Legal

Privacy Policy

What personal data Inkwisp collects, why, who we share it with, how long we keep it, and the choices and rights you have.

Last updated Sep 25, 2026

The short version

Your creations are private by default. Nothing is public unless you publish it or share a link.
We never train AI models on your uploads or creations.
We send your prompt and inputs to the model provider you chose only to produce your result.
We do not sell your personal data, and we do not use advertising cookies.
You can access, correct, export or delete your data. Write to privacy@inkwisp.ai.

This summary is for convenience. The full text below is what applies.

On this page

1. Who we are

Inkwisp is operated by Techcible ([legal entity name], [registered address]). Techcible is the controller (under the GDPR) and the data fiduciary (under India’s Digital Personal Data Protection Act, 2023) for the personal data described in this policy.

Questions about privacy go to privacy@inkwisp.ai. Our Grievance Officer is [name of Grievance Officer] (grievance@inkwisp.ai). If you are in the European Union or the United Kingdom, you can also reach our representative at [EU/UK representative contact].

If you use Inkwisp through a Business or Enterprise workspace, your organisation controls the workspace content, and its own privacy terms also apply.

2. What we collect

Category	Examples	Source
Account	Name, e-mail address, password (stored only as a salted hash), Google account id if you sign in with Google, verification status	You, Google
Profile	Handle, display name, bio, avatar, onboarding answers you choose to give, notification preferences	You
Your content	Prompts, uploaded images, video and audio, references, voice samples, training images, Cast members, custom models, and the outputs we generate	You, our model providers
Activity	Generations and their settings, credits held and spent, Library organisation, likes, follows, comments, reports	Your use of Inkwisp
Payments	Plan, orders, amounts, currency, invoices and payment status. Card and bank details are handled by Stripe or Razorpay and never reach us	You, Stripe, Razorpay
Device and technical	IP address, a random device identifier stored in a cookie, browser type, pages and errors in our server logs	Your browser
Communications	Messages you send to support, and whether you open service e-mails	You

We do not ask for sensitive personal data. Do not upload information such as government ID numbers, health records or financial details in prompts or files. Images of faces are processed only to run the tools you choose and to apply the safety checks described below.

3. How we use your data

To provide Inkwisp: create your account, run your generations, store your Library, show prices, hold and capture credits, and deliver notifications.
To bill you: process subscriptions and purchases, prevent payment fraud, and keep records the law requires.
To keep Inkwisp safe: check prompts and media against our content rules, detect minors and protected public figures in likeness tools, prevent duplicate free trials and abuse (using the device identifier and IP address), and respond to reports.
To support you: answer your questions and investigate problems you report.
To improve Inkwisp: measure, in aggregate, which tools and models work well, how long generations take and where errors happen. This never involves training AI models on your content.
To communicate: send service messages (receipts, security alerts, retention warnings) and, only if you opt in, product news. You can turn off marketing e-mail at any time.
To meet legal obligations: tax and accounting, law-enforcement requests, and the protection of rights.

4. Legal bases

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (providing the Service you signed up for); legitimate interests (security, fraud and abuse prevention, improving the Service, which we balance against your rights); consent (optional marketing e-mail and optional browser notifications, which you can withdraw at any time); and legal obligation (tax records, responding to lawful requests).

Under India’s DPDP Act we process your data with your consent, given when you create an account, and for the legitimate uses the Act allows, such as complying with law. You can withdraw consent at any time; this may mean we can no longer provide the Service.

5. AI models and your content

We never train AI models on your uploads or creations, and we never use them to build or improve our own models.
When you run a generation, we send the prompt, settings and inputs it needs to the provider of the model you chose (for example through fal.ai or the model maker’s own API). Providers receive them only to produce your result, under terms that limit their use of that data.
Results are downloaded from the provider to our own storage. Uploaded images are re-encoded, which removes EXIF data such as GPS location.
Chat with Wisp, prompt enhancement and prompt-from-image send your text (and any images you attach) to a language-model provider to produce the reply.

7. International transfers

Inkwisp and its providers operate in several countries, including India, the United States and the European Union, so your data may be processed outside your country. When we transfer personal data from the EU, the UK or other places with transfer rules, we use appropriate safeguards such as the European Commission’s standard contractual clauses and the UK addendum.

8. How long we keep data

Data	Kept for
Account and profile	While your account is open
Private creations on a never-paid account	7 days after creation
Private creations on a paid account	While you are subscribed or hold purchased credits
Private creations after a subscription ends	14 days after the paid period ends
Published creations	Until you unpublish them or delete your account
Credit ledger, orders and invoices	As long as tax and accounting law requires; anonymised when you delete your account
Safety and moderation records	As long as needed to enforce our policies and meet legal duties
Server logs	For a limited period for security and debugging, then deleted

When you delete your account we delete your profile and content, and anonymise the ledger and payment records we must keep. A legal hold can delay deletion while a legal matter is open.

9. Security

Connections are encrypted with TLS.
Your session is kept in an httpOnly cookie that page scripts cannot read, and our server never exposes its API keys to the browser.
Private files are stored in private storage and served through links that expire after a short time.
Staff access to customer data is limited to people who need it, logged, and protected by strong authentication.

No system is perfectly secure. If you believe your account or data is at risk, contact support@inkwisp.ai straight away. We will notify you and the relevant authorities of a personal-data breach where the law requires it.

10. Your rights and choices

Depending on where you live, you have the right to: access your data; correct it; delete it; export a copy in a portable format; object to or restrict certain processing; withdraw consent; and, under the DPDP Act, nominate someone to exercise your rights if you die or become unable to. You also have the right to complain to a data-protection authority, such as your local EU authority, the UK Information Commissioner’s Office, or the Data Protection Board of India.

Edit your profile and preferences in Account settings.
Delete your account from Account settings → Delete account.
For access, export or anything else, write to privacy@inkwisp.ai. We may need to confirm your identity, and we answer within 30 days.
Turn off marketing e-mail from the link in any such e-mail or in your notification settings.