Privacy Policy

• Text scanned without an account is processed in memory and never written to a database.
• If you are signed in we store the score, the word count and the first 200 characters of the text, so your history is readable. We do not store the full document.
• We never use your text to train a model, and we never sell data to anyone.
• We store a one-way hash of your IP address to stop abuse of the free tier. The address itself is never written down.
• We never see your card details. Stripe handles payment end to end.

We do not run advertising trackers, we do not build profiles, and we do not make automated decisions that produce legal effects about you. The detection score is about a text, not about a person, and it is returned to you rather than acted on by us.

This is the part people care about most, so it is set out plainly.

• Anonymous scans: the text is held in memory for the length of the request and is never written to storage.
• Signed-in scans: the text itself is still not stored. What is stored is the numeric result plus a 200-character excerpt so that your history means something when you look at it later.
• If a third-party detection or rewriting engine is enabled, the text is sent to that provider to produce the result. The providers currently in use are listed on the subprocessor page.
• Your text is never added to a training set, ours or anyone else’s.

If you would rather no excerpt were kept at all, use the service without signing in, or delete the scan from your dashboard afterwards.

We use a small number of processors, each under a data processing agreement, each restricted to what it needs. The full list, what each receives and where it stores it, is on the subprocessor page, which we keep current.

We do not sell personal data, and we do not share it for cross-context behavioural advertising, as those terms are used in United States state privacy laws.

We operate from Brazil. Our infrastructure providers store data in the United States and the European Union. Transfers out of the European Economic Area and the United Kingdom rely on the European Commission's Standard Contractual Clauses, or on an adequacy decision where one exists. Transfers out of Brazil rely on the mechanisms in articles 33 to 36 of the LGPD.

Under the Brazilian General Data Protection Law (Lei 13.709/2018) and, where it applies to you, the GDPR, you can ask us to:

• Confirm whether we hold data about you, and give you a copy of it
• Correct anything that is incomplete, inaccurate or out of date
• Delete data we no longer have a lawful reason to keep
• Port your data to another provider in a machine-readable format
• Restrict or object to processing based on our legitimate interest
• Withdraw consent at any time, where consent is the basis we relied on
• Be told which third parties we have shared your data with

Write to privacy@inkprintos.com. We reply within 15 days, which is the LGPD deadline, and within 30 days for GDPR requests. We do not charge for this and we do not require a specific form of words.

If you are not satisfied you may complain to the Brazilian data protection authority (ANPD) or, if you are in the European Economic Area or the United Kingdom, to your local supervisory authority.

Traffic is encrypted in transit with TLS. Data at rest is encrypted by our infrastructure providers. Access to production data is limited to the account owner. There are no passwords to leak because sign-in is a one-time email link.

No system is perfectly secure. If a breach affects your data and creates a risk to you, we will tell you and the ANPD without undue delay, as article 48 of the LGPD requires.

The service is not directed at children under 16. We do not knowingly collect their data. If you believe a child has created an account, write to privacy@inkprintos.com and we will delete it.

Covered separately in the Cookie Policy, which lists every cookie the site sets. You can change your choice at any time from the link in the footer.

If we change this policy materially we will email account holders and post the new version here with a fresh date. The date at the top of this page is always the date of the version you are reading.

Fabio Lima Sant Ana acts as the person responsible for data processing under article 41 of the LGPD. Reach that role at privacy@inkprintos.com, or by post at the address at the top of this page.