Privacy Policy

This Privacy Policy explains how Inkwell collects, uses, discloses, and protects information when you visit our marketing site, create an account, use Plot or Canvas, run AI-assisted writing skills, collaborate on projects, or contact us for support (collectively, the "Services"). It applies to personal information about account owners, invited collaborators, public share viewers, support contacts, and marketing site visitors.

Inkwell is built for writers working with sensitive creative material. We treat your drafts, outlines, notes, comments, exports, prompts, and AI outputs as your private work. We use that content only to provide and secure the Services, honor your settings, comply with law, and support you when you ask us to.

For most individual users and marketing site visitors, Inkwell acts as the controller (or similar role) for account, billing, support, marketing, and product telemetry data. For organization workspaces, Inkwell may act as a processor or service provider for workspace content and member activity under the organization's written agreement, data processing addendum, or administrator instructions.

If you use Inkwell through an employer, school, studio, production company, or other organization, that organization may control your account, workspace content, retention settings, export rights, and access after your relationship with the organization changes. Direct privacy requests about organization-managed content may need to be handled through the workspace owner.

We collect the following categories of information:

• Account information: name, email address, authentication identifiers, workspace membership, plan, preferences, and settings.
• Content you create or upload: projects, documents, screenplay text, Canvas blocks, outlines, notes, comments, feedback, attachments, imports, exports, save points, draft lines, and related metadata.
• AI interaction data: prompts, selected context, skill parameters, chat messages, model outputs, usage counters, latency, provider error information, and audit metadata needed to run, bill, troubleshoot, and explain AI features.
• Collaboration and sharing data: project roles, invitations, viewer access events, comments, approval activity, share-link configuration, and privacy-preserving analytics for shared views.
• Usage, device, and log data: pages viewed, product events, feature usage, IP address, approximate location derived from IP, browser and device details, referring pages, diagnostics, crash logs, and security events.
• Billing and transaction data: plan, subscription status, invoices, payment method metadata, tax information, and fraud signals. Payment card numbers are handled by our payment processor, not stored by Inkwell.
• Support and communications: messages you send us, survey responses, research feedback, and any files or screenshots you choose to include.

We use information to:

• provide, maintain, personalize, and improve the Services;
• save, sync, export, import, render, and version your projects;
• run AI skills, assemble requested context, return outputs, and maintain audit trails;
• authenticate users, enforce permissions, prevent abuse, and protect accounts;
• process subscriptions, taxes, invoices, usage limits, and overage controls;
• send service notices, security alerts, policy updates, and support responses;
• measure product reliability and adoption using privacy-conscious analytics settings;
• comply with legal obligations and enforce our Terms of Service.

We do not sell your screenplay, document, prompt, or workspace content. We also do not use private project content for interest-based advertising.

Where data protection law requires a legal basis, we process personal information under one or more of the following bases: to perform our contract with you, to pursue legitimate interests such as security and service improvement, to comply with legal obligations, to protect vital interests where necessary, or with your consent for optional analytics, marketing communications, beta research, or other opt-in programs.

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing that already occurred or processing that continues under another valid legal basis, such as account security, billing records, or compliance obligations.

Inkwell's AI features process your content only to perform the action you request, such as suggesting a rewrite, answering a project-scoped question, checking continuity, or applying a skill. You own your inputs and outputs, subject to any rights you already have in the underlying material.

We do not use your private project content, prompts, chat messages, or outputs to develop, train, or improve Inkwell models, third-party foundation models, model datasets, or benchmarking corpora unless you have given explicit opt-in permission for a clearly described program. If a separate enterprise agreement, data processing addendum, or beta agreement offers stricter controls, the stricter written agreement governs that workspace.

Some AI requests may be processed by third-party model providers or infrastructure vendors acting as subprocessors. We contractually restrict those providers to processing the data for Inkwell's requested service, prohibit them from using your private project content to train their models, and require security and confidentiality protections appropriate to the sensitivity of creative work.

We use necessary cookies and similar technologies for authentication, security, preferences, load balancing, fraud prevention, and core site functionality. For optional analytics, our controls are region-aware: where consent is legally required — the European Economic Area, the United Kingdom, and Switzerland — optional analytics run only after you opt in, and no optional analytics cookies are set before that choice. Elsewhere, optional analytics are enabled by default and you can opt out at any time. On the marketing site these choices are offered through the consent controls shown there; in the product, workspace privacy settings control optional product analytics.

Product analytics are designed to avoid document content. We use structural events such as feature names, command identifiers, success or failure states, latency, and coarse usage counts. Editor text, screenplay content, Canvas document text, chat transcripts, sticky notes, and feedback content are not sent to analytics tools as event payloads.

Shared-view analytics use privacy-preserving boundaries: owners receive aggregate signals, not raw IP addresses or full user-agent strings. Where we need network identifiers for security, rate limiting, or coarse geography, we minimize exposure and avoid showing those raw identifiers to project owners.

Session replay or survey tools, if enabled, are treated as higher-sensitivity features: they require explicit product decisions and consent controls, and editor/chat surfaces must be masked or blocked to protect creative content. Browser "Do Not Track" signals are not standardized; we honor the consent and opt-out controls described in this policy and in the product.

We share information only in limited circumstances:

• Service providers: hosting, storage, authentication, email, analytics, AI processing, payment, support, logging, and security vendors that process information for us.
• Collaborators you choose: project members, invitees, and share-link viewers receive the access you configure.
• Legal and safety reasons: to comply with law, respond to valid legal process, prevent harm, investigate abuse, or protect rights, property, and security.
• Business transfers: as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to this policy or equivalent privacy protections.
• With your direction or consent: for integrations, exports, feedback programs, or other actions you request.

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, encryption at rest where supported by the storage layer, access controls, least-privilege operational practices, audit logging, and separation of production data from development workflows.

We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, preserve security, and maintain backups. Deleting a project or account removes active copies according to the product workflow; residual copies may remain in backups, logs, or fraud-prevention records for a limited period before aging out under our retention practices.

We apply the following retention periods, or the criteria described, to the main categories of information we hold:

• Account information and content for active accounts and paid accounts: retained for as long as your account exists.
• Account information and content for inactive free accounts: deleted after 18 months of inactivity, following a notice period of at least 60 days with warning emails (see "Inactive accounts" in our Terms of Service).
• Billing and transaction records: retained as required for financial, tax, and fraud-prevention obligations, including after account deletion.
• Security and audit logs: retained for a limited period for security and compliance; identifying links to deleted accounts are removed when the account is deleted.
• Backups and residual copies: deleted data is removed from live systems immediately; residual copies in encrypted backups age out within 30 days after active copies are deleted.

Deleting your account — whether you delete it yourself from account settings or we delete an inactive free account under the inactivity policy — uses the same permanent deletion process described under "Your choices and privacy rights" below. Before an inactive free account is deleted, every warning email includes the scheduled deletion date and a link to export your data first.

No online service can guarantee absolute security. If we identify a security incident that affects personal information, we will investigate, take appropriate containment and remediation steps, and notify affected users, workspace owners, regulators, or other parties when required by law or contract.

We review legal requests for validity and scope before disclosing information. Unless legally prohibited or an emergency makes notice impractical, we will try to direct requests for organization workspace content to the workspace owner or give affected users notice so they can seek protection.

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of personal information, and to withdraw consent where processing is based on consent. You can exercise the two biggest rights yourself, from account settings: download an export of your account data (your profile, the projects you own with their documents and save-point history, and your chat conversations), and permanently delete your account and everything in it. Account deletion takes effect immediately and cannot be undone. You can also export or delete individual projects and documents directly in the product, and you can contact us for any other request.

We will verify requests before acting on them. If you are an end user in an organization workspace, we may need to route some requests through the workspace owner. We will not discriminate against you for exercising applicable privacy rights.

We do not sell private project content. If a US state privacy law defines certain analytics or advertising disclosures as a "sale" or "sharing," you may contact us to opt out of that activity. You may also use available product controls to opt out of optional product analytics.

Inkwell may process information in the United States and other countries where we or our providers operate. When required, we use appropriate safeguards for cross-border transfers, such as standard contractual clauses, data processing agreements, and vendor assessments.

Inkwell is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

We maintain internal records of vendors that process personal information for hosting, storage, authentication, email, payment, analytics, AI processing, support, logging, and security. Enterprise customers may request a data processing addendum, subprocessor information, and reasonable security documentation through their account team or by contacting us.

We may update this Privacy Policy as the Services evolve or legal requirements change. If changes are material, we will provide reasonable notice, such as by posting the updated policy, updating the date above, or sending an account notice.

Questions or privacy requests? Contact us at privacy@inkwell.software.