# Privacy Policy > How Inkwell collects, uses, stores, and protects your personal information — what we keep, who processes it on our behalf, and the rights you can exercise. Last updated: September 12, 2026 ## About this policy Ink Inc. Creative Group, doing business as Inkwell ("Inkwell," "we," or "us"), provides the Inkwell website, Plot, Canvas, and related services (the "Services"). This policy explains how we collect, use, and share personal information and the choices available to you. For individual accounts and website visitors, Inkwell is the controller of personal information. For organization workspaces, we may process workspace information on the organization's behalf under its agreement and instructions. Your organization may manage your access, content, and retention settings; requests concerning organization-managed information may need to go through its administrator. ## Information we collect We collect information you provide, information generated when you use the Services, and information from collaborators, administrators, and service providers: - **Account information:** name, email address, authentication details, workspace membership, plan, and preferences. - **Content and AI interactions:** documents, attachments, comments, prompts, conversation history, selected project context, AI outputs, and related metadata. - **Usage and technical information:** feature activity, pages visited, device and browser information, IP address, approximate location, diagnostics, and security logs. - **Billing information:** subscription, transaction, invoice, and payment-method details. Our payment processor handles payment card numbers. - **Communications:** support requests, feedback, surveys, and other information you send us. - **Marketing information:** referral, campaign, advertising, and cookie identifiers and your associated preferences. ## How we use information We use information to provide and improve the Services, including to: - create accounts, store and sync content, enable collaboration, and deliver AI features; - process payments, manage subscriptions, and account for usage; - diagnose problems, measure performance, and develop and improve features; - secure accounts, prevent fraud and abuse, and enforce our agreements; - respond to requests and send service, security, and policy notices; - deliver marketing communications and measure advertising where permitted; and - comply with legal obligations and protect legal rights. We may also use aggregated or de-identified information for research, product development, and reporting. ## AI features and your content AI features process your requests and relevant content to generate responses or make changes. We use AI interaction data, including requests and usage details, to operate, troubleshoot, and improve these features. AI request analytics is controlled separately from product analytics in Settings. Your content remains yours. We do not sell private project content or use it for interest-based advertising. We do not use your project content, prompts, conversations, or outputs to train foundation models or build training datasets unless you opt into a separately described program. Stricter terms in an enterprise or other written agreement continue to apply. Our model and infrastructure providers process requests to supply AI features under their applicable service terms and our agreements. If you connect your own provider account or API key, that provider processes requests under your account and its terms, including its data-use and retention settings. ## Cookies and analytics choices We use cookies and similar technologies to keep you signed in, remember preferences, secure the Services, and measure usage. The marketing site also uses analytics and advertising technologies for measurement and personalized advertising. In the European Economic Area, United Kingdom, and Switzerland, optional marketing analytics and advertising technologies require your consent. Elsewhere, they are enabled by default. Use **Cookie preferences** in the website footer to change your choice. Product analytics follows the corresponding regional consent controls in the app. In Settings, **Product analytics** controls product usage measurement and **AI request analytics** independently controls AI request measurement. AI request analytics is enabled by default and can be turned off. These choices do not disable processing needed to provide, bill for, and secure the Services. Shared-view analytics provide project owners with aggregate engagement information. Session replay, when enabled, uses separate controls and masking for editor and chat content. We honor the choices described in this policy; browser "Do Not Track" signals are not supported. ## How we share information We share information with service providers that help us deliver the Services, including hosting, storage, authentication, AI, analytics, payments, communications, support, and security providers. They process information under applicable agreements. We also share information with collaborators and other recipients according to your sharing settings; with third-party integrations you connect; when required by law or to protect rights, safety, and security; and in connection with a merger, financing, acquisition, or sale of the business. We may share information for other purposes at your direction or with your consent. An integration connected through your own third-party account may process information under its own privacy policy. Organization customers can request our data processing terms and current subprocessor information by contacting us. ## Retention and security We retain information for as long as needed to provide the Services and for legitimate business and legal purposes, including security, tax compliance, dispute resolution, and enforcing agreements. - Account information and content are retained while your account exists. Inactive free accounts may be deleted after **18 months of inactivity**, with at least **60 days' notice** and an opportunity to export, as described in our Terms of Service. - Account deletion removes active content through our deletion process. Residual backup copies are scheduled to expire within **30 days** after active copies are deleted, unless legal or security obligations require longer retention. - Billing, security, and preference records may be retained as needed to meet their respective purposes and legal obligations. We use technical and organizational safeguards, including encryption and access controls, to protect information. No service is completely secure. We investigate security incidents and provide notice when required by law or contract. We review legal requests and, where permitted and appropriate, notify affected users or direct requests to the workspace owner. ## Your choices and rights You can update your information, export your account data, and delete your account in Settings. You can also export or delete individual projects. Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing, receive a portable copy of your information, and withdraw consent. Contact us to exercise these rights. We may need to verify your identity or refer an organization-workspace request to its administrator. Where data protection law applies, our legal bases include performing our contract, legitimate interests such as security and service improvement, legal obligations, and consent where required. Withdrawing consent does not affect earlier processing or processing based on another lawful basis. You may complain to your local data protection authority. We respond within the periods required by applicable law and do not discriminate against you for exercising your rights. You may unsubscribe from marketing emails using the link in each email, account preferences, or by contacting us. Marketing emails require prior consent in the EEA, UK, and Switzerland; elsewhere they are sent until you opt out. Service and security notices may continue. ## US state privacy rights Applicable US state laws may provide rights to access, correct, delete, and obtain information about personal data, and to opt out of its sale or sharing for targeted advertising. The categories we collect and our purposes and recipients are described above. They include identifiers, commercial information, online activity, approximate location, and content you provide. We do not intentionally collect government identifiers, precise location, or biometric identifiers as product features. We use account credentials to provide the Services and do not use sensitive personal information for purposes requiring a separate right to limit its use. We do not sell private project content. Marketing advertising technologies may constitute a "sale" or "sharing" under state law. Opt out through **Cookie preferences** or contact us. Global Privacy Control signals are not applied automatically today; contact us to exercise applicable opt-out rights. We do not knowingly sell or share personal information of consumers under 16. ## International transfers We and our providers may process information in the United States and other countries. Where required, we use safeguards such as standard contractual clauses and data processing agreements for international transfers. ## Children's privacy The Services are not directed to children under 13, or a higher minimum age where local law requires it. We do not knowingly collect their personal information. Contact us if you believe a child has provided information so we can take appropriate action. ## Policy updates We may update this policy as the Services or legal requirements change. The updated date identifies the current version. We provide additional notice or seek consent for changes where required by applicable law. ## Contact For privacy questions or requests, email or write to Ink Inc. Creative Group d/b/a Inkwell, 54 State Street, Ste 804 #347, Albany, New York 12207 US. --- Canonical page: