Privacy Policy

This Privacy Policy explains how Inkwell collects, uses, discloses, and protects information when you visit our marketing site, create an account, use Plot or Canvas, run AI-assisted writing skills, collaborate on projects, or contact us for support (collectively, the "Services"). It applies to personal information about account owners, invited collaborators, public share viewers, support contacts, and marketing site visitors.

Inkwell is built for writers working with sensitive creative material. We treat your drafts, outlines, notes, comments, exports, prompts, and AI outputs as your private work. We use that content only to provide and secure the Services, honor your settings, comply with law, and support you when you ask us to.

For most individual users and marketing site visitors, Inkwell acts as the controller (or similar role) for account, billing, support, marketing, and product telemetry data. For organization workspaces, Inkwell may act as a processor or service provider for workspace content and member activity under the organization's written agreement, data processing addendum, or administrator instructions.

If you use Inkwell through an employer, school, studio, production company, or other organization, that organization may control your account, workspace content, retention settings, export rights, and access after your relationship with the organization changes. Direct privacy requests about organization-managed content may need to be handled through the workspace owner.

We collect the following categories of information:

• Account information: name, email address, authentication identifiers, workspace membership, plan, preferences, and settings.
• Content you create or upload: projects, documents, screenplay text, Canvas blocks, outlines, notes, comments, feedback, attachments, imports, exports, save points, draft lines, and related metadata.
• AI interaction data: prompts, selected context, skill parameters, chat messages, model outputs, usage counters, latency, provider error information, and audit metadata needed to run, bill, troubleshoot, and explain AI features.
• Collaboration and sharing data: project roles, invitations, viewer access events, comments, approval activity, share-link configuration, and privacy-preserving analytics for shared views.
• Usage, device, and log data: pages viewed, product events, feature usage, IP address, approximate location derived from IP, browser and device details, referring pages, diagnostics, crash logs, and security events.
• Billing and transaction data: plan, subscription status, invoices, payment method metadata, tax information, and fraud signals. Payment card numbers are handled by our payment processor, not stored by Inkwell.
• Support and communications: messages you send us, survey responses, research feedback, and any files or screenshots you choose to include.
• Marketing and advertising data (marketing site): cookie identifiers, ad-click or campaign parameters, and consent or opt-out choices related to analytics and advertising on inkwell.software.

We collect information directly from you, automatically from your browser or device when you use the Services, from collaborators or workspace administrators who invite or manage you, and from service providers that help us authenticate, process payments, deliver email, or measure marketing performance.

We use information to:

• provide, maintain, personalize, and operate the Services;
• save, sync, export, import, render, and version your projects;
• run AI skills, assemble requested context, return outputs, and maintain audit trails;
• authenticate users, enforce permissions, prevent abuse, and protect accounts;
• process subscriptions, taxes, invoices, usage limits, and overage controls;
• send service notices, security alerts, policy updates, and support responses;
• measure product reliability and adoption using privacy-conscious analytics settings;
• improve product quality using telemetry, diagnostics, and aggregate usage patterns that are designed not to include private project text;
• send marketing communications where permitted, with an unsubscribe option in each message;
• comply with legal obligations and enforce our Terms of Service.

We do not sell your screenplay, document, prompt, or workspace content. We also do not use private project content for interest-based advertising, or to train models, except as described under "AI, training, and creative ownership."

Where data protection law requires a legal basis, we process personal information under one or more of the following bases: to perform our contract with you, to pursue legitimate interests such as security and service improvement, to comply with legal obligations, to protect vital interests where necessary, or with your consent for optional analytics, marketing communications, beta research, or other opt-in programs.

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing that already occurred or processing that continues under another valid legal basis, such as account security, billing records, or compliance obligations.

Inkwell's AI features process your content only to perform the action you request, such as suggesting a rewrite, answering a project-scoped question, checking continuity, or applying a skill. You own your inputs and outputs, subject to any rights you already have in the underlying material.

We do not use your private project content, prompts, chat messages, or outputs to develop, train, or improve Inkwell models, third-party foundation models, model datasets, or benchmarking corpora unless you have given explicit opt-in permission for a clearly described program. If a separate enterprise agreement, data processing addendum, or beta agreement offers stricter controls, the stricter written agreement governs that workspace.

Some AI requests may be processed by third-party model providers or infrastructure vendors acting as subprocessors. We contractually restrict those providers to processing the data for Inkwell's requested service, prohibit them from using your private project content to train their models, and require security and confidentiality protections appropriate to the sensitivity of creative work.

AI features help you draft and revise creative work; they are not used to make automated decisions that produce legal or similarly significant effects about you as an individual (for example, credit, employment, or insurance determinations).

We use necessary cookies and similar technologies for authentication, security, preferences, load balancing, fraud prevention, and core site functionality. These essential cookies are always on and are not affected by the optional-cookie choices below.

On the marketing site we also use optional cookies for analytics and for advertising — both advertising measurement and personalized advertising (ad personalization / remarketing) — via Google, using Consent Mode. Our controls are region-aware: where consent is legally required — the European Economic Area, the United Kingdom, and Switzerland — these optional analytics and advertising cookies run only after you opt in through the consent banner, and none are set before that choice. Elsewhere, they are enabled by default and you can opt out at any time. You can change your choice in either direction whenever you like using the "Cookie preferences" control in the site footer; your choice is remembered in your browser and applied before any measurement runs on later visits. In the product, workspace privacy settings control optional product analytics.

Product analytics are designed to avoid document content. We use structural events such as feature names, command identifiers, success or failure states, latency, and coarse usage counts. Editor text, screenplay content, Canvas document text, chat transcripts, sticky notes, and feedback content are not sent to analytics tools as event payloads.

Shared-view analytics use privacy-preserving boundaries: owners receive aggregate signals, not raw IP addresses or full user-agent strings. Where we need network identifiers for security, rate limiting, or coarse geography, we minimize exposure and avoid showing those raw identifiers to project owners.

Session replay or survey tools, if enabled, are treated as higher-sensitivity features: they require explicit product decisions and consent controls, and editor/chat surfaces must be masked or blocked to protect creative content. Browser "Do Not Track" signals are not standardized; we honor the consent and opt-out controls described in this policy and in the product, including Cookie preferences and applicable US state opt-out rights described below.

We share information only in limited circumstances:

• Service providers: hosting, storage, authentication, email, analytics, AI processing, payment, support, logging, and security vendors that process information for us under contractual confidentiality and purpose limits.
• Collaborators you choose: project members, invitees, and share-link viewers receive the access you configure.
• Legal and safety reasons: to comply with law, respond to valid legal process, prevent harm, investigate abuse, or protect rights, property, and security.
• Business transfers: as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to this policy or equivalent privacy protections.
• With your direction or consent: for integrations, exports, feedback programs, or other actions you request.

We may create aggregated or de-identified information that cannot reasonably identify you. We may use that information to understand product trends, improve reliability, and report aggregate metrics, and we will not attempt to re-identify it except as permitted by law to test our de-identification.

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, encryption at rest where supported by the storage layer, access controls, least-privilege operational practices, audit logging, and separation of production data from development workflows.

We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, preserve security, and maintain backups. Deleting a project or account removes active copies according to the product workflow; residual copies may remain in backups, logs, or fraud-prevention records for a limited period before aging out under our retention practices.

We apply the following retention periods, or the criteria described, to the main categories of information we hold:

• Account information and content for active accounts and paid accounts: retained for as long as your account exists.
• Account information and content for inactive free accounts: deleted after 18 months of inactivity, following a notice period of at least 60 days with warning emails (see "Inactive accounts" in our Terms of Service).
• Billing and transaction records: retained as required for financial, tax, and fraud-prevention obligations, including after account deletion.
• Security and audit logs: retained for a limited period for security and compliance; identifying links to deleted accounts are removed when the account is deleted.
• Backups and residual copies: deleted data is removed from live systems immediately; residual copies in encrypted backups age out within 30 days after active copies are deleted.
• Marketing consent and preference records: retained as needed to honor your choices and demonstrate compliance.

Deleting your account — whether you delete it yourself from account settings or we delete an inactive free account under the inactivity policy — uses the same permanent deletion process described under "Your choices and privacy rights" below. Before an inactive free account is deleted, every warning email includes the scheduled deletion date and a link to export your data first.

No online service can guarantee absolute security. If we identify a security incident that affects personal information, we will investigate, take appropriate containment and remediation steps, and notify affected users, workspace owners, regulators, or other parties without unreasonable delay when required by law or contract, and otherwise as we determine is appropriate given the risk.

We review legal requests for validity and scope before disclosing information. Unless legally prohibited or an emergency makes notice impractical, we will try to direct requests for organization workspace content to the workspace owner or give affected users notice so they can seek protection.

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of personal information, and to withdraw consent where processing is based on consent. You can exercise the two biggest rights yourself, from account settings: download an export of your account data (your profile, the projects you own with their documents and save-point history, and your chat conversations), and permanently delete your account and everything in it. Account deletion takes effect immediately and cannot be undone. You can also export or delete individual projects and documents directly in the product, and you can contact us for any other request.

We will verify requests before acting on them. We aim to respond within the time required by applicable law — typically within 30 days under GDPR-style regimes and within 45 days under California and many other US state privacy laws, with extensions where those laws allow. If you are an end user in an organization workspace, we may need to route some requests through the workspace owner. We will not discriminate against you for exercising applicable privacy rights.

You may opt out of marketing emails using the unsubscribe link in those messages or by contacting us. Transactional and security messages related to your account are not marketing and may still be sent while your account remains open.

Certain US state laws, including the California Consumer Privacy Act as amended by the CPRA ("CCPA"), grant residents rights to know, access, correct, delete, and opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising, and to limit use of sensitive personal information in some cases.

Categories we may collect: identifiers (such as name, email, IP address, cookie IDs); commercial information (plan and transaction metadata); internet or electronic activity (product and marketing-site events); approximate geolocation derived from IP; and user-generated content you choose to store in the Services. We do not intentionally collect government ID numbers, precise geolocation, or biometric identifiers as product features.

Sensitive personal information: account login credentials are used only to provide the Services. We do not use or disclose sensitive personal information for purposes that require a separate "limit the use" right under CCPA beyond what is necessary to provide the Services you request.

Sale and sharing: We do not sell private project content. On the marketing site, optional advertising cookies and similar technologies may constitute "sale" or "sharing" under some US state laws when used for cross-context behavioral advertising. You can opt out through the "Cookie preferences" control in the site footer or by contacting privacy@inkwell.software. Browser opt-out preference signals such as the Global Privacy Control (GPC) are not applied automatically today; contact us and we will honor applicable sale/sharing opt-out rights. We do not knowingly sell or share personal information of consumers under 16.

Service providers: vendors that process personal information for us are engaged as service providers or processors under contracts that limit use to our instructions.

Inkwell may process information in the United States and other countries where we or our providers operate. When required, we use appropriate safeguards for cross-border transfers, such as standard contractual clauses, data processing agreements, and vendor assessments.

Inkwell is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it. If local law requires a higher age for online consent, that higher age applies as described in our Terms of Service.

We maintain internal records of vendors that process personal information for hosting, storage, authentication, email, payment, analytics, AI processing, support, logging, and security. Enterprise customers may request a data processing addendum, current subprocessor information, and reasonable security documentation through their account team or by contacting us. Where an enterprise agreement requires advance notice of subprocessor changes, we will provide that notice as stated in the agreement; other customers may request current subprocessor information at any time.

We may update this Privacy Policy as the Services evolve or legal requirements change. If changes are material, we will provide reasonable notice, such as by posting the updated policy, updating the date above, or sending an account notice.

Questions or privacy requests? Contact us at privacy@inkwell.software.