Studio Data Processing Agreement

Artist HQ LLC — B2B terms for participating studios
Effective date: November 5, 2026

1. Roles

The participating Studio is the Data Controller (the "Business" / "controller" under TDPSA and similar laws). Artist HQ LLC is the Data Processor / Service Provider and processes client data only on the Studio's documented instructions to provide inquiry replies, quoting, booking links and appointment coordination.

2. Tenant wall

• Strict per-studio tenant_id logical and database isolation; private HQs run on separate Workers and databases.
• Zero cross-studio access; no studio can see another studio's clients, threads or photos.
• Zero sale or sharing of client phone lists.
• Zero training of public or shared AI models on client tattoo photos or private threads. AI drafting uses API terms under which submitted data is not used for model training.

3. Tattoo body-photo & media retention policy

• Body-placement and reference photos sent by MMS / iMessage are sensitive. Stored references — including external provider-hosted media URLs such as SendBlue cloud storage links and Twilio media endpoints — are restricted to the receiving Studio's passcode/auth-gated HQ for quoting and appointment prep only.
• Never exposed publicly, never reused across tenants, never included in public demos.
• Scrubbed/redacted from HQ records immediately on a verified client deletion request (artisthq.ai/privacy) or an artist purge action in HQ; opt-out suppression and consent proof are retained.
• Provider media caches: SendBlue and Twilio host media on their own infrastructure under their retention schedules; Artist HQ removes its stored references immediately and Studios may request provider-side deletion through the provider account. Twilio media can be deleted via the Twilio console/API on the Studio's subaccount.
• Studio device hygiene: do not save client body photos to personal camera rolls or shared drives; delete local copies after the appointment; lock devices that can open HQ.
• Default retention: inquiry media kept no longer than needed for the appointment (target ≤ 12 months after last contact) unless the client or law requires otherwise.

4. Age gate

Mandatory 18+ policy for studios and clients. Studios must not book or retain data on minors beyond what is needed to decline.

5. A2P 10DLC gate

Each Studio must complete its own A2P 10DLC Brand + Campaign registration and approval before Twilio SMS is activated for it. Until then, Twilio sending stays off.

6. Consent & texting rules

Inbound-only, client-initiated texting; unconsented or imported lists are non-textable; state quiet hours and the 3-per-24h automated cap are enforced by the platform; keyword and natural-language opt-outs are honored immediately. A timestamped consent audit trail is kept per phone number.

7. Subprocessors

• Cloudflare (Workers, D1, R2) — hosting, database, storage
• OpenAI API — reply drafting (zero-training API terms)
• SendBlue / Twilio — message delivery
• Stripe — deposits and billing

We will notify Studios before adding a new subprocessor.

8. Security & incidents

Encryption of tenant secrets, signed webhooks, per-studio kill switch (default OFF), nightly backups, and the launch gate in the Security Protocol. Artist HQ will notify affected Studios without undue delay of any security incident affecting their client data and assist with required notices.

9. Deletion & return

On termination, Artist HQ returns or deletes the Studio's client data within 30 days, except consent/opt-out proof retained for legal compliance.

Contact

Artist HQ LLC — schlekerc@gmail.com · 469-263-5138