Privacy Notice

Last updated: 5/21/2026

1. Who we are

InkSwift is operated by Danielle DuBois LLC ("we", "us"). We act as the data controller for personal data you provide when you use InkSwift.

2. Data we collect

• Account data: name, email, password hash, business name, phone.
• Contract data: documents, signer names, emails, signature images, and audit events.
• Technical data: IP address, device and browser info, timestamps, geolocation derived from IP.
• Usage data: pages visited, features used, support requests.
• Payment data: handled by Paddle as Merchant of Record; we receive limited metadata (plan, status, last four).

3. How we use your data

• Provide and operate the Service (contract performance);
• Authenticate users and secure accounts (legitimate interests, legal obligation);
• Generate tamper-evident audit trails for legal enforceability (contract performance, legal obligation);
• Provide customer support (contract performance);
• Detect and prevent fraud and abuse (legitimate interests);
• Send transactional and, with consent, marketing emails (consent, legitimate interests);
• Improve the Service (legitimate interests).

4. Sharing

We share personal data with:

• Service providers / sub-processors who host and operate the Service (see our Trust Center).
• Paddle, our Merchant of Record, for payment processing, subscription management, tax, and invoicing.
• Professional advisers (legal, accounting) under confidentiality.
• Authorities where required by law or to protect rights, safety, and property.

5. International transfers

Data may be processed in the United States and other countries where our sub-processors operate. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

6. Retention

We retain personal data only as long as needed for the purposes above, to comply with legal obligations, and to enforce agreements. Signed contracts and audit trails are retained for the legally required evidentiary period. You can request deletion at any time, subject to those obligations.

7. Your rights

Depending on your jurisdiction (including GDPR, UK GDPR, and CCPA), you may have the right to access, correct, delete, port, or object to processing of your personal data, and to withdraw consent. EU/UK users may also lodge a complaint with their supervisory authority. Email privacy@inkswift.app and we will respond within 30 days.

8. Security

We implement appropriate technical and organizational measures, including encryption in transit (TLS 1.2+) and at rest (AES-256), row-level access controls, and continuous monitoring. See our Trust Center.

9. Cookies

We use essential cookies required to operate the Service (authentication, session, security). We may also use limited analytics cookies to understand usage. You can control cookies via your browser settings.

10. Children

InkSwift is not directed to children under 16 and we do not knowingly collect their data.

11. Changes

We will post updates to this notice here and, for material changes, notify you by email or in product.

12. Contact

Danielle DuBois LLC — privacy@inkswift.app