Privacy and your images

Who to contact

Ink Signature Studio

Contact support to ask about an order, request a refund, or exercise your privacy rights. Use the same guest browser or sign in with the account used for your purchase to see replies.

What we use and why

We use your account identifier or a random guest identifier to keep uploads, purchases, results and support requests together. Our sign-in provider also supplies your email address, which is used to verify the site owner’s testing access. We process your selected image or PDF crop, generated images, saved edits, processing status and order details to provide the service.

Image processing and purchase fulfilment are necessary to perform the service you request. We use limited processing diagnostics and failed candidates to investigate faults, protect the service and handle disputes. Payment and accounting records may also be retained to meet legal obligations. Support messages are used to answer your request.

You can select an image or crop a PDF before signing in. That working image is kept in this browser so it can be restored after choosing guest checkout or signing in; it is then sent to the service for preparation. The local draft is removed after preparation succeeds or you choose Start over. Drafts older than 24 hours are discarded when next accessed or when another draft is saved.

Where images go

Uploads and outputs are stored privately in the site’s hosted storage. Image processing and verification send the relevant image or crop to OpenAI. The service uses Sites hosting and Cloudflare-backed storage; Supabase handles account sign-in and Stripe handles checkout and refunds. Ink does not receive or store your full card number.

These providers may process data outside your country under their service terms and applicable transfer arrangements. Provider security logs, backups and retention are governed by their own policies; deleting images from Ink does not promise immediate erasure of every provider record.

Saved results and human review

Your original crop, generated results and edit versions are saved so that you can reopen your work. Unreleased candidates and their source references are also saved privately for troubleshooting. The site operator can review these when investigating quality or support issues.

Customer uploads are not automatically published. Public examples are selected separately with the uploader’s permission. Do not upload a full document when a small crop is enough for your task.

Storage and deletion

There is currently no automatic expiry for saved images. This describes current storage behavior, not a guarantee of permanent availability. Download copies you want to keep. In Support → Your saved images, choose Delete my saved images. This covers stored originals, previews, completed results, all edit revisions, unfinished verification images and rejected candidates associated with this account or guest session, including images from both test purchases and live purchases.

Access is blocked when deletion starts. If a job is running, deletion waits for it to finish before clearing the remaining files. Keep the page open until it confirms completion. If deletion is interrupted or storage is unavailable, reopen Support to continue the cleanup. The page shows when deletion has completed. Deletion cannot remove copies already downloaded to another device or previously cached public examples.

Image deletion does not delete payment records, support correspondence or the account identifiers needed to handle payments and requests. These records and non-image processing metadata currently have no automatic expiry. They support order administration, troubleshooting and dispute resolution; any required record-keeping must be considered when handling a broader deletion request. For a broader personal-data deletion request, choose Privacy request in Support so that we can explain what can be deleted and what must be retained.

Cookies, analytics and session recording

Essential cookies and browser storage keep sign-in, checkout and your working draft functioning. Guest checkout uses a secure cookie that grants access to that browser’s saved orders for up to 90 days. Clearing site data or changing browsers removes access to guest orders; download your results to keep them. Guest work is not automatically moved to an account if you later sign in. Optional analytics cookies and session recording start only after you choose Accept cookies. Rejecting optional cookies does not prevent you from using the site.

With your acceptance, PostHog measures page visits and named actions such as selecting an upload, clicking checkout and requesting a download. Random browser and session identifiers connect these events. We do not send account identities, email addresses, uploaded images, document text, filenames, payment references or support messages. URL query strings and fragments are removed.

Session recordings show browsing on public information pages, with inputs and media blocked. The upload and results studio is never recorded; it sends only named actions after acceptance. Account, support and owner pages are excluded. PostHog may receive technical browser and network information, including approximate location such as country derived from your IP address. Data is held in the operator’s PostHog project under its retention settings and PostHog’s privacy policy.

We remember your cookie choice, its date and this notice version in your browser for 180 days. Optional analytics cookies have a 180-day expiry; analytics also uses local and session storage. You can withdraw acceptance using Reject optional cookies below. This stops future analytics and recordings and clears the SDK’s stored identifiers in this browser; it does not erase previously collected activity. Browser privacy signals and existing opt-outs are respected. An earlier acceptance of cookieless analytics does not enable recording. Image deletion controls do not delete PostHog records; contact Support for a broader request.

Your choices and rights

You can request access, correction, deletion, restriction, objection or a portable copy of your personal data where applicable. Use Support. We may need to verify your identity. You may also complain to your local data-protection authority. We do not use your signature to authenticate your identity or make decisions about your credit, employment or legal rights.

Sign-in uses essential authentication storage. Ink does not currently add advertising trackers. Your browser may retain interface preferences and downloaded files independently of the saved images on our service.