✦ Privacy

Privacy Policy

Last updated · 2026-05-30

This policy explains what information Tan Concierge collects, why, how we use it, and the choices you have. It applies to everyone who uses the platform — artists, brands, and the clients who visit their portals.

1. Information we collect

From you (artists and brands): your name, email, phone, studio name, billing details, and the content you upload — client records, formulas, photos, intake forms, product listings, gallery images.

From your clients (when they use your portal): name, phone, email, intake answers, photos they upload, and basic usage information (which page they viewed, what they tapped).

Automatically: device type, browser, IP address, language, and timestamps. We use this to make sure the service works and to debug issues.

2. How we use it

We use the information you and your clients give us to:

Run the platform and the features you use
Send the messages you ask us to send (intake invites, aftercare, review requests)
Bill you and handle subscription changes
Improve the platform — what's confusing, what's broken, what feature is worth building next
Reach out about your account, important changes, security issues, or things you specifically asked for

We never sell your data, and we never use your clients' data to advertise to them.

3. Who we share it with

We only share information with vendors that help us run the platform, under contract, and only for that purpose:

Stripe — payment processing
Twilio — SMS delivery
Resend — email delivery
Clerk — sign-in and authentication
Vercel — hosting and content delivery
Neon — database storage
Anthropic — AI features (formula match, intake parsing, AI-written email generation in the artist's voice). When an artist generates an email through Tan Concierge, we send Anthropic the recipient's name, session history, glo-card progress, upcoming-event date (if shared on intake), and intake answers the artist chose to include — so the email can reference real context. We do not share client photos, phone numbers, email addresses, or payment data with Anthropic. Anthropic processes this data per their own privacy policy and does not use it to train models. Artists can disable AI email entirely in Settings.
Resend — email delivery infrastructure. Receives recipient email address, subject, body, and engagement events (opens, clicks, bounces). One-click unsubscribe links appear in every marketing email per CAN-SPAM.

We may disclose information if we're legally required to (subpoena, court order) or to investigate fraud / abuse, or as part of a sale of the business — but only after telling you if the law allows.

4. How long we keep it

We keep your data for as long as your account is active. When you close your account, we purge live records within 30 days and remove backups within 90 days. Some information we may have to keep longer for legal or accounting reasons (invoices, tax records).

5. Your rights

You can:

Access the data we have about you
Correct it
Delete it (subject to legal retention)
Export it in a portable format
Object to specific uses, where the law allows

Email us at hello@tanconcierge.com and we'll respond within a reasonable period (typically two weeks).

6. Security

We use industry-standard encryption (in transit and at rest), limited employee access, and audit trails. No system is perfectly secure, so we can't promise it'll never happen — but if we discover a breach affecting your data, we'll tell you and the relevant authorities as required.

7. Google user data (Calendar integration)

When you connect your Google Calendar to Tan Concierge, we request read-only access to your calendar events using the https://www.googleapis.com/auth/calendar.readonly scope and your account email address using the https://www.googleapis.com/auth/userinfo.email scope.

What we do with it: we read your calendar events to auto-create client records and populate your Today schedule. That's the only purpose. We never modify, create, or delete events on your calendar.

How we store it: the OAuth tokens we receive from Google are stored encrypted in our database. The calendar events themselves are processed in memory and only the minimum needed (appointment time, client name) is stored as a Tan Concierge appointment record.

How you disconnect: go to Settings → Integrations and click Disconnect. We immediately delete the OAuth tokens and stop syncing. You can also revoke access directly from your Google Account at myaccount.google.com/permissions.

Google API Services User Data Policy compliance: Tan Concierge's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We do not use Google user data to serve advertisements.
We do not sell Google user data.
We do not transfer Google user data to third parties except to provide or improve the Tan Concierge service, comply with applicable law, or as part of a merger / acquisition with notice to you.
We do not allow humans to read your Google user data unless we have your affirmative consent for specific data, it is necessary for security purposes (investigating abuse), or required for legal compliance. Aggregated, anonymized data may be reviewed for service improvements.

8. Children

Tan Concierge is not designed for anyone under 18. If you think we have information about a minor, email us and we'll delete it.

9. International users

Tan Concierge is hosted in the United States. If you use the service from outside the U.S., your information will be transferred to and processed in the United States. By using the service, you consent to that transfer.

10. Cookies

We use a small number of essential cookies (sign-in, session, security). We don't run advertising trackers or third-party analytics that profile users across sites.

11. Changes

When we change this policy materially, we'll bump the version date and prompt you to re-accept inside the app. Continued use after that constitutes acceptance.

12. Contact

Questions, requests, or concerns? hello@tanconcierge.com.