APEX TATTOO
 COLLECTIVE

Effective Date: October 1, 2026 Last Updated: October 1, 2026 Apex Tattoo Collective LLC (“Apex Collective,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal data collected through our website, mobile applications, booking engines, and digital platform services (collectively, the “Platform”). This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you interact with our ecosystem as a tattoo artist, studio client, or website visitor. 1. Information We Collect We collect information directly from you, automatically through your device usage, and via integrated third-party platforms. A. Information You Provide Directly Artist Application & Licensing Data: Full name, legal business name, email address, phone number, government-issued ID, professional tattoo license/permit details, bloodborne pathogens certification, portfolio links, and social media handles. Pre-Lease & Deposit Information: Billing address, payment transaction details, and pre-lease agreements submitted during studio suite reservations. Client Briefs & Inquiries: Name, contact details, placement preferences, tattoo reference images, budget parameters, and body modification inquiry details submitted through our lead generation funnel. Communications & Support: Message content and logs sent via in-app chat, lead distribution forms, contact forms, or direct communications with our AI Studio Assistant and support teams. B. Information Collected Automatically Device & Usage Data: IP address, browser type, operating system, device identifiers, referring URLs, pages viewed, time spent on pages, and interaction data. IoT & Access Logs: Usage records associated with keyless Bluetooth door access systems, smart lighting preferences, and connected studio device interactions managed via single sign-on (SSO). Cookies & Tracking Technologies: Pixels, cookies, and local storage mechanisms used to track advertising conversion performance (e.g., Meta Pixel for geofenced marketing campaigns) and retain site preferences. C. Information from Third Parties Banking & Financial Data: When utilizing our embedded Banking-as-a-Service (BaaS) infrastructure, our financial partners collect and process identity verification (KYC) details, bank account numbers, debit card transactions, and automated revenue-split rules (e.g., tax vault sweep settings). 2. How We Use Your Information We use collected information to operate, scale, and secure the Apex Collective ecosystem, including to: Facilitate studio suite pre-leasing, lease execution, and deposit processing. Route structured client intake briefs and incoming leads to resident tattoo artists based on artist availability, style preference, and client criteria. Provide smart studio functionality, including keyless Bluetooth access, app-based lighting control, and SSO account authentication. Power our AI Studio Assistant to assist in drafting consultation notes, answering routine inquiries, and organizing client briefs. Process payments, issue digital cards, manage automated tax and savings sweeps, and generate needle-hour financial analytics reports. Measure and optimize multi-city ad campaigns, applicant acquisition costs, and landing page performance. Maintain physical security, prevent fraudulent activity, and comply with legal, health department, and regulatory obligations. 3. How We Share Your Information We do not sell your personal information. We share information only under the following circumstances: Between Artists and Clients: Client intake briefs, reference photos, contact details, and messaging logs are shared directly with the selected resident artist to facilitate tattoo consultations and scheduling. Banking & Financial Service Providers: Financial transactions, identity verification data, and banking details are processed securely by our BaaS partners and payment processors to provide business checking, savings, and debit card services. Service Providers & Vendor Infrastructure: Information is shared with trusted cloud hosting providers, IoT smart-lock vendors, SMS/email delivery channels, and marketing platforms bound by strict confidentiality obligations. Legal & Regulatory Compliance: We may disclose information if required to do so by law, court order, health department mandate, or to protect the rights, property, and safety of Apex Collective, our artists, or the public. Business Transfers: In the event of a merger, acquisition, restructuring, or asset sale, user and platform data may be transferred as part of the business assets. 4. Data Security & Retention We employ technical, administrative, and physical safeguards designed to protect personal data from unauthorized access, loss, alteration, or disclosure. These measures include encrypted data transmission (SSL/TLS), secure Single Sign-On (SSO) protocols, restricted access controls, and FDIC-compliant banking infrastructure integrations. We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, maintain business records, resolve disputes, and fulfill contractual or legal requirements. 5. Your Privacy Rights & Choices Depending on your jurisdiction (including California residents under the CCPA/CPRA), you may have the following rights regarding your personal data: Access & Opt-Out: Request access to the categories or specific pieces of personal information we maintain about you. Correction & Deletion: Request correction of inaccurate information or deletion of your personal data, subject to legal and contractual exceptions. Marketing Preferences: Opt out of receiving promotional communications by using the "unsubscribe" link in emails or replying "STOP" to SMS notifications. Cookie Controls: Manage browser settings to block or delete cookies; note that disabling certain cookies may affect platform functionality. To exercise any of these rights, contact us at privacy@apextattoocollective.com. 6. Third-Party Links & External Platforms Our Platform may contain links to third-party websites, social media channels (e.g., Instagram), or external booking utilities not owned or controlled by Apex Collective. We are not responsible for the privacy practices or content of external sites. We encourage you to review the privacy policies of any third-party service you visit. 7. Children's Privacy Apex Collective services and studio suites are intended exclusively for individuals aged 18 and older. We do not knowingly collect or solicit personal information from minors. If we learn that we have collected data from an individual under 18 without parental consent, we will delete that information immediately. 8. Updates to This Privacy Policy We may update this Privacy Policy periodically to reflect operational, legal, or technological changes. Any modifications will be posted on this page with an updated "Last Updated" date. Continued use of our Platform following notice of changes constitutes acceptance of the revised terms. 9. Contact Us If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Apex Tattoo Collective LLC Attn: Privacy & Compliance Email: info@apextattoo.co Website: www.apextattoo.co