Sub-processors
Last updated: 5 September 2026
ATORIE PTY LTD (ACN 696 018 890, ABN 51 696 018 890) trading as TattLink uses the companies below to run TattLink. Each one only receives what it needs to do its job.
This page is referenced by our Privacy Policy, which explains what we collect and why. This page is the detail: who else touches it.
Companies that handle your information for us
These providers act on our instructions. We remain responsible to you for how they handle your information.
Google LLC — Firebase Authentication, Cloud Firestore, Cloud Storage
What they do
Sign-in, our database, and file storage. Most of what you give us lives here.
What they receive
Everything: your account, profile, bookings, messages, photographs.
Where
United States
Google LLC — Maps Platform
What they do
Maps, pins, address search and geocoding.
What they receive
Addresses and place names you search for. Not your account.
Where
United States and elsewhere
Railway Corporation
What they do
Hosts our API — every request passes through it.
What they receive
All request traffic, plus server logs including IP address and device type.
Where
United States
Vercel Inc.
What they do
Hosts tatt.link.
What they receive
Web requests and edge logs, including IP address.
Where
Global edge network
Meilisearch SAS
What they do
Search. Holds a copy of public profile information so search is fast and typo-tolerant.
What they receive
Names, usernames, bios, locations, specialties and profile images — public profile fields only.
Where
See note below
650 Industries, Inc. (Expo)
What they do
Delivers push notifications to your device.
What they receive
Your device's push token and the content of the notification, including message previews.
Where
United States
Apple Inc. and Google LLC
What they do
Final delivery of push notifications, through APNs and Firebase Cloud Messaging.
What they receive
The notification content, in transit.
Where
United States
Companies that also decide things for themselves
These are not simply acting for us. They have their own obligations and their own privacy terms, and you have rights directly against them.
Stripe — Stripe Payments Australia Pty Ltd and Stripe, Inc.
What they do
Card payments, refunds, and artist payouts. Stripe is responsible for your card details, not us — we never see your full card number. Artists taking payouts complete Stripe's own onboarding, and Stripe collects their identity, bank and tax details directly for its own legal obligations.
Their terms
Google LLC — Sign in with Google
What they do
Optional sign-in. If you use it, Google tells us your name and email, and knows you signed in to TattLink.
Their terms
Apple Inc. — Sign in with Apple
What they do
Optional sign-in. Apple lets you hide your real email address if you prefer.
Their terms
Companies that receive no personal information
Listed for completeness, because they are third parties we call.
ExchangeRate-API supplies daily currency rates so we can show prices and deposits in your currency. We send it currency codes. It receives nothing about you.
Mail sent to privacy@tatt.link, support@tatt.link and report@tatt.link is forwarded through our domain registrar and delivered into Google Workspace mailboxes. Both handle the contents of those emails, including anything you write to us about a privacy request, a report or a dispute.
A note on Meilisearch
Search is optional in our system. When it is unavailable, search falls back to querying our database directly and Meilisearch receives nothing. When it is running, it holds a copy of public profile fields only — never bookings, messages, payment information or anything private.
Keeping this current
We update this page when we add, remove or change a provider, and the date at the top changes with it. Because it is a separate page, updating it does not require us to reissue the whole Privacy Policy — which is deliberate, so the list stays accurate.
If we make a change that materially affects how your information is handled, we will tell you in the app or by email as well as updating this page.
Contact
Questions about any provider on this list: privacy@tatt.link
ATORIE PTY LTD (ACN 696 018 890, ABN 51 696 018 890) trading as TattLink