Privacy Policy

Last updated: March 23, 2026

Inkwell ("we", "our", "us") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

1.1 Information You Provide

When you use Inkwell, we collect information you submit directly:

• Brief data — Business name, industry, target audience, tone preferences, and keywords you provide when creating content briefs
• Payment information — Processed securely by Stripe. We do not store credit card numbers, CVVs, or full card details on our servers. See Stripe's Privacy Policy
• Contact information — Email address if you contact us for support

1.2 Information Collected Automatically

• Usage data — Pages visited, features used, articles generated
• Device information — Browser type, operating system, screen resolution
• Analytics — Anonymous visitor identifiers for site analytics (no personal data)
• Cookies — See our Cookie Notice for details

2. How We Use Your Information

3. Third-Party Services

We share data with the following third-party services, solely to operate Inkwell:

• Stripe — Payment processing. Stripe handles all payment data under their own privacy policy and PCI DSS compliance
• Anthropic (Claude AI) — Content generation. Brief data is sent to AI models to generate articles. Anthropic does not use your data to train their models
• Render — Cloud hosting infrastructure
• Neon — Database hosting (PostgreSQL)

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

4. Data Retention

• Brief and article data — Retained for as long as your subscription is active, plus 90 days after cancellation
• Payment records — Retained as required by tax and financial regulations (typically 7 years)
• Analytics data — Anonymized and retained indefinitely for aggregate analysis

You may request deletion of your data at any time (see Section 6).

5. Data Security

We protect your data through:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted database connections
• AES-256-GCM encryption for stored sensitive data
• Regular security reviews of our infrastructure
• Principle of least privilege for data access

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access — Request a copy of the personal data we hold about you
• Rectification — Correct inaccurate personal data
• Erasure — Request deletion of your personal data ("right to be forgotten")
• Portability — Receive your data in a structured, machine-readable format
• Objection — Object to processing based on legitimate interests
• Restriction — Request we limit how we process your data

To exercise any of these rights, email us at inkwell-5@polsia.app. We will respond within 30 days.

7. International Data Transfers

Inkwell is operated from the United States. If you are accessing our service from outside the US, your data will be transferred to and processed in the US. We ensure appropriate safeguards are in place for international data transfers in compliance with GDPR and other applicable data protection laws.

8. Children's Privacy

Inkwell is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to subscribers at least 14 days before they take effect. The "Last updated" date at the top reflects the most recent revision.

10. Contact

For privacy-related questions or to exercise your data rights, contact us at inkwell-5@polsia.app.