InkLoom← Back

Privacy Policy

Last updated: March 11, 2026

InkLoom ("we," "our," or "us") operates the InkLoom platform and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By accessing or using InkLoom, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

1. Data Collection

We collect information that you provide directly, as well as information collected automatically when you use our services.

Information You Provide

  • Account information: name, email address, profile details when you register or update your account.
  • Content: documentation, pages, and other content you create, upload, or publish through InkLoom.
  • Payment information: billing details processed securely through our payment provider (Stripe). We do not store full credit card numbers on our servers.
  • Communications: messages you send us via support channels, feedback forms, or email.
  • GitHub repository data: when you connect a GitHub repository, InkLoom accesses repository contents (code, documentation files) for sync and AI documentation generation. This access is initiated by you installing the InkLoom GitHub App.
  • AI processing data: when you opt in to AI documentation generation, relevant codebase content is sent to third-party AI providers for processing. This is always user-initiated.

Information Collected Automatically

  • Usage data: pages visited, features used, actions taken, timestamps, and session duration.
  • Device information: browser type, operating system, device identifiers, and screen resolution.
  • Log data: IP address, access times, referring URLs, and error logs.

2. How We Use Your Data

We use the information we collect for the following purposes:

  • Providing, maintaining, and improving our services.
  • Processing transactions and managing your subscription.
  • Sending service-related communications (e.g., account verification, security alerts, billing updates).
  • Analyzing usage patterns to improve user experience and product development.
  • Detecting, preventing, and addressing technical issues, fraud, or security threats.
  • Complying with legal obligations and enforcing our terms.

3. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

  • Essential cookies: required for authentication, security, and core functionality.
  • Analytics cookies: help us understand how users interact with our services (powered by PostHog).
  • Preference cookies: remember your settings and preferences across sessions.
  • Error tracking: Sentry monitors application errors and performance. May collect error traces, browser context, and session replay data.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect service functionality.

4. Third-Party Services

We use trusted third-party services to operate InkLoom. These providers may process your data in accordance with their own privacy policies:

  • WorkOS: authentication and single sign-on (SSO). Processes account credentials and identity data.
  • Stripe: payment processing. Handles billing information and payment transactions securely.
  • Cloudflare: content delivery, DDoS protection, and DNS services. May process IP addresses and request data.
  • PostHog: product analytics. Collects usage data and behavioral analytics to help us improve our product.
  • Sentry: application error tracking and performance monitoring. Collects error context, browser information, and session replays.
  • OpenRouter: AI model routing for documentation generation. Processes codebase content submitted by users for AI features. Subject to user opt-in.
  • Resend: transactional email delivery. Processes email addresses for sending account notifications, billing emails, and collaboration alerts.
  • Vercel: application hosting. May process IP addresses, request headers.
  • Convex: backend database and real-time sync. Stores user accounts, content, and application data.
  • PartyKit: real-time collaborative editing infrastructure. Processes document editing sessions for users on plans with real-time collaboration.

5. AI Data Processing

InkLoom offers AI-powered documentation generation as an opt-in feature. When you use AI features:

  • AI documentation generation is opt-in only. No codebase content is sent to AI providers unless you explicitly initiate it.
  • User codebase content is sent to third-party large language model (LLM) providers via OpenRouter for processing.
  • AI providers may vary as we optimize for quality, performance, and cost.
  • InkLoom does not use customer content to train AI models.
  • Generated documentation is owned by the project owner (see our Terms of Service).
  • As an alternative, you may use your own API key (BYOK) to connect directly to AI providers under your own account and terms.

6. Data Processing Locations

InkLoom primarily processes and stores data in the United States. Third-party providers may process data in other regions in accordance with their own privacy policies.

For users in the European Union or European Economic Area (EU/EEA), data transfers to the United States are conducted under applicable legal mechanisms.

7. Children's Privacy

InkLoom is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

Users under the age of 18 may only use InkLoom under a parent or guardian account (see our Terms of Service).

8. Data Breach Notification

In the event of a data breach affecting personal information, we will notify affected users and relevant authorities as required by applicable law. Notification will be provided within a reasonable timeframe.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

  • Account data: retained for the duration of your account and for a reasonable period after account deletion to comply with legal obligations.
  • Content data: retained until you delete it or close your account. Published content may be cached by CDNs for a limited time after deletion.
  • Usage & analytics data: retained in aggregated or anonymized form for up to 24 months.
  • Payment records: retained as required by applicable tax and financial regulations.

10. Your Rights

Depending on your jurisdiction (including under the GDPR, CCPA, and other applicable privacy laws), you may have the following rights regarding your personal data:

  • Right of access: request a copy of the personal data we hold about you.
  • Right to correction: request correction of inaccurate or incomplete personal data.
  • Right to deletion: request deletion of your personal data, subject to legal retention requirements.
  • Right to data portability: request a copy of your data in a structured, machine-readable format.
  • Right to restrict processing: request that we limit how we use your data.
  • Right to object: object to certain types of data processing, including direct marketing.
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the information provided in Section 13 below.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know: what personal information is collected, used, and disclosed.
  • Right to request deletion: of your personal information.
  • Right to opt-out of sale: InkLoom does not sell your personal information.
  • Right to non-discrimination: for exercising your CCPA rights.

To exercise your CCPA rights, contact us at privacy@inkloom.io.

11. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of InkLoom after changes are posted constitutes acceptance of the revised policy.

13. Contact Information

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

  • Email: privacy@inkloom.io
  • Address: 81-6629 Hawaii Belt Rd, Unit #2031, Kealakekua, HI 96750