Privacy Policy

1. Two kinds of people use Inkpacket

• Account users are people who sign up for a workspace and send documents (for example, an owner, admin, or member of a company's workspace).
• Signers are people who receive a signing link or fill out a Web Form. Signers don't need an account.

When a business sends you a document through Inkpacket, that business decides what goes in the document and who receives it. For that document, the business is responsible for its own use of your information, and we process it on the business's behalf.

2. Information we collect

Account information. Your name, email address, password (stored as a hash, never in plain text), the workspace or company name, your role, and invitations you send or accept.

Documents and form content. The PDFs and templates you upload, the fields you place, and anything typed into those fields by you or a signer.

Signature information. Signatures, initials, dates, and other marks a signer adds, plus the signer's name, email address, and (if provided) phone number.

Audit trail information. To prove who did what and when, we record events on each document, such as created, sent, viewed, signed, completed, declined, voided, expired, and corrected. These records can include the time, IP address, and browser or device information of the person taking the action.

Usage and device information. Basic logs of how the Service is used, such as pages visited, errors, browser type, and IP address, so we can keep the Service running and secure.

Messages to us. Requests you submit on this page, and questions typed into the Ask Inkpacket assistant on our site.

Payment information. Card checkout is not turned on today. When paid plans start charging, payments will be handled by our payment processor, and we won't store full card numbers on our own systems.

3. How we use information

We use information to:

• Run the Service: create workspaces, store and send documents, deliver signing links, send reminders, and produce the completed PDF and audit trail.
• Prove the signing process, for example when a sender or signer needs to show that a document was signed and when.
• Keep accounts and documents secure, and detect and stop abuse or fraud.
• Answer support questions and send service messages, such as signing invites, reminders, and account notices.
• Fix bugs and improve the Service.
• Meet legal obligations.

We do not sell personal information, and we do not use the contents of your documents for advertising.

4. How we share information

We share information only in these cases:

• With the people in a signing flow. A sender sees the signer's actions and audit trail. Signers see the document they were asked to sign. Other members of a workspace may see that workspace's documents, depending on their role.
• With service providers (subprocessors) that help us run the Service, under contracts that limit their use of the data. At a high level, these include cloud hosting and file storage, transactional email delivery, SMS delivery (coming soon), payment processing (coming soon), and error monitoring. Ask Inkpacket may use a third-party AI provider to answer questions only when an operator has set OPENAI_API_KEY or INKPACKET_LLM_KEY. When neither key is set, Ask answers from Inkpacket's own help, FAQ, and blog and does not send the question to an AI provider. We'll keep a current list of subprocessors available on request.
• With services you connect. If a workspace connects an outside service, such as a Google Drive folder for archiving completed documents (coming soon), or a webhook or API integration, we send data to it at the workspace's direction.
• For legal reasons. If required by law, subpoena, or court order, or to protect the rights, safety, or property of our users, the public, or Inkpacket.
• In a business transfer. If Inkpacket is merged, acquired, or sells its assets, information may transfer as part of that deal, and this policy will continue to apply to it.

5. How long we keep information

• Documents and audit trails are kept while the workspace exists. A deletion request can be emailed to support using the form on this page. Completed documents and audit trails are often needed as legal records, so we don't delete them on our own while the workspace exists.
• When a workspace is closed, the Service does not yet close or delete a workspace on its own. Submit a request on this page. Deletion timing after that request is not set to a number of days — it is still to be decided, except where we must keep something longer to meet a legal obligation, resolve a dispute, or enforce our agreements.
• Backups. Data is stored with our hosting providers, which keep their own short-term recovery copies.
• Logs are kept for a limited time for security and troubleshooting.

6. Security

We protect information with safeguards that include encrypted connections (HTTPS), hashed passwords, workspace isolation so one company's members can't see another company's documents, role-based permissions, and optional access codes that a sender can require before a signer opens a document. No system is perfectly secure, and we can't promise that information will never be accessed without permission. If we learn of a breach that affects your personal information, we'll notify you as the law requires.

7. Your choices and rights

• Account users can view and update account details in the Service, and can ask us to export or delete their account data.
• Signers who want a copy of a document, a correction, or deletion should contact the business that sent the document, since that business controls it. If you can't reach the sender, submit a request on this page and we'll try to help.
• Depending on where you live, you may have rights to access, correct, delete, or get a copy of your personal information, or to object to certain uses. We'll honor those requests as required by applicable law. We won't treat you differently for exercising your rights.

To make a request, use the form on this page. We may need to confirm your identity before acting on a request.

8. Cookies

We use cookies and similar tools that are needed to keep you signed in, remember your settings, and protect the Service. Google Tag Manager container GTM-MDN2T94K is live on inkpacket.com, so analytics cookies can be set through that tag. We do not sell personal information. Advertising tag IDs are not connected yet. If we add advertising cookies, we'll update this section and offer choices where the law requires.

9. Children's privacy

Inkpacket is a business tool and is not meant for children. We don't knowingly collect personal information from anyone under 13 (or under 16 where local law sets a higher age). If you believe a child has given us information, submit a request on this page and we'll delete it.

10. Where data is stored

Inkpacket is operated from the United States, and information is stored and processed in the United States. If you use the Service from outside the U.S., your information will be transferred to the U.S.

11. Changes to this policy

We may update this policy. If we make a significant change, we'll post the new version here with a new date and, where appropriate, notify account users by email or in the Service before it takes effect.

12. Contact us

Questions or requests about privacy: use the form below. It is saved for Inkpacket operators. Mailboxes at privacy@ and support@ are not listed here because delivery to a person has not been confirmed. See also the Terms of Service.

[Legal entity name — TBD]