Legal

Privacy Policy

Your privacy matters. This policy explains what we collect when you use Inkbox, why we collect it, and your rights under GDPR.

Last updated: 2026-08-03

1. Who we are

Inkbox (https://useinkbox.app) is operated by Nicola Schiavo, based in France. For privacy questions or to exercise your rights, contact us at contact@useinkbox.app.

We act as the data controller for personal data described in this policy.

2. Scope

This policy applies to:

  • The Inkbox website and free conversion tools
  • Inkbox accounts, dashboard, and paid plans (Plus / Pro)
  • The Inkbox browser extension (Chrome, Brave, Firefox)

3. What we collect

Depending on how you use Inkbox, we may process:

  • Account data: email address, name (if provided), authentication identifiers, and sign-in metadata via Clerk.
  • Plan and billing metadata: membership tier, usage counters (for example articles sent this period), and Stripe customer / subscription identifiers. Card numbers are handled by Stripe; we do not store full payment card details.
  • Device and delivery settings: e-reader destinations you configure (labels, device types, delivery method, and where needed addresses such as @kindle.com or cloud folder links).
  • Article URLs and page content you submit on the website, or that the extension reads from the active tab when you choose Preview or Send (HTML/text/images needed to build a clean EPUB).
  • HTML you paste into free tools. We use this only to extract and convert the article. We do not use it to bypass paywalls on your behalf.
  • Generated files (EPUB or PDF) created to fulfill your request, and related delivery / job status in your account history.
  • Magazine content you stage for later delivery, if you use magazines.
  • IP address and request metadata for security and, for anonymous free tools, daily rate limits (3 EPUB conversions, 3 PDF conversions, and 3 sends per IP per 24 hours).
  • Usage analytics via Umami (page views, referrers, and aggregate product events). Umami is privacy-friendly, does not use advertising cookies, and does not profile visitors for ads.
  • Support emails if you contact us at contact@useinkbox.app.

4. Browser extension

The extension:

  • Asks you to sign in to your Inkbox account (session sync with https://useinkbox.app via Clerk).
  • Accesses the current page only when you start Preview or Send, to extract the article.
  • Stores limited data locally (for example sign-in cache, device list, quota status) so the popup loads quickly.
  • Does not sell your data, build a browsing-history profile, or run advertising trackers.

5. How we use your data

We use the information above to:

  • Create and manage your account and subscription.
  • Fetch, convert, preview, and deliver articles you request.
  • Send files to your e-reader or magazine workflow.
  • Enforce plan limits and prevent abuse.
  • Operate, secure, and improve the service.
  • Measure aggregate usage (not for advertising profiles).
  • Respond to support requests.

6. Legal bases (GDPR)

We rely on:

  • Contract / steps at your request (Art. 6(1)(b)): account, conversion, delivery, and paid features you request.
  • Legitimate interests (Art. 6(1)(f)): security, abuse prevention, rate limiting, and basic product analytics.
  • Consent (Art. 6(1)(a)): where applicable, for optional communications you explicitly opt into.
  • Legal obligation (Art. 6(1)(c)): when we must retain or disclose data under law (including billing records where required).

7. Retention

  • Account data: kept while your account is active and for a reasonable period afterward if needed for security, disputes, or legal duties.
  • Delivery / conversion history: kept in your account so you can see past jobs; you may request deletion.
  • Article payloads for a single send: processed to fulfill the request. We do not sell article libraries built from your browsing.
  • Anonymous rate-limit counters: up to 24 hours in Redis (Upstash), then expire.
  • Analytics: per Umami plan retention (Hobby: up to 6 months).
  • Support emails and delivery logs (for example via Resend): kept as needed for support and deliverability, then deleted or anonymized.

8. Processors and third parties

We use trusted providers to run Inkbox. They process data on our instructions:

  • Hetzner (application hosting on our VPS)
  • Clerk (authentication and session management)
  • Stripe (payments and subscriptions)
  • Database hosting (PostgreSQL via our database provider)
  • Umami (privacy-friendly web analytics)
  • Resend (transactional email to e-reader addresses)
  • Upstash (Redis for rate limiting)
  • Jina Reader (fetching some articles when a direct server fetch is blocked)

Some providers may process data outside the European Economic Area. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) offered by those vendors.

When you send to Kindle, Amazon receives the email and attachment under its own terms and privacy policy. Other device vendors (for example PocketBook cloud) may likewise receive files you choose to send. We do not control how those vendors handle that data.

9. Cookies and similar technologies

We use essential cookies / storage for authentication (Clerk) and to keep you signed in. The browser extension also uses extension local storage for caches described above.

We use Umami for privacy-friendly analytics on the website. It is not used for cross-site advertising. We do not run marketing pixels or social trackers on the marketing site today.

If we introduce non-essential cookies beyond this, we will update this policy and, where required, ask for consent.

10. Your rights

If you are in the EEA, UK, or Switzerland, you may have the right to access, rectify, erase, restrict, or object to certain processing, and to data portability where applicable. You may also lodge a complaint with your supervisory authority. In France, this is the CNIL.

To exercise your rights, email contact@useinkbox.app from the address on your account when possible. We may need to verify your request.

11. Children

Inkbox is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Security

We use HTTPS, access controls, and reputable infrastructure providers. No method of transmission or storage is 100% secure; we work to reduce risk proportionate to the data we handle.

13. Changes

We may update this policy as the product evolves. We will post the new version on this page and update the "Last updated" date. Material changes may also be highlighted on the site.

14. Contact

Nicola Schiavo
Email: contact@useinkbox.app
Contact page

See also our Terms of Service and Legal notice.