StencilMind Privacy Policy

1. Who We Are

StencilMind is a web application that converts artwork and reference photos into print-ready tattoo stencils using AI image processing. We process the images you upload to produce a stencil. We do not generate new artwork, and we do not create images from text prompts. The tool only converts what you give it.

In this policy, “we,” “us,” and “our” mean DualSpoke. “You” and “your” mean the person using StencilMind.

2. What This Policy Covers

This policy applies to the StencilMind marketing website at stencilmind.com, the StencilMind web application at app.stencilmind.com, and to any account you create with us. It does not cover third-party websites or services you might reach through links, including the tools you use to create your source artwork.

3. Information We Collect

We keep data collection to the minimum needed to run the service. We collect:

• Your email address. We use this to create your account, log you in, and contact you about your account or the service.
• Images you upload. When you upload artwork or a reference photo, we process it to create your stencil. Your uploaded source image is not kept after processing, and your most recent stencils are stored in your stencil history. See Section 7 for exactly how this works.
• Subscription and billing information. When you subscribe to a paid plan, payment is handled by our payment processor, Stripe. Your card number goes directly to the payment processor; we never see or store it. We receive and keep the information needed to manage your subscription, such as your plan, billing status, and transaction history.
• Standard web usage logs. Like most websites, our systems automatically record basic technical information such as the pages you visit, timestamps, and your browser type. This helps us keep the service running, troubleshoot problems, and protect against abuse.

We do not ask for or collect government IDs or any sensitive personal data beyond what is listed above.

4. How We Use Your Information

We use the information we collect to:

• Create and manage your account and log you in
• Convert your uploaded images into stencils
• Store your recent stencils in your stencil history so you can access them again
• Process subscription payments and manage your plan
• Operate, maintain, and improve the service
• Diagnose technical problems and protect against fraud or abuse
• Respond to your questions and privacy requests
• Send you essential service messages (for example, account, billing, or security notices)

We do not use your uploaded images to train AI models, and we do not use them for any purpose beyond producing your stencil.

5. We Do Not Sell Your Data

We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing. Under laws like the California Consumer Privacy Act (CCPA), “sale” has a broad definition. To be clear, we do not engage in any of it.

6. How We Share Your Information

We do not sell your data, but we do rely on a small number of trusted service providers to run StencilMind. These providers only process data on our behalf and only to the extent needed to deliver their part of the service. They are:

• A cloud hosting and infrastructure provider (US-based) that runs the application
• An authentication and database provider (US-based) that securely stores your account email and login credentials
• An AI image processing service (US-based) that performs the stencil conversion on your uploaded image
• A payment processor (US-based) that handles subscription billing and receives the payment details you provide at checkout

These providers are bound by contracts that require them to protect your data and use it only for the services we have engaged them to perform.

We may also disclose information if required to do so by law, court order, or valid legal process, or where necessary to protect the rights, safety, or property of our users, the public, or DualSpoke.

7. How We Handle Your Images

This matters to you, so we are spelling it out clearly.

Your uploaded source image is not kept. When you upload an image, it is processed to create your stencil and then discarded. The source image passes through our processing pipeline and is not retained on our systems after processing.

Your recent stencils are stored in your stencil history. Your stencil history is stored securely and only accessible to you. We automatically retain your 5 most recent stencils and 5 most recent refined stencils; older ones are automatically deleted as new ones are created. Beyond your stencil history, any stencil you download lives on your own device.

Our image processor deletes its copies within 7 days. We use a third-party image processor to generate stencils. The processor's copy of your photo and stencil is automatically deleted from their systems within 7 days and is never used for any other purpose.

8. Cookies

We use cookies for one purpose: keeping you logged in. These are authentication session cookies that let the app recognize you while you are using it. We do not use advertising cookies, cross-site tracking cookies, or third-party marketing trackers. Because our cookie use is limited to what is strictly necessary to operate the service, you may not see a cookie banner, but you can clear cookies at any time through your browser settings. Doing so will log you out.

9. Data Retention

We keep your account email and subscription records for as long as your account is active, and billing records as long as required for tax, accounting, and legal purposes. We keep web usage logs only as long as needed for security, troubleshooting, and operating the service, after which they are deleted or anonymized. Uploaded source images are not retained after processing, and your stencil history holds only your most recent stencils, as described in Section 7. When you delete your account, we remove your account data, including your stored stencil history, as described in Section 11.

10. Your Privacy Rights

Depending on where you live, you have rights over your personal data. We honor these rights for all our users regardless of location.

If you are in the European Union, United Kingdom, or another region covered by the GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (“right to be forgotten”)
• Restrict or object to how we process your data
• Receive your data in a portable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data protection authority

Our legal bases for processing are performing our contract with you (running your account, billing your subscription, converting your images, and storing your stencil history), our legitimate interests (operating, securing, and improving the service), and complying with our legal obligations.

If you are a California resident covered by the CCPA/CPRA, you have the right to:

• Know what personal information we collect and how we use it
• Request access to the specific information we hold about you
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information (note: we do not sell or share your information)
• Not be discriminated against for exercising your rights

We treat browser-based opt-out preference signals, such as Global Privacy Control, as a valid opt-out request where the law requires it. Because we do not sell or share personal information, these signals do not change how we handle your data in practice.

Residents of other US states with comprehensive privacy laws (for example, Colorado, Connecticut, Virginia, and Texas) may have similar rights, including the right to appeal our decision on a request.

To exercise any of these rights, contact us using the details in Section 13. We will verify your request and respond within the timeframe required by applicable law.

11. Account Deletion and Data Removal

You can ask us to delete your account and associated personal data at any time. Email support@stencilmind.com with your request. Once we verify it, we will delete your account email, your stored stencil history, and related account data from our active systems. Some information may remain in routine backups for a limited period before those backups are overwritten, and we may retain limited records where the law requires it, including billing records we must keep for tax and accounting purposes.

12. International Data Transfers

StencilMind is operated from the United States, and our service providers are US-based. If you access the service from outside the US, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using StencilMind, you understand that your information will be processed in the US. Where required, we rely on appropriate legal safeguards for these transfers.

13. How to Contact Us

For any privacy question or request, including access, correction, or deletion, contact:

Please include enough detail for us to identify your account and understand your request. We may need to verify your identity before acting on certain requests.

14. Security

We use reasonable technical and organizational measures to protect your information, including secure authentication and encrypted connections. No system is perfectly secure, so we cannot guarantee absolute security, but we take protection seriously and limit the data we collect in the first place.

15. Children

StencilMind is intended for professional and adult use. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

16. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top. If we make a material change, we will take reasonable steps to notify you, such as by email or a notice in the app. Continued use of StencilMind after an update means you accept the revised policy.

This policy is governed by the laws of the State of Wyoming, USA, without regard to its conflict of laws principles.