Privacy Policy

Last updated: 22 October 2026. This policy explains what VectorAI LLC (“we”) collects when you use the Inklet website and hosted service, and why. The short version: we collect what is needed to run your account and billing and we do not sell data.

What we collect

• Account data: your email address, name, a hash of your password (never the password itself), and the time you signed up and verified.
• Plan data: your tier, its status and renewal date.
• Your documents, on Plus and Pro only: the documents, brand styles, gallery items and settings you choose to keep in cloud storage, stored on our server in the EU and readable only by your account. We never look at their content except to operate the service, and never use it for anything else. Free accounts send us no documents at all.
• Billing: handled by Stripe. We receive your Stripe customer id, subscription status and billing period; we never see or store card numbers.
• Technical logs: IP address, browser type, requested pages and errors, kept briefly for security and debugging. We do not use advertising trackers or third-party analytics.

How we use it

To provide the service (sign-in, verification and reset emails, billing), to prevent abuse (rate limits, fraud checks), to respond to support requests, and to send essential service emails such as verification, password reset, invitations and billing notices. We do not send marketing email unless you ask for it, and we never sell or rent personal data.

Who we share it with

Only the processors that run the service for us, each bound by a data processing agreement under Article 28 GDPR and processing data only on our instructions and only as needed to provide its service:

• netcup GmbH, Karlsruhe, Germany: hosting. The server and its backups are in netcup's data centres in Germany (Nuremberg) or Austria (Vienna), inside the EU.
• Stripe Payments Europe, Ltd. and Stripe, Inc.: payments and invoices. Stripe is the independent controller for the card data you enter on its pages.
• Resend, Inc. (USA): delivery of the transactional emails above, under the EU Standard Contractual Clauses.
• Google Fonts: the website's pages (not the app) load two typefaces from fonts.googleapis.com, which sees your IP address when a page loads; no cookies are set.

We disclose data to authorities only when legally required. Business customers who need a data processing agreement with us can request one at the address below.

Retention

Account data is kept while your account exists and for up to 90 days after it is closed, then deleted from active systems (backups roll off within a further 90 days). Billing records are kept as long as tax law requires. Verification and reset links expire automatically; sessions end 30 days after sign-in.

Your rights

You can see and change your name in the app, export your documents at any time, and close your account from the Profile tab of your account dialog (this deletes your cloud documents and ends any subscription); write to us to change your email address. Depending on where you live (for example under the GDPR or the CCPA) you may also have rights to access, correct, delete or port your data, to object to or restrict processing, and to complain to a supervisory authority. Write to us at the address below and we will respond within 30 days. The service is not directed at children under 16.

Contact

VectorAI LLC, support@inklet.dev. Changes to this policy are posted here with a new date; material changes are announced by email to account holders.