Privacy Policy

Last updated: May 2025

This Privacy Policy explains how Inkvor (“we,” “our,” or “us”) collects, uses, and protects information about you when you use our AI image generation, video generation, and photo restoration services at inkvor.com.

1. Information We Collect

Account information

When you sign up, we collect your email address and name via Google OAuth. We do not store your Google password.

Content you provide

We collect the prompts you write, images you upload for restoration or reference, and all AI-generated outputs (images, videos, restored photos) produced during your sessions.

Payment information

We collect subscription status, plan type, and credit balance. Payment card details are handled directly by our payment provider (Lemon Squeezy) and are never stored on our servers.

Usage and log data

We collect generation history, credit transaction records, and server logs (IP address, browser type, timestamps) for security, billing, and abuse prevention purposes.

2. How We Use Your Data

  • To provide and operate the Inkvor service (authentication, generation, storage)
  • To manage your subscription, process payments, and maintain your credit balance
  • To display your generation history in your account dashboard
  • To detect and prevent abuse, fraud, and policy violations
  • To respond to support requests and billing inquiries
  • To send transactional emails (payment receipts, subscription changes)
  • To comply with legal obligations

We never use your generated content or prompts to train AI models. We do not sell your personal data to third parties.

3. Third-Party Services

We use the following third-party services to operate Inkvor. Each service processes data according to its own privacy policy:

Supabase:Authentication, user database, and account management
Cloudflare R2:Storage of AI-generated images, videos, and restored photos
PiAPI:AI image generation (Flux models) and video generation (Kling models) — your prompts and generation parameters are transmitted to PiAPI for processing
fal.ai:Photo restoration processing (ESRGAN + CodeFormer) — uploaded photos are transmitted to fal.ai for processing
Lemon Squeezy:Payment processing, subscription management, and invoicing
Plausible Analytics:Privacy-first website analytics — no cookies, no personal data, no cross-site tracking
Sentry:Error monitoring and crash reporting to maintain service reliability

Important: When you submit a prompt or upload an image, that content is transmitted to our AI model providers (PiAPI and fal.ai) for processing. Please do not include sensitive personal information in your prompts or uploaded files.

4. Cookies & Tracking

Inkvor uses session cookies to keep you logged in. These are strictly necessary for the service to function.

We use Plausible Analytics for aggregate traffic analysis. Plausible does not use cookies, does not collect personal data, and does not track individuals across websites. No advertising or behavioral tracking cookies are used.

5. Data Retention

  • Generated files (free accounts): stored for 7 days, then automatically deleted
  • Generated files (paid accounts): stored for the duration of your active subscription, plus 30 days after cancellation
  • Account information: retained while your account is active and for up to 30 days after deletion
  • Payment records: retained for 7 years as required by applicable tax and financial regulations
  • Support communications: retained for 2 years to assist with disputes and follow-up requests
  • Server logs: retained for 90 days for security and debugging purposes

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: request a copy of the data we hold about you
  • Correction: request that inaccurate data be corrected
  • Deletion: request that your account and associated data be deleted
  • Export: request a machine-readable export of your data
  • Objection: object to certain types of processing

To exercise any of these rights, email us at support@inkvor.com. We will respond within 30 days.

7. Data Security

We use HTTPS encryption for all data in transit. Generated files are stored on Cloudflare R2 with access controls. Authentication is managed by Supabase with industry-standard security practices. While we take reasonable steps to protect your data, no system is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

Inkvor is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the site. Continued use of Inkvor after changes take effect constitutes your acceptance of the updated policy.

10. Contact

For privacy questions or data requests, contact us at support@inkvor.com.