Privacy Policy

Inkspire ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Inkspire platform (the "Service"), including our website and any associated applications.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service. This policy is incorporated into our Terms of Use.

Information you provide directly:

• Account data — email address, display name, username, and password when you register.
• Profile data — biography, avatar, and other optional profile information you choose to add.
• User content — stories, threads, comments, and other content you create or publish on the Service.
• Communications — messages or feedback you send to us directly.

Information collected automatically:

• Usage data — pages visited, features used, time spent, clicks, and navigation paths within the Service.
• Device and browser data — IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Cookies and similar technologies — session cookies required for authentication, and preference cookies to remember your settings (e.g., theme, font size). See Section 8 for more detail.

Information from third parties:

• OAuth providers — if you sign in with Google, we receive your name, email address, and profile picture as provided by that service, subject to your privacy settings there.

We use the information we collect to:

• Create and manage your account and provide the Service.
• Personalise your experience and surface relevant content.
• Process transactions and send related administrative communications (e.g., account confirmation emails, password reset emails).
• Send you notifications about activity on the Service (e.g., replies to your stories, invitations to groups) — you can manage notification preferences in your account settings.
• Monitor and analyse usage trends to improve the Service.
• Detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities.
• Comply with legal obligations and enforce our Terms of Use.

We do not sell your personal data to third parties for their independent marketing or advertising purposes.

We may share your information with:

• Service providers — third-party vendors who perform services on our behalf (e.g., cloud hosting, database management, email delivery, analytics). These providers are bound by contractual obligations to protect your data and use it only for the services they provide to us.
• Authentication providers — Supabase, which powers our authentication and database infrastructure. Supabase processes personal data in accordance with its own privacy policy.
• Other users — your username, display name, avatar, and any public content you post are visible to other users of the Service.
• Legal requirements — if required by law, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect the rights or safety of Inkspire, our users, or others.
• Business transfers — in connection with any merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as a business asset. We will provide notice before your data is subject to a different privacy policy.

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data — retained while your account exists and for up to 30 days after deletion for backup and fraud-prevention purposes.
• User content — stories and threads you have published remain on the Service after deletion if other users have contributed to them (collaborative works), except where you request complete removal.
• Usage logs — retained for up to 12 months for security and performance analysis.

You may request deletion of your account and associated personal data at any time (see Section 7).

We take the security of your personal data seriously and implement commercially reasonable technical and organisational measures including:

• TLS/HTTPS encryption for all data transmitted between your device and our servers.
• Encrypted storage of passwords (bcrypt hashing via Supabase Auth).
• Role-based access controls limiting employee access to personal data.
• Regular security reviews of our infrastructure.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten"), subject to certain exceptions (e.g., data we are required to retain by law).
• Portability — request a machine-readable export of your personal data.
• Objection / Restriction — object to or request restriction of certain processing activities.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@inkspire.social. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Account settings: You can update your profile information and notification preferences directly in your account settings at any time.

We use the following types of cookies and local storage:

• Strictly necessary — authentication tokens stored by Supabase Auth that keep you signed in. These cannot be disabled without logging you out.
• Preference — stored in localStorage to remember your theme, font size, and other UI preferences. These do not track you across sites.

We do not use advertising or cross-site tracking cookies. You can clear cookies and local storage through your browser settings, but this will log you out and reset your preferences.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at hello@inkspire.social and we will take steps to delete it.

Inkspire operates globally. Your information may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that differ from those of your country. When we transfer personal data internationally, we put in place appropriate safeguards (such as standard contractual clauses) to protect it.

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date at the top of this page and, where appropriate, by sending a notice through the Service or by email. We encourage you to review this policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Inkspire Privacy Team
Email: hello@inkspire.social