1. Overview
This Privacy Notice describes how Inkset (“Inkset”, “we”) collects, uses, stores, and protects personal data. It covers two groups of people: visitors to the inkset.io website, including anyone who requests beta access or sends us a message, and users of the Inkset platform once it is available to them, including signers, contract creators, and collaborators.
Inkset is operated from the United States. The platform is in private beta; sections of this notice that describe platform features such as identity verification and on-chain records apply when those features are in use.
2. Information We Collect
Website visitors and beta applicants
Beta access requests. When you request early access we collect your first and last name, email address, industry, and, if you sign up on behalf of a business, your company name, job title, and company size. We record the date and the consents you gave when submitting.
Contact messages. When you contact us we collect your name, email address, the topic you choose, and the content of your message.
Website usage. Our hosting provider records standard server logs (IP address, browser type, pages requested, timestamps) to operate and secure the site. We use cookie-free, aggregated analytics to understand which pages are visited. We do not use advertising cookies or cross-site tracking on the website. Section 3 lists exactly what, if anything, the website stores in your browser.
Platform users
Identity verification data. To use the platform you complete an identity verification (KYC) process with our identity verification provider. We collect your name, date of birth, government-issued identification, business registration information (where applicable), and related verification results.
Account information. Your name, email address, mailing or business address, phone number, and any other information you provide when creating or managing your account.
Document content. The contents of agreements and documents you upload, create, or sign through the platform. Agreement documents may contain financial details such as bank account information that the parties include in their own terms. Inkset does not hold or transfer funds; such details are stored and protected as document content under Section 5.
Payment information. When paid plans are introduced, subscription payments will be processed by Stripe. Stripe collects your card details directly; Inkset receives only a payment reference, the card brand, and the last four digits.
Signature records. When you sign a document, we collect your name, email, IP address, device and browser information, the time of signing, your unique Signature ID, and the blockchain transaction ID anchoring the signature, as described in the Electronic Signature & Cryptographic Identity Policy.
Usage data. Information about how you access and use the platform, including log data and device identifiers.
4. How We Use Your Information
We use your information to respond to your beta request or message, operate and improve the website and platform, verify your identity, execute and record electronic signatures, communicate with you about your account and transactions, comply with legal and regulatory obligations, and maintain the security and integrity of our services.
Marketing email. We send news, launch updates, and other marketing email only if you opted in when you requested beta access or contacted us. Every marketing email includes an unsubscribe link, and you can opt out at any time by using that link or by writing to info@inkset.io. Messages about your beta request, your account, or a transaction are not marketing and are sent regardless of that choice.
5. How We Store and Protect Your Information
Website form submissions are stored in a managed database (Supabase) hosted in the United States and are accessible only to Inkset staff through server-side credentials. The website is hosted on Vercel.
We use industry-standard technical and organizational measures to protect personal information, including encryption of data at rest and in transit, access controls limiting who within Inkset can view personal information, and secure key management infrastructure for cryptographic operations.
Document content, including any financial details the parties include in an agreement, is encrypted and subject to access restrictions beyond those applied to general account information. Inkset does not hold, custody, or transfer funds.
No personal information is stored on the blockchain. On-chain records contain only cryptographic hashes, addresses, and status information, as described in the Electronic Signature & Cryptographic Identity Policy.
6. International Data Transfers
Inkset’s infrastructure is operated from the United States. If you are located outside the United States, your personal data will be transferred to, stored, and processed in the United States. Where required by applicable law, including the EU General Data Protection Regulation (GDPR), the UK GDPR, and Brazil’s Lei Geral de Proteção de Dados (LGPD), Inkset relies on appropriate safeguards, such as Standard Contractual Clauses, to govern such transfers.
7. Data Retention
Beta requests and contact messages are retained while we evaluate and run the beta program and for up to 24 months after our last contact with you, unless you ask us to delete them sooner or you have opted in to marketing email, in which case we retain your contact details until you unsubscribe.
Signature records and executed documentsare retained for a minimum of seven years in accordance with the U.S. ESIGN Act and equivalent record-keeping requirements in other jurisdictions, as described in the Electronic Signature & Cryptographic Identity Policy. On-chain records are permanent and cannot be deleted.
Other account information is retained for as long as your account is active, and for a reasonable period after closure as needed to comply with legal obligations, resolve disputes, and enforce agreements.
8. Your Privacy Rights
Depending on your location, you may have rights under applicable data protection law, including the right to access, correct, or request deletion of your personal data, the right to object to or restrict certain processing, and the right to data portability.
California residents. Under the California Consumer Privacy Act you have the right to know what personal information we collect and how we use it, to request its deletion or correction, and not to be discriminated against for exercising these rights. Inkset does not sell personal information and does not share it for cross-context behavioral advertising.
Right to erasure and legal-obligation exemption. Where you request deletion of personal data that forms part of a signature record or executed document subject to the retention requirements described in Section 7, Inkset will retain that record under the legal-obligation exemption available under applicable law (including GDPR Article 17(3)(b)), notwithstanding your request. Other personal data not subject to such retention requirements will be deleted upon a verified request.
To exercise any privacy right, contact info@inkset.io. We respond within the time required by applicable law, and in any case within 30 days.
10. Data Breach Notification
If a breach involving your personal data occurs, Inkset will notify affected individuals and relevant authorities as required by applicable law, including within 72 hours where required under GDPR.
11. Children’s Privacy
The website and platform are not directed to individuals under the age of 18, and Inkset does not knowingly collect personal data from children.
12. Changes to This Notice
Inkset may update this Privacy Notice from time to time. Material changes will be communicated to you by email or a notice on the website, and the date at the top of this page will be updated.
13. Contact
Questions about this Privacy Notice, or requests regarding your personal data, may be directed to info@inkset.io.