell your data to third parties.
3. Third-party processors
We use the following sub-processors:
Supabase — database and authentication hosting
Stripe — payment processing and artist payouts
Resend — transactional email delivery
Vercel — application hosting
4. Cookies
We use session cookies for authentication only. We do not use tracking or advertising cookies.
5. Data retention
Artist account data is kept until you delete your account. Booking and waiver data is retained for 3 years for legal compliance. You can request deletion by emailing us.
6. Your rights
You have the right to access, correct, and delete your personal data. To exercise these rights, contact hello@tatly.xyz. We will respond within 30 days.
7. Security
We use industry-standard encryption in transit (HTTPS) and at rest. Passwords are hashed. Stripe credentials are never stored on our servers.
8. Contact
For privacy questions, email hello@tatly.xyz.