InkFlash

Privacy Policy

How InkFlash collects, uses, stores and protects your personal information, and the choices you have.
Jan 1, 2026

Last updated: September 26, 2026

This Privacy Policy explains how [Operator legal name] ("we", "us") collects, uses and protects information when you use InkFlash at [yourdomain.com] (the "Service").

Information we collect

  1. Account information — your name, email address and profile picture when you sign up (including via Google sign-in).
  2. Content you provide — files, text or other inputs you submit to the Service, and the outputs generated for you.
  3. Payment information — payments are processed by Waffo, our merchant of record. We receive your billing status, plan and the last digits of your card, but never your full card number.
  4. Usage data — pages visited, features used, device and browser type, and approximate location derived from IP address.
  5. Cookies — used to keep you signed in and, only with your consent where required, for analytics.

How we use information

  • To provide, maintain and improve the Service
  • To process payments and manage subscriptions and credits
  • To send transactional emails (sign-up, receipts, password reset)
  • To prevent fraud and abuse
  • To analyze aggregated usage and improve the product

We do not sell your personal information.

Your content

You own the content you upload and the outputs you generate. We process it only to provide the Service. Generated designs are stored so you can download them again from your account; you can ask us to delete them at any time.

Third-party services

We use trusted providers to run the Service, which may process data on our behalf: hosting (Vercel), database, file storage, email delivery (Resend), payments (Waffo), analytics (Google Analytics), and AI model providers (OpenAI, Google, via OpenRouter) to generate designs from your descriptions.

Data retention

We keep account data while your account is active. You can delete your account at any time; we then delete or anonymize your personal data within [30] days, except where we must keep it for legal or accounting reasons.

Your rights

Depending on where you live (e.g. GDPR, CCPA), you may have the right to access, correct, export or delete your data, and to object to certain processing. Email [support@yourdomain.com] and we will respond within 30 days.

Children

The Service is not directed to children under 13 (or 16 in the EEA), and we do not knowingly collect their data.

Changes

We may update this policy. We will post the new version here and update the date above.

Contact

[Operator legal name] · [support@yourdomain.com]