Privacy Policy

Slate Booking · Last updated August 29, 2026

1. Overview

Slate Booking (“we,” “us,” “our”) is operated by JR Hector Gonzalez (doing business as Slate Booking). This Privacy Policy explains how we collect, use, and protect information when you use slatebooking.app. We take privacy seriously, especially because this Platform handles sensitive health information as part of tattoo consent forms.

2. Text Messaging (SMS)

We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.

If you provide a mobile number and opt in, JR HECTOR GONZALEZ (Slate Booking) uses it to send appointment-related text messages: request updates, booking confirmations, schedule changes, reminders, aftercare, and (for artists who verify a phone) studio alerts and login codes. We collect your mobile number, SMS consent status and timestamp, and message delivery logs to operate and document this program.

Message frequency varies. Msg & data rates may apply. Reply STOP to cancel, HELP for help. Consent is optional and is not required to submit a booking request. Program terms: Terms of Service.

3. Information We Collect

From Artists

Name, email address, handle/username
Business information (services, availability, policies)
Portfolio images you upload
Account activity and login history

From Clients

Name, email address, and/or phone number
Booking request details (tattoo description, placement, size, dates)
Optional city or ZIP you share on the request form (coarse area only - we do not collect GPS or infer location from your phone number)
Reference images you upload
Consent form responses, including health information (medical conditions, medications, allergies)
IP address at time of consent signing

Automatically collected

Browser type, device type, operating system
Pages visited and features used
IP address and approximate location

4. How We Use Your Information

Operate the booking and scheduling Platform
Send booking confirmations, reminders, and updates
Enable Artists to review and manage booking requests
Show Artists a count of clients by city or ZIP when you choose to share one (so they can site a studio near demand). We do not sell this, map it, or use it for ads.
Store consent records as required for legal and safety purposes
Improve the Platform and fix bugs
Respond to support requests
Comply with legal obligations

We do not sell your personal information to third parties.

5. Health Information

Consent forms may collect sensitive health information (medical conditions, medications, skin conditions). This information is:

Stored securely in encrypted databases
Accessible only to the Artist associated with your booking
Retained for a minimum of 5 years as required for medical/legal records
Never sold or shared with third parties except as required by law

6. How We Share Information

With the Artist you booked: booking details and contact information so they can complete your appointment. This is not marketing.
Processors (not marketing partners): vendors listed in §7 operate the Platform on our behalf (for example Twilio delivers SMS you opted into). They may process a mobile number only to send those messages. They do not receive mobile numbers or messaging consent for their own marketing or promotional purposes.
Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of users.
Business transfer: If Slate Booking is acquired or merged, your information may be transferred as part of that transaction.

We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.

7. Third-Party Services

Service	Purpose
Supabase	Database and authentication
Resend	Email delivery
Twilio	SMS delivery and STOP/HELP handling (processor, not a marketing partner)
Railway	Hosting and infrastructure
Cloudflare	DNS and security

8. Data Retention

Data type	Retention
Artist account data	Until deletion + 30 days
Client booking data	3 years after last activity
Consent records (health data)	5 years minimum (legal requirement)
Email logs	90 days
Server logs	30 days

9. Your Rights

You have the right to:

Access the personal information we hold about you
Correct inaccurate information
Delete your information (subject to legal retention requirements for consent records)
Export your data in a portable format
Opt out of non-essential communications

To exercise these rights, email [email protected]. We will respond within 30 days.

Consent records cannot be deleted before their minimum retention period expires due to legal requirements.

10. Children’s Privacy

The Platform is not directed at anyone under 13. We do not knowingly collect information from children under 13.

For clients aged 13–17 booking with parental consent, a parent or guardian must be present at the appointment and must countersign the consent form in person.

11. Security

We implement industry-standard security measures including encrypted database storage, HTTPS on all connections, hashed authentication tokens, and role-based access controls. If you believe your account has been compromised, contact [email protected] immediately.

12. Governing Law

This Privacy Policy is governed by the laws of the State of Texas.

13. Changes to This Policy

We may update this Privacy Policy. We will notify Artists by email and post the updated policy with a new effective date. Continued use of the Platform constitutes acceptance.

14. Contact

Privacy questions or data requests: [email protected]

15. Cookies and Tracking

We use minimal cookies necessary to keep you logged in and operate the Platform. We do not use advertising cookies or sell data to advertisers. Product analytics (PostHog) only runs when configured; when the analytics key is unset, PostHog does not initialize and does not set analytics cookies.