Privacy Policy

1. Information We Collect

We collect personal information that you provide directly to us when creating an account, setting up workspace templates, or generating content. This includes:

• Account Information: Your name, email address, password (stored securely using encrypted, one-way cryptographic hashing), and account preferences.
• Profile Information: Optional detail configurations, profile settings, and creator preferences.
• Workspace Data: Domain voice guidelines, persona structures, chapters, outline parameters, and book configurations.
• AI Prompts Submitted: The text prompts, context summaries, and directions you submit to compile your digital assets.
• AI Generated Outputs: The final outline drafts, compiled ebook paragraphs, visual Canva card layouts, and other creative outputs.
• Uploaded Files: Reference files, text documents, or images you upload to feed the AI generator or design workspace files.
• Customer Support Communications: Logs, screenshots, and text transcripts of your feedback and support queries.
• Billing Records: Invoice history, subscription plans, dates of transaction, and billing addresses. We do not store complete credit or debit card numbers on our servers.

2. Information Collected Automatically

When you navigate through or interact with InkVisel, our servers automatically collect certain technical and usage data:

• Your Internet Protocol (IP) address, approximate geographic location, and Internet service provider.
• Browser type, software agent metadata, and display configuration.
• Device information, including hardware model and system architecture.
• Operating system brand and version.
• Preferred system language settings and browser local time zone.
• Server log files recording access times, request parameters, and diagnostic events.
• Cookies and local storage data to maintain session authentication.
• Session information, including session duration, interaction heatmaps, and page response times.
• Analytics events tracing click pathways, page views, and feature usage.

3. How We Use Your Information

We process and use the information we collect for the following specific purposes:

• Creating and maintaining your user account and profile.
• Authenticating users and verifying login sessions across devices.
• Delivering our core AI-assisted services, including co-writing tools and niche research.
• Generating requested digital content, book chapters, outlines, and exports.
• Improving the quality of our platform, user interface, and user experience.
• Preventing platform abuse, automated spam, and malicious scripting.
• Detecting, preventing, and addressing fraud and security vulnerabilities.
• Processing subscription tiers, credit balances, and transactional charges.
• Responding to customer support requests and resolving billing queries.
• Sending transactional emails, login codes, billing notifications, and critical security updates.
• Improving overall product performance, server response times, and model accuracy.

4. Legal Basis for Processing

Where required by applicable data protection laws, such as the European Union General Data Protection Regulation (GDPR), InkVisel processes your personal information under the following legal bases:

• Consent: You have given clear and specific consent for us to process your personal data for one or more specific purposes (for example, receiving updates or optional analytics).
• Performance of a Contract: Processing is necessary to perform our contract with you or to take steps at your request before entering into a contract (such as creating your account and delivering AI services).
• Compliance with Legal Obligations: Processing is necessary to comply with applicable statutory or regulatory requirements (such as retaining billing invoices for financial compliance and accounting).
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights. These legitimate interests include securing our systems, detecting and preventing platform abuse or fraud, troubleshooting performance issues, and measuring marketing campaigns.

5. AI Processing

To deliver our co-writing features, InkVisel utilizes advanced language models. The processing of your creative assets is governed by the following guidelines:

• Secure API Routing: InkVisel accesses AI models securely through OpenRouter.
• Targeted Data Transmission: Only the prompts, uploaded content, and context files necessary to generate the requested output are transmitted to OpenRouter.
• No Multi-Provider Broadcast: Data is shared only with the specific AI model selected for processing your request, rather than broadcast to all available AI providers.
• No Prompt Monetization: InkVisel does not sell your prompts or generated content to third parties.
• Provider Processing Limits: Third-party AI model providers process this information solely to generate the requested responses in accordance with their own security policies.

6. Payment Processing

Billing services are integrated with external payment infrastructure to keep your financial details secure:

• All credit card and local payment operations are securely processed by our payment gateway, Dodo Payments.
• InkVisel does not store or collect your complete payment card number, expiration date, or CVV on our systems.
• We retain transactional records, invoice history, payment amounts, billing addresses, and subscription statuses for legal tax compliance, accounting audits, and customer support verification as required by law.

7. Cookies & Tracking Technologies

We use cookies and similar browser tracking technologies to run our website and monitor marketing success. This includes:

• Essential Cookies: Required to verify your identities and load the dashboard resources.
• Security Cookies: Deployed to verify requests and prevent cross-site request forgery.
• Session Cookies: Keep your login status active as you navigate between dashboard features.
• Analytics Cookies: Enabled through tools like Google Analytics to help us analyze website usage patterns, user retention, and performance diagnostics.
• Preference Cookies: Retain workspace options, menu toggles, and light/dark theme choices.

We also use the Meta Pixel to measure the effectiveness of our advertising campaigns and optimize targeting algorithms. These tools help us understand website usage, continuously improve our services, and measure marketing effectiveness. For options to manage cookie consents, please review our Cookie Policy.

8. Data Sharing

We do not sell or rent personal information to third parties. We share your data only with trusted third-party providers when necessary to operate the platform and deliver services. The categories of service providers with whom we share data and the purposes of sharing are as follows:

• OpenRouter:
  Purpose: AI content generation and outline processing.
• Dodo Payments:
  Purpose: Subscription management, billing cycles, tax compliance, invoicing, and payment verification.
• Google Analytics:
  Purpose: Website usage analytics, performance measurement, and diagnostics.
• Meta Pixel:
  Purpose: Advertising measurement and marketing campaign efficiency optimization.
• Cloud Infrastructure Providers:
  Purpose: Secure cloud hosting, database storage, and application delivery.
• Customer Support Services:
  Purpose: Handling support requests, user tickets, and customer communications.

9. International Data Transfers

InkVisel is a global digital product studio. Personal information may be processed and stored in countries where InkVisel or its trusted service providers operate—including India, the United States, and European Union member states.

Where required by applicable law, we implement reasonable safeguards designed to protect transferred data and ensure it receives a level of protection equivalent to that required in your home jurisdiction.

10. Data Retention

We retain your data only for as long as necessary to provide our services and meet legal obligations:

• Account information, workspace drafts, settings, and persona styles are retained while the user account remains active.
• Billing records, transaction logs, and invoice metadata may be retained for tax, accounting, audit, and legal compliance purposes as required by law.
• Users may request deletion of their account. Once requested, we will delete or anonymize personal details, except where re-identifying or retaining specific records is required by applicable law or for legitimate business purposes (such as fraud prevention or resolving active disputes).

11. Data Security

We employ industry-standard security measures and technical safeguards to protect your personal data:

• HTTPS Encryption: All incoming and outgoing data transit is encrypted using Transport Layer Security (TLS).
• Encrypted Databases: Workspace tables and sensitive database fields are encrypted at rest where appropriate.
• Access Controls: Database permissions are filtered using Row-Level Security (RLS) to ensure users only access their own data.
• Authentication Protection: Passwords are encrypted with secure cryptographic hashes before being saved in our user database.
• Regular Security Reviews: We constantly assess our platform endpoints, API routing, and dependency libraries to discover and address vulnerabilities.

Please be aware that while we follow industry best practices, no system or method of electronic storage or network transmission is completely secure. We cannot ensure absolute security of your data.

12. Your Privacy Rights

Under applicable privacy laws—including GDPR in Europe, the CCPA/CPRA in California, and the Digital Personal Data Protection Act (DPDP Act) in India—you may have some or all of the following rights:

• Access: The right to request copies of the personal data we hold about you.
• Correction: The right to request that we correct inaccurate or incomplete details.
• Deletion: The right to request that we erase your personal data under certain conditions.
• Data Portability: The right to request that we transfer your collected data to another organization or directly to you in a structured, machine-readable format.
• Withdraw Consent: The right to withdraw your consent to data processing at any time.
• Object/Restrict: The right to object to the processing of your data, or request that we restrict processing where applicable.

Please note that these rights may vary depending on your local jurisdiction and are subject to specific legal exceptions and verification requirements.

13. Children's Privacy

InkVisel is designed for creators and self-publishers and is not intended for children under the age of 13 (or the minimum age required by applicable law in your country). We do not knowingly collect personal data from children. If we discover that we have inadvertently collected personal data from a child under 13, we will take prompt steps to delete that data from our databases as quickly as possible.

14. Third-Party Websites

Our website and application may contain links to external websites that are not operated by InkVisel.

Please be aware that we have no control over the content and privacy practices of these external sites. InkVisel is not responsible for the privacy policies, practices, or content of third-party websites. We advise users to review the privacy policies of any external websites they visit.

15. Changes to this Privacy Policy

We may update our Privacy Policy periodically to reflect shifts in our operations, security protocols, or legal requirements. Any modifications will be posted directly on this page, and the “Last Updated” and “Effective Date” at the top of the policy will be modified accordingly. We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting your data. Your continued use of our services after changes are posted constitutes acceptance of those changes.