Privacy Policy

We collect only what we need to run the service:

• Account. Your email address. InkSmith is passwordless — we never collect or store a password.
• Author profiles. The pen name, bio, default genre, voice notes, and imprint details you choose to add.
• Your content. The books, chapters, outlines, cover briefs, chat messages, and memory ("Gita") entries you create or generate in the app.
• Uploaded files. Files you attach in chat (text, PDF, DOCX, or images). We extract their text — and, for images, a short description — so a rishi can read them; the extracted content is stored with your chat history.
• Usage & metering. Token usage per AI call, job history, and credit ledger entries — needed to meter billing and prevent overdraft.
• Acquisition attribution. If you tell us how you heard about us at onboarding, plus any campaign (UTM) parameters and referring URL from your first visit. Used only to understand where our users come from.
• Payment information. Purchases are processed by our payments provider, Polar (see "Payments"). We receive the order, amount, and a customer reference — we never see or store your full card details.
• Technical data. Basic request logs (IP, user agent, timestamps) for security, rate limiting, and debugging.

To generate prose, images, edits, and market research, InkSmith sends the relevant parts of your content and prompts to third-party AI providers — currently OpenAI, OpenRouter (which routes to models such as DeepSeek and Google Gemini), and Perplexity (for Deep Research). These providers process your input to return a result.

We send only what's needed for the feature you invoked. We do not sell your manuscripts, and we do not use your private content to train our own models. Each provider's own terms and privacy policy govern their handling of the data we send them; we choose providers that do not require training rights over API content, but you should review their policies if this matters to you.

Two features send additional content: when you attach a file in chat, we send its extracted text (PDF/DOCX) or the image itself (for a vision description) to these providers so a rishi can reference it; and when you generate an audiobook, the book's text is sent to OpenAI's text-to-speech service to synthesize the narration audio.

To keep the platform safe, text you submit may also be automatically screened by a content-safety classifier before it is processed, and attempts to misuse the AI (for example, prompt-injection or requests for prohibited content) may be logged with your account for abuse prevention and enforcement of our Terms.

• To provide, operate, and secure the service.
• To generate the content you ask for.
• To meter usage, process purchases, and prevent abuse.
• To send transactional email (sign-in codes, receipts, subscription and credit-expiry notices).
• To understand, in aggregate, how people find and use InkSmith so we can improve it.

We do not run third-party advertising trackers, and we do not sell your personal information.

Subscriptions and one-time purchases are handled by Polar as the merchant of record. Polar collects and processes your payment details and handles applicable sales tax / VAT. Your card data is held by Polar and its payment processors under their terms, not by us.

We keep this minimal. We use your browser's local storage for a sign-in "breadcrumb" (so you stay logged in), UI preferences, and the first-touch attribution described above. We do not use third-party advertising or cross-site tracking cookies.

We share data only with vendors that help us run the service: our AI providers (OpenAI, OpenRouter, Perplexity), our payments provider (Polar), our email-delivery provider, and our hosting/database infrastructure. We require each to handle data consistent with this policy. A current subprocessor list is available on request at support@inksmith.ai.

We keep your data while your account is active. You can delete your account at any time from Settings → Account; we soft-delete immediately and permanently erase the data within 30 days, except where we must retain records (e.g. transaction records) to meet legal obligations. You can export your data at any time from Settings → Account.

We protect data in transit and at rest, scope every request to the authenticated user, and encrypt sensitive secrets (such as any AI provider keys you add) using per-record encryption. No system is perfectly secure, but we work to keep yours safe and to notify you if something material happens.

Depending on where you live (e.g. the EEA/UK under GDPR, or California under CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise the core rights directly in-app (export and delete), or contact us at support@inksmith.ai and we'll help. We won't discriminate against you for exercising these rights.

We and our providers may process your data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for those transfers.

InkSmith is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided us information, contact support@inksmith.ai and we'll remove it.

We'll update this page when our practices change and revise the "last updated" date above. Material changes will be notified by email or in-app.

InkSmith — [REGISTERED BUSINESS ADDRESS]. Privacy questions: support@inksmith.ai. General support: support@inksmith.ai.