Privacy Policy

1. Who we are

ISL is professional software for micropigmentation (PMU) artists, operated by Ink Skin Logic (Romania). Contact and privacy requests: lisebrows1@gmail.com.

2. GDPR roles

• PMU artists (subscribers) — controller for the account data and, in general, for the client data entered into the application.
• End clients — the artist is the controller; ISL acts as processor on the artist's instructions.

3. Data processed

Artist account: identification, contact, studio, billing. Client data (entered by the artist):

• identification and contact data;
• health data (contraindications questionnaire) — special category under Art. 9 GDPR, with explicit consent;
• aesthetic data (Fitzpatrick, undertone, preferences);
• before/after/healed photographs;
• session history, pigment recipes, retouch assessments.

4. Legal bases

• performance of the contract (Art. 6(1)(b)) — platform services;
• explicit consent (Art. 6(1)(a) + Art. 9(2)(a)) — health, photographs, AI;
• legal obligation (Art. 6(1)(c)) — where applicable;
• legitimate interest (Art. 6(1)(f)) — security, fraud prevention.

5. Sub-processors

Up-to-date list: Sub-processors. AI analysis (Anthropic) is optional and requires separate consent.

6. Data subject rights

Access, rectification, erasure, restriction, portability, objection, withdrawal of consent. For client data, requests are addressed first of all to the PMU artist (controller). Complaints: ANSPDCP (Romania).

7. Security and AI

ISL is not a medical device. AI results and recipe validations are support tools; the final decision belongs to the licensed artist.

Feedback submitted by artists

If you send feedback from the application, we process it as follows:

• Your message is stored together with the account it was sent from, including the e-mail address. This data stays private and is visible only to the operator.
• Feedback is read and moderated by the operator. It may be marked as reviewed, planned, implemented or archived, and the operator may add internal notes that never become public.
• Nothing becomes public automatically. Publication happens only if you explicitly ticked the publication consent, and only after the operator approves it.
• You choose how you are shown: first name, studio name, anonymous, or a neutral label. We never derive a public name from your e-mail address.
• You can withdraw publication consent at any time from the application. Withdrawal immediately removes the message from the public page.
• After withdrawal we keep the original message in our internal records as a record of the communication, but we no longer display it publicly.

Your rights of access, rectification and erasure apply to this data as well, under the conditions described above and in the Terms and Conditions.