Privacy Policy

This Privacy Policy explains how Inklok ('Inklok', 'we', 'us', or 'our') collects, uses, discloses, and protects information when you use inklok.com, the Inklok application, and related services.

Inklok provides agreement workflow and electronic signature tools. Sensitive agreement data may be encrypted client-side before transmission to Inklok. Other information, including documents, workflow metadata, routing information, audit events, and account information, may be processed to provide the service.

Account information, such as name, email address, organization name, authentication identifiers, and role information.

Agreement workflow metadata, such as template names, workflow states, signer routing information, timestamps, audit events, and non-encrypted operational data needed to run the service.

Encrypted agreement data and encrypted agreement artifacts where applicable.

Billing information associated with paid plans, which may be handled by service providers.

Usage, device, and log data, including IP address, browser type, pages visited, API usage, and security telemetry.

Support communications and any information you choose to provide when contacting us.

To provide, secure, maintain, and improve Inklok.

To authenticate users, manage organizations, enforce permissions, and operate agreement workflows.

To process payments, send service notices, respond to support requests, and communicate product updates.

To monitor service reliability, prevent abuse, investigate security events, and comply with legal obligations.

Service providers that help us host, secure, operate, support, analyze, or bill for the service.

Organization administrators and authorized users according to workspace settings and permissions.

Legal, compliance, or safety recipients when required by law or necessary to protect rights, safety, or security.

Business transfer recipients if we are involved in a merger, acquisition, financing, or sale of assets.

We use technical and organizational measures intended to protect information. Inklok is designed to reduce plaintext exposure by encrypting sensitive agreement data in the browser where applicable.

No method of transmission or storage eliminates all risk. Customers are responsible for managing account access, device security, and the accuracy of invited users and signing parties.

We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security records.

Retention periods may vary based on account status, plan settings, customer instructions, backup practices, legal requirements, and the type of information involved.

Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of personal information.

Organization data requests may need to be directed to the organization administrator. Contact privacy@inklok.com for privacy requests, including data deletion and GDPR-style requests.

Inklok may process information in countries where we or our service providers operate. We use appropriate safeguards for international transfers where required by applicable law.

We may update this policy from time to time. We will post the updated version and revise the effective date when changes are made.

Contact Inklok at privacy@inklok.com.