1. Introduction
Welcome to Inkroost ("we", "our", "us"). We are committed to protecting your personal data
and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our service
at https://inkroost.com.
2. Data Controller
The data controller responsible for your personal data is:
- Name: Inkroost
- Email: hello@inkroost.com
- Address: Leiden, Netherlands
3. What Data We Collect
We may collect and process the following personal data:
- Account data: Name, email address, password (hashed), profile information
- Usage data: Pages visited, features used, timestamps, IP address, browser type
- Pricing page activity: Which parts of our pricing page you view and which plans or packs you choose, with the kind of device you use and the site you arrived from. We measure this ourselves, keep it in our own database, never share it with third parties, and remove the link to you after 90 days.
- Payment data: Billing address, payment method details (processed securely by Stripe — we do not store card numbers)
- Communication data: Messages, support requests, feedback you send us
- Cookie data: See our Cookie section below
4. Legal Basis for Processing
We process your data based on the following legal grounds (GDPR Article 6):
- Contract performance: To provide you with our service and manage your account
- Legitimate interests: To improve our service (including measuring how our own pages are used, without third parties), prevent fraud, and ensure security
- Consent: For optional cookies, marketing communications, and third-party analytics (Google Analytics)
- Legal obligation: To comply with tax, accounting, and regulatory requirements
5. How We Use Your Data
- To create and manage your account
- To provide and improve our service
- To process payments via Stripe
- To send transactional emails (account confirmations, password resets)
- To send marketing communications (only with your explicit consent)
- To detect, prevent, and address technical or security issues
- To comply with legal obligations
- To make the AI pages, voices and animated episodes you ask for, and to let our staff review them, published or not, for quality, safety and support
- To publish the animated episodes you choose to your own YouTube channel, when you connect it
6. Data Sharing
We may share your data with:
- Stripe: Payment processing (Stripe Privacy Policy)
- Hosting provider: To host and serve our application
- Email provider: To send transactional and marketing emails
- Google Analytics: Anonymized usage data, only with your consent (Google Privacy Policy)
- AI providers: To create the pages, voices and animated episodes you ask for. They receive the text and images that request needs, not your account details.
- YouTube (Google): When you connect your YouTube channel, we use YouTube API Services to upload the episodes you choose to it. We keep your channel's ID, name and picture, the access Google gives us (encrypted) and the videos you published from Inkroost; we never read or change anything else on your channel. See the Google Privacy Policy. You can disconnect on any episode's page, or remove Inkroost in your Google account permissions.
We do not sell your personal data to third parties.
7. Data Retention
- Account data: Retained while your account is active, deleted within 30 days of account deletion
- Payment records: Retained for 7 years as required by tax regulations
- Usage logs: Retained for 90 days, then anonymized or deleted
- Support communications: Retained for 2 years after resolution
- Animated episodes: Finished episodes are kept while your account is active and deleted with it; the working files used to make them are deleted 30 days after the episode is finished
- YouTube connection: Your channel's name and picture are read again from YouTube at least every 30 days. Everything we keep from YouTube is deleted when you disconnect or delete your account, and within 30 days after you remove Inkroost's access at Google
8. Your Rights (GDPR)
Under GDPR, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Request restricted processing of your data
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Withdraw consent at any time without affecting prior processing
To exercise any of these rights, contact us at
hello@inkroost.com.
We will respond within 30 days.
9. Cookies
We use the following types of cookies:
- Essential cookies: Required for the service to function (session, CSRF token). These cannot be disabled.
- Analytics cookies: Google Analytics cookies that help us understand how visitors use our service. Only set with your consent — until you accept them, the analytics tag runs in consent-denied mode and stores nothing on your device.
- Preference cookies: Remember your settings (e.g., dark mode). Only set with your consent.
You can manage your cookie preferences at any time via the cookie settings banner.
10. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
encryption in transit (TLS/HTTPS), encrypted storage for sensitive data, regular security audits,
access controls, and secure coding practices.
11. International Transfers
Your data may be processed outside the European Economic Area (EEA). Where this occurs,
we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs)
approved by the European Commission.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes
by email or by displaying a notice in the application. We encourage you to review this page periodically.
13. Contact & Complaints
If you have questions or complaints about how we handle your data, contact us at
hello@inkroost.com.
You also have the right to lodge a complaint with your local data protection authority.
In the Netherlands, this is the Autoriteit Persoonsgegevens.