Privacy Policy
This policy explains what Inkling collects, why, where it goes, and how to get it back or deleted. Inkling is a small product made by one person; the policy is written accordingly — short, specific, and honest.
Who we are
Inkling is operated by Kirill Klimuk, an individual. You can reach us at privacy@inkling.to for any privacy-related request.
What we collect
- Account data — your name and email address, plus a profile picture if you sign in with Google. If you sign in with Google, we receive these from your Google profile. If you sign in with an email magic link, you provide your name at sign-up.
- Content you write in Inkling — pages, blocks, comments — stored on our servers so you can access it from any device and share it with collaborators you invite.
- Connection logs: IP address, user agent, and timestamps, retained briefly for security and debugging.
We do not collect analytics, device fingerprints, or tracking data.
How we use Google Sign-In data
We access your Google profile name, profile picture, and email address solely to create and identify your Inkling account. We do not request, access, or store any other Google user data. We do not share this information with third parties except as listed below. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Sub-processors
We use the following services to operate Inkling. Each processes personal data only on our instructions:
- Fly.io — web hosting and the primary Postgres database.
- Tigris (via Fly.io) — encrypted database backups, which contain your account data and content.
- Google — authentication (Sign in with Google).
- Resend — transactional outbound email (sign-in notifications, page-share invitations, and similar).
- Anthropic — only if you enable the AI agent feature using your own API key. See the AI integrations section below.
AI integrations
Inkling may offer features that let you invite an AI agent (for example, Claude) into your documents. These features are opt-in and require you to supply your own Anthropic API key. When you enable an agent and direct it to work on your content, we transmit relevant parts of your documents to Anthropic on your behalf so the agent can respond.
Anthropic's API terms govern that processing. Per those terms, Anthropic does not use inputs or outputs from API requests to train their models. We do not train models on your content, and we do not share your content with any other AI provider. You can disable the feature at any time.
How long we keep data
We keep your account and content for as long as your account is active. When you delete your account, we remove your data from our active systems within 14 days. Encrypted database backups that contain your data expire on a rolling 30-day schedule after deletion. Connection logs are retained for up to 30 days.
How to access or delete your data
Email privacy@inkling.to from the address on your account. We will export or delete your data within 30 days. Account deletion is permanent and cannot be undone.
Cookies
Inkling uses a single session cookie to keep you signed in. We do not use analytics cookies, advertising cookies, or cross-site trackers.
California residents
We do not sell your personal information and we do not share it for cross-context behavioral advertising. California residents may request access, correction, or deletion of their personal information by emailing privacy@inkling.to. We will not discriminate against you for exercising these rights.
Children
Inkling is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, please contact us and we will delete it.
Changes to this policy
We may update this policy as Inkling evolves. If changes are material, we will announce them in-app before they take effect. The date at the top of this page reflects the most recent revision.
Contact
Questions, requests, or concerns: privacy@inkling.to.