Privacy Policy
Effective 7 July 2025
This policy explains what we collect when you visit inkmentors.com or buy a course, why we collect it, who else sees it, and what you can ask us to do about it.
1. Who is responsible for your data
Tat2Solutions, Inc., a Texas corporation doing business as InkMentors, with its principal place of business in Houston, Texas, is the controller of the personal data described here.
For anything in this policy, including a request to see or delete your data, write to help@inkmentors.com.
2. What you give us
When you download a free pack, subscribe to the newsletter, take the quiz or use the popup, we collect your name and email address, and where the form asks for it, your Instagram handle and your answers about your experience, your focus and your goal as an artist.
When you write to support, or talk to the samurAI assistant on the site, we keep your name, email and the content of the messages so we can answer you.
When you buy, our course platform creates an account for you with your name and email. Your payment details are entered on the payment provider’s own page and never reach our servers: we see that a sale happened, the amount, and which product, not your full card number.
3. What we collect automatically
Like most sites, we record technical data when you visit: your IP address, your browser and device type, the pages you open, how long you stay, which site or advert you arrived from, and any coupon or campaign tag in the link you followed.
We also use Microsoft Clarity, which records how you move through the pages: scrolling, clicks, mouse movement and the paths you take. These are session recordings of your behaviour on the site. Clarity masks the content of form fields by default, but you should assume your movement through a page is recorded.
We do not record audio, use your camera, or track you across sites we do not operate.
4. Why we use it
To deliver what you asked for: sending the free pack, giving you access to a course you bought, answering your support message, issuing your certificate.
To run and improve the site: understanding which pages work, where people get stuck, and what breaks.
To market our courses: sending you email about courses and offers if you gave us your address, and measuring which adverts lead to sales.
To meet legal and accounting obligations, and to prevent fraud and abuse.
5. The tools that run on this site
Everything below is loaded through Google Tag Manager. Each of these companies receives data about your visit and processes it under its own privacy policy.
Google Analytics 4 measures traffic and which pages lead to sales. Google Ads, together with DoubleClick, measures whether an advert led to a purchase and lets us show adverts to people who visited. Meta Pixel does the same for Facebook and Instagram adverts. Microsoft Clarity records sessions and builds heatmaps, as described in section 3.
We also send Meta a server-side record of purchases so a sale is counted even when a browser blocks the pixel. That record includes your email address in hashed form, meaning it is converted into an irreversible string before it leaves us, so Meta can match it against an existing account without us handing over the address itself.
Brevo stores our mailing lists and sends our email. Supabase stores the leads captured by our forms. Teachable hosts the courses and your student account. Vercel hosts the site and keeps standard server logs. Our community runs on WhatsApp, operated by Meta.
6. Cookies and how to refuse them
The tools in section 5 set cookies and similar identifiers when you open the site. Some are necessary for the site to work; most are for analytics and advertising.
We do not currently show a cookie banner, so analytics and advertising cookies are set when you arrive rather than after you agree. If you would rather not be measured, you can block or delete cookies in your browser settings, use your browser’s tracking protection, install the Google Analytics opt-out add-on, or adjust your advert settings in your Google and Meta accounts. Blocking them does not stop you from buying or watching a course.
We are working on a consent banner for visitors in regions that require one. Until it is live, this paragraph is the honest description of what happens.
7. Legal bases, if you are in the EU or UK
We rely on performance of a contract to deliver a course you bought and to support you afterwards; on consent for marketing email and for the analytics and advertising described above; and on legitimate interest for keeping the site secure, preventing fraud and understanding in aggregate how the site is used.
Where we rely on consent, you can withdraw it at any time, and withdrawing it does not affect what we did while it was valid.
8. Who else sees your data
The companies named in section 5, each for the purpose described there.
Our payment providers, for the payment itself. Our accountants and, where the law requires it, tax authorities.
We do not sell your personal data. We do share identifiers with Meta and Google for advertising, which under some laws, including California’s, counts as "sharing for cross-context behavioural advertising". You can stop it using the controls in section 6, or by writing to us.
9. Where your data goes
We are a United States company and our providers are largely United States companies, so your data is processed in the United States and potentially anywhere our providers operate.
If you are in the EU or the UK, that is a transfer outside your region. It is covered by the standard contractual clauses or equivalent safeguards our providers use, and you can ask us which apply to a given provider.
10. How long we keep it
Your student account and purchase records stay for as long as you have access to a course, which is indefinitely, plus the period our tax and accounting obligations require.
Marketing contacts stay until you unsubscribe or ask us to delete you. Every email we send carries an unsubscribe link.
Analytics and session recordings are kept on the retention schedule of the tool that collects them, which is between 2 and 26 months depending on the tool.
Support conversations are kept while they are useful for supporting you.
11. Your rights
Wherever you are, you can ask us to show you the data we hold about you, correct it, delete it, send it to you in a portable form, or stop using it for marketing. You can also object to processing we base on legitimate interest.
Write to help@inkmentors.com. We answer within 30 days, and we do not require you to explain why. If you ask us to delete your data while you still have course access, tell us: deleting your account also removes that access, and we will confirm before doing it.
If you are in the EU or the UK and you think we handled your data badly, you can complain to your national data protection authority. We would rather you told us first.
12. Children
The site and the courses are for adults working in a regulated profession. We do not sell to anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.
13. Security
The site is served over HTTPS, payment happens on the provider’s own systems, and access to our lead and student data is restricted to the people who need it.
No system is perfectly secure. If a breach ever affects your data, we will tell you and the relevant authority within the time the law requires.
14. Changes to this policy
When we change how we use data, we update this page and move the effective date at the top. If a change is significant, and you are on our mailing list, we will tell you by email rather than leaving you to notice.
15. Contact
Any question about this policy, or any request under section 11, goes to help@inkmentors.com.
Tat2Solutions, Inc., doing business as InkMentors Tattoo School. Houston, Texas, USA.
