Privacy Policy

This policy explains what Inkwrite collects, why, and the choices you have. We built Inkwrite to keep your writing close to you — but using the AI features means parts of your manuscript are sent to AI providers to generate text. Section 5 explains exactly how.

1Who is responsible for your data

Inkwrite (“Inkwrite,” “we”) is the controller of the personal information described here. If you have questions, contact privacy@inkwrite.app.

2Information we collect

• Account information. When you sign up, our authentication provider, Clerk, collects your email address and, depending on how you sign in, your name and a profile from a connected provider (such as Google). We receive a user identifier and your email.
• Your manuscripts and writing. The text you write, your World (characters, places, notes), and related project data. By default these are stored in your browser; when you are signed in they are also synced to our cloud database so you can reach them from other devices and recover them (see Section 4).
• AI prompts and content. When you use an AI feature, the portions of your manuscript and the instructions involved in that request (see Section 5).
• Subscription and payment information. If you subscribe, payments are processed by Stripe through Clerk Billing. We receive your subscription status and limited billing details (such as plan and renewal date) — we do not receive or store your full card number.
• Usage records. The number of AI credits you have used in the current period, which we store to enforce plan limits.
• Technical and log data. Standard information your browser sends and that our hosting provider (Vercel) logs — such as IP address, device and browser type, and timestamps — used for security, debugging, and reliability.

3How we use your information

• to provide and maintain the Service, including saving and syncing your work;
• to generate AI assistance that you request;
• to operate accounts, subscriptions, and credit limits;
• to secure the Service, prevent abuse, and debug problems;
• to communicate with you about your account or important changes; and
• to comply with our legal obligations.

Where the law requires a legal basis (for example, under the GDPR), we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, your consent where applicable, and compliance with legal obligations.

4Where your manuscripts live

Inkwriteis local-first: as you write, your work is saved immediately in your browser’s storage on your device. When you are signed in, your projects are also synced to our cloud database (Neon) and scoped to your account, so you can access and restore them across devices. Cloud sync is included on every plan at no charge. You can export your manuscripts at any time, and deleting a project removes it from your devices and from our database.

5AI processing and your content

When you use an AI feature — drafting, rewriting, brainstorming, consistency checks, import analysis — the relevant portions of your manuscript and your instructions are transmitted through our servers to a third-party AI provider, which generates text in response.

• Our primary AI provider is DeepSeek (an AI inference provider), which hosts the DeepSeek model family. DeepSeek is operated from China (the People’s Republic of China), so when you use the AI features the relevant portions of your request are transferred to and processed there. Where the Claude option is enabled, Anthropic (United States) is used instead.
• We do not use your content to train our own models, and we do not sell it. Each provider processes your requests under its own terms and privacy policy — including how long it retains a request and whether it uses submitted content to improve its services. Please review the provider you opt into before using the AI features.
• The trust posture you can rely on from us: AI requests are sent only to generate the text you asked for, we do not keep your prompts beyond what is needed to run the request, and the AI features are entirely optional. When you opt into the Claude lane with your own key, Anthropic’s policies apply to those requests.

6Service providers we share data with

We share personal information only with the service providers (“subprocessors”) that help us run Inkwrite, under contracts that require them to protect it. The current list:

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the Service. If we are ever involved in a merger or acquisition, we will require the successor to honour this policy. We do not sell your personal information.

7International data transfers

We and our providers may process your information in countries other than your own, including the United States and China. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers. By using the AI features you understand that your submitted content is transferred to and processed by the relevant AI provider.

8How long we keep data

We keep your account and synced manuscripts for as long as your account is active. When you delete a project or your account, we delete the associated data from our active systems; residual copies in backups are removed in the ordinary course (typically within 30 days). We keep limited records (such as billing and usage logs) for as long as needed to meet legal, accounting, and security obligations.

9Security

We use reasonable technical and organisational measures to protect your information, including encryption in transit and access controls scoped to your account. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security — please keep your own backups of important work.

10Your rights

Depending on where you live, you may have rights to access, correct, delete, export, or restrict the processing of your personal information, and to object to certain processing. You can edit or delete your projects directly in the app and export them at any time. To exercise other rights, or to delete your account, contact privacy@inkwrite.app. If you are in the EEA or UK, you may also lodge a complaint with your local data-protection authority. If you are a California resident, you have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. If you are in Australia, you may also complain to the Office of the Australian Information Commissioner.

11Children’s privacy

Inkwrite is not intended for children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, please contact us and we will delete it.

12Cookies

We use only the cookies necessary to run the Service — primarily the secure session cookies our authentication provider (Clerk) sets to keep you signed in. We do not use advertising cookies.

13Changes to this policy

We may update this policy from time to time. We will change the date above and, for material changes, take reasonable steps to notify you. Your continued use of the Service after an update means you accept it.

14Contact

For any privacy question or request, email privacy@inkwrite.app.