Privacy Policy

1. Information We Collect

We collect personal information that you provide directly to us when creating an account, setting up workspace templates, or generating content. This includes:

• Account Information: Your name, email address, password (stored securely using encrypted, one-way cryptographic hashing), and account preferences.
• Profile Information: Optional detail configurations, profile settings, and creator preferences.
• Workspace Data: Domain voice guidelines, persona structures, chapters, outline parameters, and book configurations.
• AI Prompts Submitted: The text prompts, context summaries, and directions you submit to compile your digital assets.
• AI Generated Outputs: The final outline drafts, compiled ebook paragraphs, visual Canva card layouts, and other creative outputs.
• Uploaded Files: Reference files, text documents, or images you upload to feed the AI generator or design workspace files.
• Customer Support Communications: Logs, screenshots, and text transcripts of your feedback and support queries.
• Billing Records: Invoice history, subscription plans, dates of transaction, and billing addresses. We do not store complete credit or debit card numbers on our servers.

2. Information Collected Automatically

When you navigate through or interact with InkVisel, our servers automatically collect certain technical and usage data:

• Your Internet Protocol (IP) address, approximate geographic location, and Internet service provider.
• Browser type, software agent metadata, and display configuration.
• Device information, including hardware model and system architecture.
• Operating system brand and version.
• Preferred system language settings and browser local time zone.
• Server log files recording access times, request parameters, and diagnostic events.
• Cookies and local storage data to maintain session authentication.
• Session information, including session duration, interaction heatmaps, and page response times.
• Analytics events tracing click pathways, page views, and feature usage.

3. How We Use Your Information

We process and use the information we collect for the following specific purposes:

• Creating and maintaining your user account and profile.
• Authenticating users and verifying login sessions across devices.
• Delivering our core AI-assisted services, including co-writing tools and niche research.
• Generating requested digital content, book chapters, outlines, and exports.
• Improving the quality of our platform, user interface, and user experience.
• Preventing platform abuse, automated spam, and malicious scripting.
• Detecting, preventing, and addressing fraud and security vulnerabilities.
• Processing subscription tiers, credit balances, and transactional charges.
• Responding to customer support requests and resolving billing queries.
• Sending transactional emails, login codes, billing notifications, and critical security updates.
• Improving overall product performance, server response times, and model accuracy.

4. Legal Basis for Processing

Where required by applicable data protection laws, such as the European Union General Data Protection Regulation (GDPR), InkVisel processes your personal information under the following legal bases:

• Consent: You have given clear and specific consent for us to process your personal data for one or more specific purposes (for example, receiving updates or optional analytics).
• Performance of a Contract: Processing is necessary to perform our contract with you or to take steps at your request before entering into a contract (such as creating your account and delivering AI services).
• Compliance with Legal Obligations: Processing is necessary to comply with applicable statutory or regulatory requirements (such as retaining billing invoices for financial compliance and accounting).
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights. These legitimate interests include securing our systems, detecting and preventing platform abuse or fraud, troubleshooting performance issues, and measuring marketing campaigns.

5. AI Processing & Prompt Privacy

To deliver our digital product builder, Idea Lab research, and co-writing studio, InkVisel connects to advanced language and vision models. Processing of your creative blueprints and assets is strictly governed by the following safeguards:

• Zero Model Training on User Data: Prompts, author persona snapshots, chapter outlines, and uploaded reference files submitted to the Platform are processed through secure enterprise API routing (via OpenRouter). Your private inputs and generated manuscripts are not used to train, retrain, or fine-tune public foundation AI models.
• Targeted Context Transmission: Only the specific outline parameters, persona guidelines, and continuity memory required to execute the active generation request (such as drafting a chapter, synthesizing an idea blueprint, or designing cover art) are transmitted to the selected AI model provider.
• No Prompt Monetization: InkVisel never sells, rents, licenses, or monetizes your creative prompts, ideas, or generated outputs to third parties.
• Isolated Model Selection: Requests are processed only by the model provider designated for that specific task (e.g. OpenAI, Anthropic, Google DeepMind, or open-source models via OpenRouter) and are never broadcast indiscriminately across unselected providers.

6. Payment Processing & Merchant of Record

All payment checkouts, recurring billing cycles, credit pack purchases, and invoicing are handled through our secure Merchant of Record and payment gateway, Dodo Payments:

• All credit card, debit card, and international payment transactions are processed directly on PCI-DSS Level 1 compliant infrastructure.
• InkVisel does not store, collect, or have access to your full payment card number, CVV code, or card security PIN on our servers.
• Dodo Payments handles global tax compliance, calculating applicable Goods and Services Tax (GST) for customers in India, Value Added Tax (VAT) for European customers, and applicable state digital sales taxes.
• We retain only payment transaction identifiers, plan tier names, purchase timestamps, invoice receipt links, and billing country metadata necessary for tax accounting audits and subscription entitlement verification.

7. Cookies & Tracking Technologies

We use cookies, local storage, and secure token storage to provide platform security, maintain sessions, and analyze site performance:

• Essential & Security Cookies: Required to authenticate user logins, verify 2FA challenges, prevent cross-site request forgery (CSRF), and maintain active workspace sessions.
• Preference Storage: Remembers your workspace interface options, sidebar state, and light/dark theme preference.
• Analytics Cookies: Enabled through Google Analytics to measure anonymous usage patterns, page response times, and platform performance diagnostics.
• Marketing Pixels: Enabled through Meta Pixel on public marketing pages to evaluate campaign performance and optimize ad delivery.

For detailed information on cookie categories and instructions on how to manage your consent preferences, please consult our Cookie Policy.

8. Data Sharing & Subprocessors

We do not sell, trade, or rent personal data. We disclose personal information to trusted third-party service providers solely to operate our platform and fulfill requested services:

• OpenRouter (AI Routing): Processes generation prompts and outline parameters for real-time model completions.
• Dodo Payments (Merchant of Record): Manages payment gateways, subscription renewals, tax calculations, and invoicing.
• InsForge & PostgreSQL Cloud Infrastructure: Provides encrypted relational database storage, secure serverless functions, and private S3-compatible cloud storage.
• Google Analytics & Meta Pixel: Measures website traffic metrics, conversion analytics, and platform stability diagnostics.
• Resend & SMTP Email Dispatchers: Delivers transactional emails, account verification codes, billing confirmations, and security alerts.

9. International Data Transfers

InkVisel is a global digital product studio headquartered in India. Personal information collected through the Platform may be stored and processed in India, the United States, and European Union member states where our cloud and AI infrastructure providers operate.

When data is transferred across international borders, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent statutory transfer mechanisms, ensuring that your data receives a level of protection consistent with applicable privacy laws.

10. Data Retention & Storage Lifecycle

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, provide our Services, and comply with statutory legal requirements:

• Active Account Data: Your account profile, author persona blueprints, workspace outlines, draft chapters, and marketing kits are preserved while your account remains open.
• Zero Duplicate Export Files: When you modify product outlines or recompile exports, previous compiled document files (.pdf, .docx, .epub) are automatically purged from storage to ensure only the single latest version is stored.
• Cover Art Versions: A maximum of 3 historical cover art versions per product are retained in the dedicated private storage bucket; older versions are automatically deleted upon new generation.
• Support Ticket Retention: Resolved support tickets and their associated screenshot attachments in cloud storage are automatically and permanently purged after 180 days.
• Account Deletion Grace Period: When you request account deletion, your account enters a 14-day recovery window. Upon expiration of the 14-day period, our automated background cleanup permanently erases all associated database records and storage files across all buckets.
• Statutory Tax & Billing Records: Invoiced billing logs and payment reference IDs are retained for statutory periods required by applicable tax, accounting, and anti-fraud regulations.

11. Data Security & Technical Safeguards

We implement comprehensive technical, organizational, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• End-to-End Transport Encryption: All data in transit is encrypted using Transport Layer Security (TLS 1.3 / HTTPS).
• Database Isolation & Row-Level Security: Relational tables enforce Row-Level Security (RLS) policies ensuring users can only read, write, or export their own assets.
• Cryptographic Password Protection: User passwords are encrypted with industry-standard cryptographic hashes and are never stored in plaintext.
• Private Bucket Storage Proxy: All compiled document exports and cover images are hosted in private storage buckets accessible only through authenticated, owner-verified proxy endpoints.
• Brute Force & Rate Limiting Defenses: Automated in-memory rate limiting engines monitor repeated login, signup, password reset, and API requests to mitigate brute force and denial-of-service threats.

12. Global & Regional Privacy Rights

Depending on your location, you possess specific statutory rights regarding your personal information under applicable regional laws:

To exercise any of these privacy rights, please submit a request to support@inkvisel.com. We will respond within the statutory timeframe mandated by your jurisdiction (within 30 days for DPDP Act and GDPR requests).

13. Children's Privacy

InkVisel is a professional digital product creation platform intended solely for adults, creators, and publishers aged 18 or older (or the applicable age of digital consent in your country). We do not knowingly solicit, collect, or process personal data from children under 13 (or under 16 in the EEA/UK/California). If we discover that personal information of a child has been collected without verifiable parental consent, we will take prompt steps to delete that data immediately.

14. Third-Party Websites & Marketplace Links

The Platform may contain links to external publishing platforms, digital marketplaces (e.g. Gumroad, Amazon KDP, Etsy, Shopify), or third-party resources. InkVisel does not control, endorse, or accept responsibility for the privacy practices, content, or policies of external sites. We encourage you to review the privacy policies of any external destination you visit.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect operational changes, product feature releases, security upgrades, or evolving statutory legal requirements. When updates are published, we will revise the “Last Updated” and “Effective Date” at the top of this document. Continued use of InkVisel following posted changes signifies your acknowledgment and acceptance of the updated policy.