Privacy Policy

Last updated: July 2026

This policy explains what we collect and how we handle it when you use the Inkspan API and website.

What we collect

Account data: the email address you provide at signup and your API key.
Usage metadata: per-request records of which endpoint was called and when — used for metering and rate limits. We do not log the contents of your documents.
Documents you submit: processed transiently in memory to fulfill your request and not stored after the response is returned.
Payment data: handled by Stripe; we never see or store your card details.

How we use it

To provide and operate the Service, meter usage and bill accordingly, provide support, and maintain security. We do not sell your data or use your documents to train models.

Sub-processors

We rely on: Railway (hosting), Supabase (database & authentication), Stripe (payments), and Resend (transactional email). Each processes data only to provide their respective function.

Data retention

Document contents are not retained after processing. Usage metadata and account data are retained while your account is active and for a reasonable period afterward for billing and legal purposes. Email us to request deletion.

Security

Data is encrypted in transit (TLS). API keys authenticate every request; keep yours secret.

Your rights

You may request access to or deletion of your account data by emailing support@inkspan.dev.

Contact

support@inkspan.dev