Privacy Policy

Privacy Policy for Inkwell Oasis Cloud

Last Updated: 11/27/2025

At Inkwell Oasis, accessible from https://inkwelloasis.com, we are committed to protecting your privacy. This Privacy Policy describes how we collect, use, and safeguard your information when you use the Inkwell Oasis Cloud platform ("Service"). By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following types of information:

1.1 Account Information

• Personal identification information: Name, email address, and profile information you provide during registration
• Authentication data: Encrypted passwords and session tokens
• Organization information: Organization name, team member details, and role assignments

1.2 Third-Party Integration Data

When you connect third-party services to Inkwell Oasis Cloud (such as Notion, WordPress, GitHub, Medium, LinkedIn, Twitter/X, Instagram, Discord, Slack, Microsoft Teams, and others), we may collect:

• OAuth tokens and API credentials: Required to access your connected accounts on your behalf
• Workspace and account metadata: Names, IDs, and configuration details from connected platforms
• Content data: Data you explicitly authorize us to access, such as pages, databases, posts, or messages from connected services

1.3 Workflow and Usage Data

• Workflow definitions: The automated workflows you create and configure
• Execution logs: Records of workflow runs, including timestamps, status, and performance metrics
• Usage statistics: Information about how you interact with the Service, including features used and frequency of use

1.4 Conversational Data

When you interact with Inkwell Oasis Cloud through conversational channels (Email, WhatsApp, Discord, Slack, Microsoft Teams), we collect:

• Message content: Instructions and responses exchanged with the platform
• Channel identifiers: Information to maintain conversation threading and identity verification

1.5 Technical Data

• Device and browser information: IP address, browser type, operating system, and device identifiers
• Cookies and tracking technologies: Session cookies and similar technologies to maintain your login state and preferences
• Log data: Server logs including access times, pages viewed, and error reports

2. How We Use Your Information

Inkwell Oasis Cloud uses collected information for the following purposes:

• Provide and maintain the Service: Execute workflows, connect to third-party services, and deliver the features you request
• Account management: Create and manage your account, authenticate your identity, and process your requests
• Communication: Send service-related notifications, respond to inquiries, and provide customer support
• Improvement and analytics: Analyze usage patterns to improve the Service, fix bugs, and develop new features
• Security: Detect, prevent, and address technical issues, fraud, and security threats
• Legal compliance: Comply with applicable laws, regulations, and legal processes

3. Third-Party Integrations and OAuth

Inkwell Oasis Cloud integrates with numerous third-party platforms. When you authorize a connection to a third-party service:

• You control what data is shared: You explicitly select which data, workspaces, or permissions to grant during the authorization process
• We access data on your behalf: We only access the data you authorize and only for the purposes of providing the Service
• Third-party terms apply: Your use of connected services is also governed by those services' terms and privacy policies

Categories of Third-Party Integrations

• Content Management Systems: WordPress, Strapi, and similar platforms for content publishing
• Productivity Tools: Notion, GitHub, and other collaboration platforms
• Social Media: Medium, LinkedIn, Twitter/X, Instagram, BlueSky, Mastodon for content distribution
• Communication Platforms: Discord, Slack, Microsoft Teams, Email, WhatsApp for notifications and conversational interactions
• Analytics: Google Analytics and similar services for performance tracking

4. AI and Machine Learning Processing

Inkwell Oasis Cloud uses AI and machine learning features powered by third-party providers (including OpenAI, Anthropic, Google, and others) to deliver intelligent automation:

• Data processing: Your content may be processed by AI providers to generate text, analyze data, or execute AI-powered workflows
• No training on your data: We do not use your data to train AI models. Third-party AI providers may have their own data usage policies, which we encourage you to review
• Provider privacy policies: AI providers process data according to their respective privacy policies. We work with providers that offer enterprise-grade data protection

5. Data Security

We implement robust security measures to protect your information:

• Encryption at rest: OAuth tokens, API credentials, and sensitive data are encrypted using AES-256-GCM encryption
• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS/HTTPS
• Multi-tenant isolation: Your data is logically isolated from other users through organization-level access controls and row-level security
• Access controls: Role-based access control (RBAC) ensures users only access data they are authorized to view
• Secure credential storage: Credentials are never logged, displayed in error messages, or exposed in client-side code
• Audit logging: Security-related activities are logged for monitoring and compliance purposes

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account data: Retained while your account is active and for a reasonable period after closure for legal and business purposes
• Workflow execution logs: Retained for operational and debugging purposes, typically for 90 days unless otherwise specified
• Integration credentials: Retained while the integration is active; deleted when you disconnect the integration or close your account
• Conversational history: Retained for continuity of service and may be deleted upon request

7. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

• With your consent: When you explicitly authorize sharing with third parties
• Service providers: With trusted third-party service providers who assist in operating the Service (hosting, analytics, customer support), bound by confidentiality obligations
• Legal requirements: When required by law, legal process, or government request
• Protection of rights: To protect the rights, property, or safety of Inkwell Oasis, our users, or the public
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

9. Your Rights and Choices

Depending on your location and applicable laws (including GDPR and CCPA), you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Data portability: Request a copy of your data in a structured, machine-readable format
• Withdraw consent: Withdraw consent for data processing where consent is the legal basis
• Object to processing: Object to certain types of data processing
• Disconnect integrations: Revoke access to connected third-party services at any time

To exercise these rights, please contact us at contact@inkwelloasis.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

11. Links to Other Sites

Our Service may contain links to third-party websites and services not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party sites. We encourage you to review the privacy policy of every site you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date. For significant changes, we may provide additional notice via email or through the Service. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: contact@inkwelloasis.com
• Website: https://inkwelloasis.com