Privacy Policy

We collect information you provide directly to us and information generated automatically when you use our service.

Information you provide

• Account information: Your name, email address, and password when you create an account. If you sign in via GitHub or GitLab OAuth, we receive the name, email, and avatar URL from your identity provider.
• Payment information: Billing details (name, address) and payment method information submitted when you subscribe or pay for a generation run. Payment card details are processed directly by Stripe and are never stored on our servers.
• Communications: Messages you send us via the contact form or by email.

Information collected automatically

• Usage data: Pages visited, features used, generation runs initiated, token counts, and deliverable types selected.
• Log data: IP address, browser type, operating system, referring URLs, and timestamps of requests to our service.
• Cookies and similar technologies: Session cookies for authentication and preference storage.

We use the information we collect to:

• Provide, operate, and improve the Inkwell Forge service
• Process payments and manage your subscription or pay-as-you-go account
• Send transactional emails: account confirmation, generation complete notifications, payment receipts, and credit balance warnings
• Respond to your inquiries and provide customer support
• Monitor for abuse, enforce our Terms of Service, and protect the security of our platform
• Analyze aggregated, anonymized usage patterns to improve product quality and prioritize features
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your repository code or generated documentation for training machine learning models.

Inkwell Forge connects to your GitHub or GitLab repositories to analyze your code and generate documentation. Here is exactly what we do and do not do with your repository data:

• What we read: File trees and individual file contents from the repositories you explicitly connect to your Inkwell Forge projects. We use the GitHub and GitLab APIs — we do not clone or store full repository copies.
• What we store: Generated documentation (screen docs and deliverable files) is stored in your Inkwell Forge account. We store metadata about your projects and screens. We do not persistently store the source code files used during generation.
• Access scope: OAuth tokens are scoped to the minimum permissions required (read access to repositories you select). We do not request write access.
• Revocation: You can revoke Inkwell Forge's access to your repositories at any time via your GitHub or GitLab account settings.

Your data is stored on infrastructure provided by Supabase (PostgreSQL database and file storage), hosted on AWS. We use industry-standard security practices including:

• Encryption in transit (TLS 1.2+) for all data transfers
• Encryption at rest for database and file storage
• Authentication via Supabase Auth with secure session management
• Role-based access controls — your data is only accessible to your account
• OAuth tokens stored encrypted and used only to serve your generation requests

We retain your data for as long as your account is active or as needed to provide you the service. Specifically:

• Free plan: Generated documents are retained for 30 days per project.
• Starter plan: Generated documents are retained for 90 days per project.
• Pro plan: Generated documents are retained for 1 year per project.
• Account data: Your account information, usage records, and billing history are retained for the lifetime of your account, and for up to 7 years after account closure for legal and accounting compliance purposes.

When you delete your account, we delete your personal information and generated documents within 30 days, except where retention is required by law.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information and account.
• Portability: Request an export of your generated documents and account data.
• Objection: Object to certain uses of your information, including analytics.

To exercise any of these rights, contact us at privacy@useinkwellforge.com. We will respond within 30 days.

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@useinkwellforge.com
• Web: useinkwellforge.com/contact

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice on our platform before the changes take effect. Your continued use of Inkwell Forge after any change constitutes your acceptance of the updated policy.