Privacy Policy

In this Privacy Policy, "Inkwell" means Ink Inc. Creative Group, doing business as Inkwell.

This Privacy Policy explains how Inkwell collects, uses, discloses, and protects information when you visit our marketing site, create an account, use Plot or Canvas, run AI-assisted writing skills, collaborate on projects, or contact us for support (collectively, the "Services"). It applies to personal information about account owners, invited collaborators, public share viewers, support contacts, and marketing site visitors.

Inkwell is built for writers working with sensitive creative material. We treat your drafts, outlines, notes, comments, exports, prompts, and AI outputs as your work, not ours. They remain non-public when you invite collaborators or use a non-public share link; they become public only when you intentionally publish them to a public surface. We use that content only as needed to provide, secure, maintain, and support the Services; follow your settings and instructions; comply with law; and enforce our Terms of Service. The sharing controls and third-party connections you enable determine who else may receive that content.

For most individual users and marketing site visitors, Ink Inc. Creative Group, doing business as Inkwell, acts as the controller (or similar role) for account, billing, support, marketing, and product telemetry data. For organization workspaces, Inkwell may act as a processor or service provider for workspace content and member activity under the organization's written agreement, data processing addendum, or administrator instructions.

If you use Inkwell through an employer, school, studio, production company, or other organization, that organization may control your account, workspace content, retention settings, export rights, and access after your relationship with the organization changes. Direct privacy requests about organization-managed content may need to be handled through the workspace owner.

We collect the following categories of information:

• Account information: name, email address, authentication identifiers, workspace membership, plan, preferences, and settings.
• Content you create or upload: projects, documents, screenplay text, Canvas blocks, outlines, notes, comments, feedback, attachments, imports, exports, save points, draft lines, and related metadata.
• AI interaction data: prompts, selected context, skill parameters, chat messages, model outputs, usage counters, latency, provider error information, and audit metadata needed to run, bill, troubleshoot, and explain AI features.
• Collaboration and sharing data: project roles, invitations, viewer access events, comments, approval activity, share-link configuration, and privacy-preserving analytics for shared views.
• Usage, device, and log data: pages viewed, product events, feature usage, IP address, approximate location derived from IP, browser and device details, referring pages, diagnostics, crash logs, and security events.
• Billing and transaction data: plan, subscription status, invoices, payment method metadata, tax information, and fraud signals. Payment card numbers are handled by our payment processor, not stored by Inkwell.
• Support and communications: messages you send us, survey responses, research feedback, and any files or screenshots you choose to include.
• Marketing and advertising data (marketing site): cookie identifiers, ad-click or campaign parameters, and consent or opt-out choices related to analytics and advertising on inkwell.software.

We collect information directly from you, automatically from your browser or device when you use the Services, from collaborators or workspace administrators who invite or manage you, and from service providers that help us authenticate, process payments, deliver email, or measure marketing performance.

We use information to:

• provide, maintain, personalize, and operate the Services;
• save, sync, export, import, render, and version your projects;
• run AI skills, assemble requested context, return outputs, and maintain audit trails;
• authenticate users, enforce permissions, prevent abuse, and protect accounts;
• process subscriptions, taxes, invoices, usage limits, and overage controls;
• send service notices, security alerts, policy updates, and support responses;
• measure product reliability and adoption using privacy-conscious analytics settings;
• improve product quality using telemetry, diagnostics, and aggregate usage patterns that are designed not to include private project text;
• send marketing communications where permitted, with an unsubscribe option in each message;
• comply with legal obligations and enforce our Terms of Service.

We do not sell your screenplay, document, prompt, or workspace content. We also do not use project content for interest-based advertising, or to train models, except as described under "AI, training, and creative ownership."

Where data protection law requires a legal basis, we process personal information under one or more of the following bases: to perform our contract with you, to pursue legitimate interests such as security and service improvement, to comply with legal obligations, to protect vital interests where necessary, or with your consent for optional analytics, marketing communications, beta research, or other opt-in programs.

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing that already occurred or processing that continues under another valid legal basis, such as account security, billing records, or compliance obligations.

Inkwell's AI features process selected content to perform the action you request, such as suggesting a rewrite, answering a project-scoped question, checking continuity, or applying a skill. Inkwell does not claim ownership of your prompts or AI-assisted outputs. Copyright and other rights in AI output depend on applicable law, human authorship, third-party rights, and the underlying material; see the Terms of Service for the allocation of any rights Inkwell may hold.

For Inkwell-controlled processing, including Bundled AI, we do not use your project content, prompts, chat messages, or outputs to develop, train, or improve Inkwell models, third-party foundation models, model datasets, or benchmarking corpora unless you have given explicit opt-in permission for a clearly described program. This commitment applies whether the content is unshared, shared with collaborators, or available through a non-public share link. If a separate enterprise agreement, data processing addendum, or beta agreement offers stricter controls, the stricter written agreement governs that workspace.

Bundled AI requests may be processed by model providers or infrastructure vendors acting for Inkwell. We use commercial service configurations and contractual controls intended to limit those providers to supplying the requested service and to prevent project content from being used to train their foundation models. Provider abuse monitoring, legal retention, and security practices may still apply under the applicable service terms.

If you connect your own model-provider account or API key ("Bring Your Own Key" or "BYOK"), Inkwell sends the prompt and selected project context to that provider at your direction. The provider processes that request under your account, settings, and agreement with it—not as an Inkwell-controlled subprocessor for that request. Review your provider's data-use and retention settings before enabling BYOK.

AI features help you draft and revise creative work; they are not used to make automated decisions that produce legal or similarly significant effects about you as an individual (for example, credit, employment, or insurance determinations).

We use necessary cookies and similar technologies for authentication, security, preferences, load balancing, fraud prevention, and core site functionality. These essential cookies are always on and are not affected by the optional-cookie choices below.

On the marketing site we also use optional cookies and similar technologies for analytics and advertising, including advertising measurement and personalized advertising (ad personalization / remarketing). Our controls are region-aware: where consent is legally required — the European Economic Area, the United Kingdom, and Switzerland — these optional analytics and advertising technologies run only after you opt in through the consent banner, and none are set before that choice. Elsewhere, they are enabled by default and you can opt out at any time. You can change your choice in either direction whenever you like using the "Cookie preferences" control in the site footer; your choice is remembered in your browser and applied before optional cookie-based measurement runs on later visits. In the product, workspace privacy settings also control optional product analytics.

Product and marketing analytics are designed to avoid document content and unnecessary URL detail. We use structural events such as route category, CTA placement, feature names, command identifiers, success or failure states, latency, and coarse usage counts, along with bounded campaign parameters, click identifiers, referring domains, and search terms for acquisition attribution. Editor text, screenplay content, Canvas document text, chat transcripts, sticky notes, feedback content, full marketing URLs, and arbitrary query values are not sent to analytics tools as event payloads.

Shared-view analytics use privacy-preserving boundaries: owners receive aggregate signals, not raw IP addresses or full user-agent strings. Where we need network identifiers for security, rate limiting, or coarse geography, we minimize exposure and avoid showing those raw identifiers to project owners.

Session replay or survey tools, if enabled, are treated as higher-sensitivity features: they require explicit product decisions and consent controls, and editor/chat surfaces must be masked or blocked to protect creative content. Browser "Do Not Track" signals are not standardized; we honor the consent and opt-out controls described in this policy and in the product, including Cookie preferences and applicable US state opt-out rights described below.

We share information only in limited circumstances:

• Service providers: hosting, storage, authentication, email, analytics, Bundled AI processing, payment, support, logging, and security vendors that process information for us under contractual confidentiality and purpose limits.
• Collaborators you choose: project members, invitees, and share-link viewers receive the access you configure.
• Legal and safety reasons: to comply with law, respond to valid legal process, prevent harm, investigate abuse, or protect rights, property, and security.
• Business transfers: as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to this policy or equivalent privacy protections.
• With your direction or consent: for integrations, exports, feedback programs, or other actions you request.

When you enable BYOK or another third-party account integration, the recipient may process information as an independent controller or business under its agreement with you rather than as our service provider.

We may create aggregated or de-identified information that cannot reasonably identify you. We may use that information to understand product trends, improve reliability, and report aggregate metrics, and we will not attempt to re-identify it except as permitted by law to test our de-identification.

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, encryption at rest where supported by the storage layer, access controls, least-privilege operational practices, audit logging, and separation of production data from development workflows.

We retain information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, preserve security, prevent fraud, and maintain backups. Deleting a project or account starts the applicable deletion workflow; residual copies may remain temporarily in backups, security logs, legal holds, or fraud-prevention records before aging out under our retention practices.

We apply the following retention periods, or the criteria described, to the main categories of information we hold:

• Account information and content for active accounts and paid accounts: retained for as long as your account exists.
• Account information and content for inactive free accounts: deleted after 18 months of inactivity, following a notice period of at least 60 days with warning emails (see "Inactive accounts" in our Terms of Service).
• Billing and transaction records: retained as required for financial, tax, and fraud-prevention obligations, including after account deletion.
• Security and audit logs: retained for a limited period for security and compliance; identifying links to deleted accounts are removed when the account is deleted.
• Backups and residual copies: the deletion workflow begins immediately and is designed to remove active copies promptly; residual copies in encrypted backups are scheduled to age out within 30 days after active copies are deleted, unless a legal hold or security obligation requires longer retention.
• Marketing consent and preference records: retained as needed to honor your choices and demonstrate compliance.

Deleting your account — whether you delete it yourself from account settings or we delete an inactive free account under the inactivity policy — uses the same permanent deletion process described under "Your choices and privacy rights" below. Before an inactive free account is deleted, every warning email includes the scheduled deletion date and a link to export your data first.

No online service can guarantee absolute security. If we identify a security incident that affects personal information, we will investigate, take appropriate containment and remediation steps, and notify affected users, workspace owners, regulators, or other parties without unreasonable delay when required by law or contract, and otherwise as we determine is appropriate given the risk.

We review legal requests for validity and scope before disclosing information. Unless legally prohibited or an emergency makes notice impractical, we will try to direct requests for organization workspace content to the workspace owner or give affected users notice so they can seek protection.

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of personal information, and to withdraw consent where processing is based on consent. You can exercise the two biggest rights yourself, from account settings: download an export of your account data (your profile, the projects you own with their documents and save-point history, and your chat conversations), and permanently delete your account and its content. The deletion workflow begins immediately, cannot be undone after completion, and remains subject to the limited retention described above. You can also export or delete individual projects and documents directly in the product, and you can contact us for any other request.

We will verify requests before acting on them. We aim to respond within the time required by applicable law — typically within 30 days under GDPR-style regimes and within 45 days under California and many other US state privacy laws, with extensions where those laws allow. If you are an end user in an organization workspace, we may need to route some requests through the workspace owner. We will not discriminate against you for exercising applicable privacy rights.

In the EEA, the United Kingdom, and Switzerland we send marketing emails only after you give prior consent. Elsewhere, marketing emails are sent by default until you opt out. You can opt out using the unsubscribe link in those messages, the email preferences in account settings, or by contacting us. Transactional and security messages related to your account are not marketing and may still be sent while your account remains open.

Certain US state laws, including the California Consumer Privacy Act as amended by the CPRA ("CCPA"), grant residents rights to know, access, correct, delete, and opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising, and to limit use of sensitive personal information in some cases.

Categories we may collect: identifiers (such as name, email, IP address, cookie IDs); commercial information (plan and transaction metadata); internet or electronic activity (product and marketing-site events); approximate geolocation derived from IP; and user-generated content you choose to store in the Services. We do not intentionally collect government ID numbers, precise geolocation, or biometric identifiers as product features.

Sensitive personal information: account login credentials are used only to provide the Services. We do not use or disclose sensitive personal information for purposes that require a separate "limit the use" right under CCPA beyond what is necessary to provide the Services you request.

Sale and sharing: We do not sell private project content. On the marketing site, optional advertising cookies and similar technologies may constitute "sale" or "sharing" under some US state laws when used for cross-context behavioral advertising. You can opt out through the "Cookie preferences" control in the site footer or by contacting privacy@inkwell.software. Browser opt-out preference signals such as the Global Privacy Control (GPC) are not applied automatically today; contact us and we will honor applicable sale/sharing opt-out rights. We do not knowingly sell or share personal information of consumers under 16.

Service providers: vendors that process personal information for us are engaged as service providers or processors under contracts that limit use to our instructions. This description does not include a provider you connect through BYOK or another account you control; that provider's relationship with you governs its processing.

Inkwell may process information in the United States and other countries where we or our providers operate. When required, we use appropriate safeguards for cross-border transfers, such as standard contractual clauses, data processing agreements, and vendor assessments.

Inkwell is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it. If local law requires a higher age for online consent, that higher age applies as described in our Terms of Service.

We maintain internal records of vendors that process personal information for hosting, storage, authentication, email, payment, analytics, AI processing, support, logging, and security. Enterprise customers may request a data processing addendum, current subprocessor information, and reasonable security documentation through their account team or by contacting us. Where an enterprise agreement requires advance notice of subprocessor changes, we will provide that notice as stated in the agreement; other customers may request current subprocessor information at any time.

We may update this Privacy Policy as the Services evolve or legal requirements change. The updated date identifies the current version. Where applicable law requires additional notice or consent before a materially different use of information already collected, we will provide that notice or seek that consent.

Questions or privacy requests? Contact us at privacy@inkwell.software, or by mail at Ink Inc. Creative Group d/b/a Inkwell, 54 State Street, Ste 804 #347, Albany, New York 12207 US.