1. Who We Are

Inktastic Ltd ("Inktastic," "we," "our," or "us") operates the Inktastic platform at inktastic.net. We are registered in England and Wales. For data protection questions, contact us at letstalk@inktastic.net.

2. What Data We Collect

We collect the following categories of data:

• Account data: Name, email address, password (hashed), pen name, and profile preferences you provide when registering.
• Manuscript content: Text, metadata, and formatting settings you upload or create within the platform. This data is stored securely and never shared with third parties.
• Billing data: Payment is processed by Stripe. We store only your billing address and last four card digits — never your full card number, CVV, or banking details.
• Usage data: Pages visited, features used, session duration, and error logs — used to improve the platform and diagnose issues.
• Device data: Browser type, operating system, and IP address, used for security and fraud prevention.

3. How We Use Your Data

• To provide, maintain, and improve the Inktastic platform and services
• To process your payments and manage your subscription
• To send transactional emails (receipts, password resets, export notifications)
• To send product update emails (you may opt out at any time)
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

We do not use your manuscript content to train AI models without your explicit consent.

4. Who We Share Data With

We share your data only with trusted service providers necessary to operate the platform:

• Stripe — payment processing
• Amazon Web Services — cloud infrastructure and file storage
• Postmark — transactional email delivery
• Sentry — error monitoring (anonymised)

We do not sell, rent, or trade your personal data with any third party for marketing purposes.

5. Your Rights

Under GDPR and applicable data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your account and associated data
• Export your manuscript content in standard formats
• Object to or restrict how we process your data
• Withdraw consent at any time where processing is based on consent

To exercise these rights, email letstalk@inktastic.net. We respond within 30 days.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data is removed within 30 days and your manuscript content within 90 days, except where retention is required by law (e.g., billing records are kept for 7 years for tax purposes).

7. Cookies

We use essential cookies to keep you logged in and remember your preferences. We use analytics cookies (Google Analytics) to understand how the platform is used — these can be declined via your browser settings or our cookie banner. We do not use advertising cookies or tracking pixels.

8. Security

Your data is encrypted in transit (TLS 1.3) and at rest (AES-256). We run regular security audits and penetration tests. In the event of a data breach, we will notify affected users within 72 hours as required by law.

9. Changes to This Policy

We may update this policy to reflect changes in the platform or applicable law. Material changes will be notified by email and flagged in the platform. Continued use of Inktastic after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

For privacy questions or data requests: letstalk@inktastic.net
Inktastic Ltd, 22 Aldgate High Street, London, EC3N 1AL, United Kingdom