inkpad.ai

Last updated

Privacy Policy

Introduction

Welcome to Inkpad.ai, an AI-powered document editor service operated by Reseda Labs LLC ("we," "us," or "our"). We take your privacy seriously and are committed to protecting your personal information while providing you with powerful AI-assisted writing tools.

This Privacy Policy explains how we collect, use, share, and protect your information when you use our services at https://inkpad.ai (the "Service"). By using Inkpad.ai, you agree to the collection and use of information in accordance with this Policy.

Key Points:

  • We use AI technology from OpenAI and Anthropic to power our document editing features
  • Your payment information is processed securely by Paddle, our payment processor
  • You have comprehensive rights over your personal data, including access, correction, and deletion
  • We do not sell your personal information

1. Information We Collect

We collect information you provide directly to us, information we collect automatically when you use our Service, and information from third-party sources.

1.1 Contact Data

When you create an account or communicate with us, we collect:

  • First and last name
  • Email address
  • Company name and information
  • Phone number
  • Billing and mailing addresses

1.2 Profile Data

For your account, we collect:

  • Email address (used as username)
  • Password (encrypted)
  • Account preferences and settings

1.3 User-Generated Content Data

When you use Inkpad.ai, we process:

  • Documents, messages, and prompts you create
  • Works of authorship and other content you generate or transmit
  • Associated metadata (creation time, document structure, collaboration data)

1.4 Communications Data

We maintain records of:

  • Your inquiries and support requests
  • Our responses and communications with you
  • Feedback and suggestions you provide

1.5 Marketing Data

With your consent, we collect:

  • Your preferences for receiving marketing communications
  • Your engagement with our marketing materials
  • Communication channel preferences

1.6 Transactional Data

For billing and service provision, we collect:

  • Order information and order numbers
  • Subscription details and transactional history
  • Service usage records

1.7 Payment Data

Payment information necessary to complete transactions is collected and processed by our payment processor, Paddle. We do not store credit card numbers or banking details on our servers.

1.8 Automatically Collected Information

When you use our Service, we automatically collect:

  • IP address and device identifiers
  • Browser type and version
  • Operating system information
  • Usage data and interaction patterns
  • Performance metrics and error logs

1.9 Cookie Information

We use cookies and similar technologies to collect:

  • Session management data
  • User preferences
  • Analytics information
  • Marketing attribution data (with consent)

For detailed information, please see our Cookie Policy section below.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Provision

  • Provide, maintain, and improve Inkpad.ai
  • Process your documents with AI assistance
  • Save and synchronize your work across devices
  • Enable collaboration features

2.2 AI Processing

Important: When you use Inkpad.ai's AI features, your prompts and document content are shared with our AI service providers (OpenAI and Anthropic) solely to generate responses and suggestions. We have contractual agreements ensuring:

  • Your content is not used to train their AI models
  • No access to your content by their personnel except as necessary for service provision

2.3 Account Management

  • Create and manage your account
  • Authenticate your identity
  • Process payments through Paddle
  • Provide customer support

2.4 Communication

  • Send service-related notifications
  • Respond to your inquiries
  • Provide technical support
  • Send marketing communications (with your consent)

2.5 Legal and Security

  • Comply with legal obligations
  • Protect against fraud and abuse
  • Enforce our terms of service
  • Ensure platform security and integrity

2.6 Analytics and Improvement

  • Analyze usage patterns to improve our Service
  • Develop new features and functionality
  • Conduct research and analytics
  • Measure marketing effectiveness

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

3.1 Contract Performance

We process your contact, profile, and user-generated content data as necessary to provide the Service you've requested.

3.2 Legitimate Interests

We process certain data based on our legitimate interests, including:

  • Improving and developing our Service
  • Ensuring platform security
  • Preventing fraud and abuse
  • Direct marketing (where permitted without consent)

3.3 Consent

We obtain your consent for:

  • Marketing communications
  • Non-essential cookies and analytics
  • Sharing your content with AI providers for processing

3.4 Legal Obligations

We may process your data to comply with applicable laws and regulations.

4. How We Share Your Information

We share your information only in the following circumstances:

4.1 AI Service Providers

Your prompts and document content are shared with:

  • OpenAI - For AI-powered content generation and suggestions
  • Anthropic - For advanced AI editing capabilities

These providers process your data according to their privacy policies and our data processing agreements, which prohibit using your content for model training.

4.2 Payment Processing

All payment transactions are handled by Paddle.com, our payment processor. Paddle collects and processes payment information according to their privacy policy at https://www.paddle.com/legal/checkout-buyer-terms.

4.3 Service Providers

We share information with third-party service providers who assist us with:

  • Cloud hosting and storage (AWS)
  • Analytics (Google Analytics - anonymized)
  • Customer support tools
  • Email delivery services

All service providers are contractually required to protect your information and use it only for the services they provide to us.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

  • Court orders or subpoenas
  • Government investigations
  • National security or law enforcement requirements

4.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4.6 Consent

We may share your information with your explicit consent or at your direction.

5. Your Privacy Rights

Depending on your location, you have specific rights regarding your personal information:

5.1 Rights for All Users

  • Access: Request a copy of your personal information
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal information
  • Portability: Receive your data in a machine-readable format
  • Restriction: Limit how we process your information

5.2 GDPR Rights (EEA, UK, and Switzerland)

In addition to the above, you have the right to:

  • Object to processing based on legitimate interests
  • Withdraw consent at any time
  • Object to direct marketing (absolute right)
  • Not be subject to automated decision-making with significant effects
  • Lodge a complaint with your supervisory authority

5.3 CCPA/CPRA Rights (California Residents)

California residents have additional rights:

  • Know what personal information we collect, use, and share
  • Delete personal information (with exceptions)
  • Opt-out of the sale or sharing of personal information (we do not sell your data)
  • Correct inaccurate personal information
  • Limit use of sensitive personal information
  • Equal treatment - no discrimination for exercising rights

5.4 How to Exercise Your Rights

To exercise any of these rights, please contact us by email at privacy@inkpad.ai.

We will respond to your request within 30 days (45 days for CCPA requests). We may need to verify your identity before processing your request.

6. Data Security

We implement technical and organizational measures to protect your personal information, including:

6.1 Technical Measures

  • Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
  • Access controls: Role-based permissions and multi-factor authentication
  • Security monitoring: 24/7 monitoring for suspicious activities
  • Regular testing: Vulnerability assessments and penetration testing

6.2 Organizational Measures

  • Employee training on data protection
  • Confidentiality agreements with all personnel
  • Limited access on a need-to-know basis
  • Regular security audits and assessments

While we strive to protect your information, no security system is perfect. We cannot guarantee absolute security but commit to notifying you promptly of any data breach affecting your personal information.

7. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy:

7.1 Retention Periods

  • Account information: Duration of account plus 30 days
  • User-generated content: Until you delete it or close your account
  • Transaction records: 7 years for tax and accounting purposes
  • Marketing data: Until consent withdrawn or 3 years of inactivity
  • Analytics data: 26 months
  • Security logs: 12 months

7.2 Deletion

When retention periods expire, we securely delete or anonymize your information. You can request earlier deletion through your privacy rights.

8. International Data Transfers

As a U.S.-based company, we transfer personal data from the EEA, UK, and Switzerland to the United States. We ensure appropriate safeguards through:

8.1 Data Transfer Mechanisms

  • EU-U.S. Data Privacy Framework: Certified providers when applicable
  • Standard Contractual Clauses: For transfers to non-adequate countries
  • Your consent: For certain transfers where required

8.2 Third-Country Transfers

Our AI providers (OpenAI and Anthropic) process data in the United States. We ensure they maintain appropriate safeguards for international transfers.

9. Children's Privacy

Inkpad.ai is not intended for children under 16. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 16, we will delete it promptly.

10. Cookie Policy

We use cookies and similar technologies to provide and improve our Service.

10.1 Cookie Categories

  • Essential Cookies: Required for basic functionality (no consent needed)
  • Functional Cookies: Remember your preferences (consent required)
  • Analytics Cookies: Help us understand usage patterns (consent required)
  • Marketing Cookies: Track effectiveness of our marketing (consent required)

10.2 Managing Cookies

You can manage cookie preferences through:

  • Our cookie consent banner
  • Your browser settings
  • Google Analytics Opt-out Browser Add-on

For California residents: We respond to Global Privacy Control (GPC) signals.

11. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service.

12. Contact Us

For questions about this Privacy Policy or our data practices, please contact:

Reseda Labs LLC
Email: privacy@inkpad.ai
Website: https://inkpad.ai