Privacy Policy

Controller: Individual entrepreneur (FOP) Shevchenko Yaroslav Tarasovych, trading as Heldig Lab, Kyiv, Ukraine. Contact: heldig.lab@pm.me.

What we collect

• The details you type into the order form: your tattoo idea, style, placement, width, ink, the names or words to letter and what your photos are.
• Up to 2 photos: a reference image and/or a photo of the spot on your body (without your face), used only to make your designs and try-on. They are deleted automatically after 30 days.
• The result we create for you.
• Your email address, when you unlock the full result.
• Order and payment records: status, amount, the amount and fee monobank reports for your payment, and what the AI processing of your order cost us (we never receive your card details; payment is handled by monobank). To apply the free-preview limit, an order also keeps a one-way hash of your network address.
• Site usage analytics: pages viewed, how far you scroll, which buttons, questions and form fields you use (which fields you fill in, never what you type), how fast pages load, time on the site, the referring site and campaign tags, approximate location (country/city from your IP address; the IP itself is stored only as a one-way hash), device, browser and language. With your consent we also store a random visitor ID in your browser to recognise repeat visits; if you decline, your browser sends us no analytics. With the same consent we also load the Google Ads tag, which sets Google advertising cookies so we can see whether a visit from our ads ended in a purchase; without consent it is not loaded.
• Server records, kept whether or not you allow analytics and without any cookie or browser storage: when our home page is requested, and when you ask for a preview, our server notes the country, device type (phone, tablet or computer), browser family and network operator of the request, whether it looks automated, and for home-page requests the referring site's name and the campaign tags in the link (for a Google Ads click only that one happened, never its ID). These records contain no IP address, and a visitor ID only if you allowed analytics; a preview request's record is kept with its order.

Why

To create and deliver your preview and result, send you the result link, provide support and handle refunds, and understand how the site is used so we can improve it.

Processors

• OpenAI (image model) — draws and edits the images; your idea text and photos are sent to it to make your designs, stencils and try-on.
• Cloudflare — hosting, storage, email delivery and analytics collection.
• monobank — payment processing.
• Google Ads — measuring whether our ads lead to purchases (only with your consent).

Retention

Photos you upload, and images made from them, are deleted automatically after 30 days. Details from previews you do not pay for are deleted after 30 days. Paid orders (email, details, result, amount, date) are kept for up to 13 months for support, refunds and accounting. Analytics data is kept for up to 24 months.

Sensitive details

Body photos can show skin. Upload only the spot for the tattoo: no face and nothing intimate. Photos and the images made from them are deleted automatically after 30 days. The service is for adults only; we delete any data we learn belongs to someone under 18.

Your rights

You can ask us to access or delete your data at any time by email. We never sell your data.

2026-10-24