Privacy and your images

Who to contact

Ink Signature Studio

Contact support to ask about an order, request a refund, or exercise your privacy rights. Sign in with the account used for your purchase to see replies.

What we use and why

We use your signed-in account identifier to keep uploads, purchases, results and support requests together. Our sign-in provider also supplies your email address, which is used to verify the site owner’s testing access. We process your selected image or PDF crop, generated images, saved edits, processing status and order details to provide the service.

Image processing and purchase fulfilment are necessary to perform the service you request. We use limited processing diagnostics and failed candidates to investigate faults, protect the service and handle disputes. Payment and accounting records may also be retained to meet legal obligations. Support messages are used to answer your request.

You can select an image or crop a PDF before signing in. That working image is kept in this browser so it can be restored after sign-in; it is then sent to the service for preparation. The local draft is removed after preparation succeeds or you choose Start over. Drafts older than 24 hours are discarded when next accessed or when another draft is saved.

Where images go

Uploads and outputs are stored privately in the site’s hosted storage. Image processing and verification send the relevant image or crop to OpenAI. The service uses Sites hosting and Cloudflare-backed storage; Stripe handles checkout and refunds. Ink does not receive or store your full card number.

These providers may process data outside your country under their service terms and applicable transfer arrangements. Provider security logs, backups and retention are governed by their own policies; deleting images from Ink does not promise immediate erasure of every provider record.

Saved results and human review

Your original crop, generated results and edit versions are saved so that you can reopen your work. Unreleased candidates and their source references are also saved privately for troubleshooting. The site operator can review these when investigating quality or support issues.

Customer uploads are not automatically published. Public examples are selected separately with the uploader’s permission. Do not upload a full document when a small crop is enough for your task.

Storage and deletion

There is currently no automatic expiry for saved images. This describes current storage behavior, not a guarantee of permanent availability. Download copies you want to keep. In Support → Your saved images, choose Delete my saved images. This covers stored originals, previews, completed results, all edit revisions, unfinished verification images and rejected candidates associated with this account, including images from both test purchases and live purchases.

Access is blocked when deletion starts. If a job is running, deletion waits for it to finish before clearing the remaining files. Keep the page open until it confirms completion. If deletion is interrupted or storage is unavailable, reopen Support to continue the cleanup. The page shows when deletion has completed. Deletion cannot remove copies already downloaded to another device or previously cached public examples.

Image deletion does not delete payment records, support correspondence or the account identifiers needed to handle payments and requests. These records and non-image processing metadata currently have no automatic expiry. They support order administration, troubleshooting and dispute resolution; any required record-keeping must be considered when handling a broader deletion request. For a broader personal-data deletion request, choose Privacy request in Support so that we can explain what can be deleted and what must be retained.

Optional visitor analytics

When enabled, PostHog measures page visits and named actions such as selecting an upload, clicking checkout and requesting a download. Analytics start only after you choose Allow analytics. A random browser identifier connects events in a browsing session; we do not send your account identity, email, uploaded images, document text, filenames, payment references or support messages. URL query strings and fragments are removed.

Recordings are limited to public information pages, with inputs and media blocked. The signed-in studio uses named actions only; support and owner pages are excluded. PostHog may receive technical information about your browser and network connection when enabled. Analytics records are held in the operator’s PostHog project under its retention settings and PostHog’s privacy policy.

Use Analytics preferences on a page with analytics enabled to change your choice. Declining or withdrawing consent stops future collection; it does not erase previously collected activity. Your browser stores the choice locally, and the analytics session identifier uses session storage. Browser privacy signals are respected. Image deletion controls do not delete PostHog records; contact Support for a broader request.

Your choices and rights

You can request access, correction, deletion, restriction, objection or a portable copy of your personal data where applicable. Use Support. We may need to verify your identity. You may also complain to your local data-protection authority. We do not use your signature to authenticate your identity or make decisions about your credit, employment or legal rights.

Sign-in uses essential authentication storage. Ink does not currently add advertising trackers. Your browser may retain interface preferences and downloaded files independently of the saved images on our service.