Updated April 20, 2026
YOUR DATA, YOUR RIGHTS.
// Contents
1. Introduction
LVL2 (“we,” “us,” or “our”) operates the LVL2 platform, including the website at lvl2.ink and related services (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
Information You Provide
- Account information: name, email address, phone number, and password when you create an account.
- Profile information: display name, handle, bio, avatar, industry type, and studio policies.
- Booking information: appointment details, service preferences, reference images, and scheduling data.
- Files and creative assets: portfolio images, flash designs, booking reference images, product images, mood boards, stencil inputs, generated creative outputs, and related captions or notes that you upload or create.
- Payment information: billing details processed securely by our payment processor or processors, such as Stripe where enabled. We do not store full credit card numbers.
- Shop and order information: products, digital downloads, order details, shipping addresses, tracking details, refund details, and fulfillment status for purchases made through LVL2.
- Communications: messages sent through our SMS and email features.
- Connected account information: account IDs, usernames, profile or page metadata, access scopes, tokens, and content or message data from services you choose to connect, such as Google, Meta, Facebook, or Instagram.
Information Collected Automatically
- Usage data: pages visited, features used, and interaction patterns.
- Device information: browser type, operating system, and device identifiers.
- Cookies: session cookies for authentication and preference storage.
- App and notification data: device identifiers, push notification tokens, delivery status, error logs, and basic diagnostics needed to operate and secure the Service.
3. How We Use Your Information
- Provide, maintain, and improve the Service.
- Process bookings and, when payment features are enabled, payments and deposits.
- Operate profile, portfolio, Shop, Exchange, giveaway, and social inbox features.
- Send appointment reminders, confirmations, and review requests via SMS and email.
- Facilitate communication between service providers and clients.
- Generate, edit, or analyze creative assets when you use AI-powered tools.
- Provide mobile push notifications, order updates, and shipping notifications.
- Prevent fraud and enforce our Terms of Service.
- Respond to support inquiries and provide customer service.
5. Data Security
We use industry-standard security measures including encryption in transit (TLS), secure authentication, and row-level security policies on our database. Payment processing is handled by third-party payment processors that maintain their own payment security controls, such as Stripe where enabled. We protect connected social access tokens with server-side access controls and encrypt them in connection stores where that encryption layer is used. We also limit access to workspace data using workspace membership checks and service-role operations for trusted server workflows.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data by contacting us at support@lvl2.ink. We may retain limited records when necessary for payment, fraud prevention, tax, security, legal, or audit purposes.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Opt out of marketing communications.
- Export your data in a portable format.
You can also disconnect supported third-party integrations from your LVL2 settings or revoke access from the third-party service directly. Some deletion or access requests may require us to verify your identity before we act on them.
8. SMS and Communications Program
Program Name
LVL2 Booking Updates — operated by LVL2 (lvl2.ink).
Consent and Opt-In
When submitting a booking request on an artist's profile page (e.g., lvl2.ink/russellcain), you may enter your phone number and check a consent checkbox that reads:
By checking this box and submitting the form, you expressly consent to receive transactional SMS messages from LVL2 at the phone number you provided. This checkbox is unchecked by default. Your consent to receive SMS is not a condition of any purchase or booking. You may complete a booking without providing a phone number or without checking the SMS consent box.
Types of Messages
We send the following types of transactional SMS messages only:
- Booking confirmations: Confirmation that your booking request has been received.
- Status updates: Notifications when your booking status changes (e.g., approved, rescheduled, or rejected).
- Appointment reminders: Reminders about upcoming appointments.
- Deposit and payment links: Secure links to complete deposit or balance payments.
Booking SMS messages are transactional and directly related to your booking activity. If LVL2 or a studio offers separate promotional SMS features, those messages require any consent and opt-out process required by law and carrier rules.
Message Frequency
Message frequency varies based on your booking activity. You will typically receive 2–5 messages per booking.
Opting Out
You can opt out of SMS messages at any time by replying STOP to any message you receive from us. After opting out, you will receive one final confirmation message and no further messages will be sent. You can opt back in by replying START or by providing your phone number and checking the consent box again during a future booking.
Help
For help with SMS messages, reply HELP to any message or contact us at support@lvl2.ink.
Carrier Liability
Standard message and data rates may apply depending on your mobile carrier and plan. LVL2 is not responsible for any charges from your mobile carrier. Carriers are not liable for delayed or undelivered messages.
No Sharing
We do not share, sell, rent, or trade your phone number or SMS opt-in data with any third parties or affiliates for marketing purposes. Phone numbers collected for SMS consent will only be used to send the transactional messages described above.
9. Google User Data
Our Service integrates with Google Calendar to provide sync features. If you connect your Google account, we access your calendar data solely to:
- Display your external events to prevent booking conflicts.
- Sync your LVL2 appointments to your Google Calendar (if enabled).
Limited Use Disclosure: Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising purposes.
10. Meta, Facebook, and Instagram Data
LVL2 includes optional integrations with Meta products, including Facebook and Instagram. If you connect a Meta, Facebook, or Instagram account, we collect and process only the data needed to provide the connected features you choose to use.
What We May Collect
- Connected account and business identifiers, usernames, page names, profile or page metadata, permission scopes, token status, and token expiration details.
- Instagram or Facebook content metadata, media IDs, captions, comments, mentions, message thread identifiers, sender or participant IDs, message text, attachments, timestamps, and delivery/read events when used for social inbox, giveaway, comment, publishing, or messaging features.
- Publishing and insight data such as post IDs, permalinks, status, and basic performance information when you use publishing or analytics features.
How We Use It
- Connect the correct Facebook Page or Instagram business account to your workspace.
- Display and reply to social messages in your LVL2 social inbox.
- Fetch comments or post interactions for giveaway and engagement tools.
- Publish creative assets to connected Instagram accounts when you request it.
- Show connection status, account names, usernames, and token health in your dashboard.
We do not ask for your Facebook or Instagram password. We use Meta's authorization flow and store connected access tokens only to operate the features you authorize. We do not sell Meta Platform Data, use it for unrelated advertising, or share it with third parties except service providers needed to operate LVL2, comply with law, or protect the Service.
You can disconnect supported Meta integrations in LVL2, revoke access in your Meta account settings, or request deletion by contacting support@lvl2.ink. If Meta sends us a valid data deletion or deauthorization request, we process it by removing the connected social account data we can identify from that request.
11. AI and Creative Tools
LVL2 may offer AI-powered tools for business guidance, booking assistance, stencil generation, tattoo idea generation, creative studio assets, mood boards, captions, images, or videos. When you use these features, the prompts, settings, uploaded reference files, generated results, and related workspace context may be processed by LVL2 and by AI service providers such as Google Gemini or OpenAI, depending on the feature.
We use that data to generate the output you request, keep feature history where needed, maintain credits and usage limits, troubleshoot errors, and improve the reliability of the Service. Do not upload sensitive personal information, medical records, financial account numbers, or content you do not have permission to use in AI tools.
12. Shop, Payments, and Shipping
If you buy or sell through LVL2 Shop, Exchange, flash checkout, gift certificates, memberships, group funds, or other commerce features, we process order and payment information needed to complete the transaction. Our payment processor or processors may receive billing, checkout, refund, payout, and fraud prevention data.
LVL2 is currently offered at no charge while we evaluate replacement payment processing. We do not charge subscription fees, platform fees, or paid deposits through LVL2 unless a payment feature is enabled and the charge is shown to you before payment.
For physical products, we may collect shipping names, addresses, carrier selections, tracking numbers, tracking URLs, label URLs, and fulfillment events. Where shipping labels or rates are enabled, we may share shipping details with Shippo, carriers, or other fulfillment providers needed to price, purchase, track, and deliver shipments.
13. Third-Party Links
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.
14. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date.
16. Contact Us
If you have questions about this Privacy Policy or your data, contact us at support@lvl2.ink.