1. Who is responsible for your information
Idey Technologies Ltd is the “controller” of the personal information described here. For documents you upload, you decide what goes in them; we handle them on your behalf to provide the service. Contact us about privacy at Inkwell <[email protected]>.
2. What we collect
When you create an account: your email address and, if you add it, your name.
When you use Inkwell:
- Documents you upload or write, every version of them, comments, and the names and email addresses of the people you invite to sign or review.
- Signatures, initials and other marks you or your signers add — including the drawing or typing data used to re-create a saved signature.
- A signing audit trail: when a document was opened, signed or declined, the IP address and browser/device details of the signer, and one-time verification events. This is what makes a signed document provable.
- Notifications and activity inside your account.
- If you use branding: the name, colour and logo you upload. They are shown to the people you send documents to, and the logo is publicly reachable at its link so email apps can display it.
- If you use the developer tools: the names and fingerprints of your API keys (never the key itself) and delivery logs for your webhooks.
When you pay: your payment is handled by Paystack. We receive confirmation of the payment, your plan, amount, currency and a customer reference — not your full card number.
Payments collected through a document: when a sender asks a signer to pay, Paystack processes the payment and settles it to the sender's bank account. We store the amount, reference and status, and — for senders who get paid — the bank name, account name and last four digits of the account (the full number goes to Paystack, not into our database).
Technical data: basic logs (such as IP address, request time, errors) kept for security and to keep the service running.
If you only sign a document: we collect what's needed for that signing — your email (already known to the sender), your signature, and the audit data above.
3. Why we use it
- To provide Inkwell: store and display your documents, run signing, send emails and notifications, build the signed PDF and certificate.
- To keep it secure and prevent abuse: verify emails, rate-limit sign-in and signing attempts, detect fraud.
- To take payment and manage your plan.
- To support you when you contact us.
- To meet legal obligations, and to protect our rights if there is a dispute.
- To improve the product, using aggregated and non-identifying information. We do not read your documents for this.
4. Our legal grounds
Depending on where you live, we rely on: performing our contract with you (providing Inkwell), legitimate interests (security, preventing abuse, improving the service), legal obligation (tax, accounting, responding to lawful requests) and consent where we ask for it (for example, optional marketing email, if we ever send it).
6. Where your information is processed
Our providers may process data in countries other than your own. Where we transfer personal information across borders, we use safeguards required by applicable law, such as contractual protections.
7. How long we keep it
- Documents, versions and signatures are kept while your account is active, because the history is the point.
- Signed documents and their audit records may be kept after account closure for as long as needed to prove what was signed — including for other people who signed or hold a copy.
- You can download everything we hold about you, or delete your account yourself, under Settings → Your data. Deleting removes your documents, signatures, templates and stored files; signed copies already delivered to other parties are theirs to keep.
- If you ask us to delete your account, we delete or anonymise your personal information within a reasonable time, except what we must keep for legal, tax or security reasons (for example payment records).
- Sign-in codes and links expire within minutes and are stored only as one-way hashes.
8. How we protect it
We use access controls on every document, expiring file links, hashed sign-in codes, email verification for signers, rate limiting, and tamper-evident certificates. No system is perfectly secure, but we take protecting your documents seriously. Read more on our Security page.
9. Your rights
Depending on where you live (for example under the Nigeria Data Protection Act 2023, the GDPR or similar laws) you may have the right to:
- access the personal information we hold about you and get a copy;
- correct information that is wrong;
- delete your information, or restrict or object to how we use it;
- move your data to another service;
- withdraw consent you previously gave;
- complain to your data protection authority (in Nigeria, the Nigeria Data Protection Commission).
Email Inkwell <[email protected]> and we'll respond within a reasonable time (usually within 30 days). Some information inside signed documents belongs to other people too, so we may not be able to remove it without their involvement.
11. Children
Inkwell is not meant for people under 18, and we don't knowingly collect their information. If you believe a child has given us information, contact us and we'll delete it.
12. Changes to this policy
If we change how we handle information in a meaningful way, we'll update this page and, for important changes, tell you by email or inside Inkwell.
13. Contact
Privacy questions or requests: Inkwell <[email protected]>.
Questions about this page? Contact us or write to Inkwell <[email protected]>.