Privacy Policy

Account information. When you create an artist account, we collect your name, email address, and any profile details you provide (display name, bio, shop location, social links).

Client submissions. When clients submit booking requests through an artist's microsite, we collect the information they provide — typically name, email, phone number, and any form fields the artist has configured. This data belongs to the artist and is stored on their behalf.

Photos. Artists upload portfolio and healed-photo images to the platform. These are stored securely via Uploadthing and served through their CDN.

Legal agreements. When you accept our Terms of Service, we record your typed name, the date and time of acceptance, your IP address, and your browser's user agent string. This constitutes your electronic signature under applicable e-signature laws and is retained as a permanent compliance record.

Payment information. Billing is handled by Stripe. We do not store credit card numbers or payment details. Stripe's privacy policy applies to payment data.

We use the information we collect to:

• Operate and improve the Stencled platform
• Send transactional emails — booking confirmations, appointment reminders, aftercare instructions, and healed photo prompts — on behalf of artists
• Send platform notifications such as account confirmations and sign-in links
• Process subscription billing through Stripe
• Respond to support requests

We do not sell your personal information. We do not use client submission data for marketing purposes.

Transactional emails (booking confirmations, reminders, aftercare) are sent via Resend on behalf of the artist. These are required for the service to function and cannot be opted out of while using the platform.

Marketing emails (product updates, waitlist communications) are sent only to users who have opted in. You can unsubscribe at any time using the link in any marketing email.

Your data is stored in Supabase, a managed database platform with encryption at rest and in transit. Authentication is handled by Supabase Auth. Images are stored via Uploadthing. All data is stored on servers located in the United States. By using the platform, you consent to the transfer and storage of your personal information in the United States, where data protection laws may differ from those in your country of residence.

We implement row-level security at the database layer — artists can only access their own data. Client submission data is scoped to the artist it was submitted to.

If you are located in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA). This includes the right to access personal information we hold about you, request corrections, and request deletion. To exercise these rights as an artist, contact us at hello@stencled.com. To exercise these rights as a client of an artist, contact that artist directly — they control your booking data.

Client information submitted through an artist's booking form is collected with your explicit consent (the consent checkbox on every booking form) and is used solely to respond to your booking request.

We use the following third-party services to operate Stencled:

• Supabase — database and authentication
• Stripe — payment processing
• Resend — transactional email delivery
• Uploadthing — image storage and delivery
• Cloudflare — DNS, CDN, and bot protection
• Vercel — application hosting

Each provider has their own privacy policy governing how they handle data.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Export your data in a portable format

To exercise these rights, email us at hello@stencled.com.

We retain your account data for as long as your account is active. If you delete your account, your data is removed within 30 days, except where we are required to retain it for legal or tax purposes (e.g., billing records).

We may update this policy from time to time. We'll notify active users of material changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

Questions about this policy? hello@stencled.com