Inkwell AI -- Privacy Policy

1. Introduction

This Privacy Policy describes how Inkwell AI ("the extension," "we," "our") handles user data. Inkwell AI is a Chrome browser extension that helps users improve text they write by sending it to an AI model the user has chosen and configured. The developer of Inkwell AI does not operate any backend servers and does not receive, collect, or store any user data on remote infrastructure.

2. Data Collection

Inkwell AI collects only the data the user explicitly provides through the extension's interface, on the user's own device. The categories of data the extension handles are:

Data category	What it is	Collected when
Authentication information	API keys for AI providers (Anthropic, OpenAI, Google, Ollama) entered by the user in the Settings page.	When the user manually enters keys in Settings.
Personal communications	Text content the user types into editable fields on web pages (e.g. emails, messages, posts).	Only when the user explicitly triggers an Inkwell action (clicks the floating button, uses the right-click menu, presses a keyboard shortcut, or uses the toolbar popup).
Website content	Visible page context adjacent to the editable field, on Gmail, LinkedIn, and X/Twitter only (e.g. the email thread the user is replying to).	Only when the user triggers an action on those specific sites, to make replies context-aware.
User preferences	Provider preference, model name, temperature, max tokens, voice profile samples, voice profile signature, voice profile enable/disable.	When the user changes settings.

Data we do NOT collect

• Personally identifiable information (name, address, age, ID numbers).
• Health information.
• Financial or payment information.
• Location data, IP addresses, or device identifiers.
• Browsing history or list of websites visited.
• Mouse movements, keystrokes, scrolling, or any analytics signals.
• Any data of any kind transmitted to the developer of Inkwell AI.

3. Data Use and Handling

Data the extension handles is used solely to fulfill the extension's single purpose: helping the user improve text by sending it to an AI provider the user has chosen.

• API keys are read from local storage and included as authentication headers when the extension calls the AI provider's API on the user's behalf.
• Text content and page context are included in the body of HTTPS requests sent directly from the user's browser to the AI provider the user has selected (Anthropic, OpenAI, Google, or a local Ollama instance the user controls).
• Voice profile samples are sent ONCE to the user's selected provider when the user clicks "Extract my voice." The provider returns a short voice signature, which is stored locally. The original samples remain stored locally for the user to review or re-extract.
• User preferences are read on demand to populate the Settings page and to configure each request.

Data is NOT used for any of the following: targeted advertising, building user profiles, fraud detection unrelated to the extension's purpose, training of any model by the extension developer, or sale to any third party.

4. Data Storage

All data the extension handles is stored exclusively in chrome.storage.local on the user's own device. Specifically:

• API keys: stored locally; never synced to other devices via Chrome sync; never transmitted to the developer.
• Voice profile samples and signature: stored locally; user can edit or clear them at any time from the Settings page.
• User preferences: stored locally.
• Text the user submits for AI assistance: NOT stored by the extension after the request completes. The text is held in memory only for the duration of the API call and is then discarded by the extension. The AI provider may store it according to that provider's policy (see Section 5).

The developer of Inkwell AI does not operate any servers, databases, or backend systems. There is no remote storage of any user data by the developer.

5. Data Sharing

Inkwell AI does not sell user data. Inkwell AI does not share user data with any party for advertising, marketing, analytics, or any unrelated purpose.

The only entity outside the user's device that ever receives data from the extension is the AI provider the user has chosen and configured. The user controls which provider is used and supplies their own API key. The receiving provider is one of:

• Anthropic -- when the user selects "Claude". Anthropic's privacy policy: anthropic.com/legal/privacy
• OpenAI -- when the user selects "GPT". OpenAI's privacy policy: openai.com/policies/privacy-policy
• Google -- when the user selects "Gemini". Google's privacy policy: policies.google.com/privacy
• Ollama -- when the user selects "Ollama". Ollama runs locally on the user's machine; no third party receives the data.

6. Data Retention and Deletion

Data the extension stores locally remains on the user's device until the user deletes it. The user can delete data at any time by:

• Clearing API keys: open Settings, blank the relevant API key field, and click Save.
• Clearing the voice profile: open Settings, scroll to Voice Profile, click "Clear voice profile."
• Clearing all extension data: uninstall the extension from chrome://extensions. Chrome will remove all chrome.storage.local entries associated with the extension.

Because the developer does not operate servers, there is no developer-side data to retain or delete. Requests to the AI provider are subject to that provider's retention policies (see Section 5).

7. Security

API keys and other locally stored values are protected by the standard isolation Chrome provides for extension storage: data in chrome.storage.local is accessible only to the extension that wrote it. Network requests to AI providers are made over HTTPS. The extension does not load remote code; all JavaScript is bundled in the extension package.

8. User Rights and Choices

The user always controls what data the extension handles, because:

• The extension only acts when the user explicitly invokes it (toolbar click, floating button, right-click menu, keyboard shortcut). It does not run in the background or scan pages passively.
• The user chooses which AI provider receives data, and supplies their own API key.
• The user can disable the voice profile feature with a single toggle in Settings.
• The user can delete all locally stored data at any time (see Section 6).
• The user can uninstall the extension at any time, which removes all stored data.

9. Children

Inkwell AI is not directed at children under 13 and does not knowingly collect data from children.

10. Changes to This Policy

If we update this policy, we will revise the "Last updated" date at the top of this page and post the revised policy at the same URL. Continued use of the extension after a change constitutes acceptance of the revised policy.

11. Contact

Questions, requests, or concerns about this policy or the extension's data handling can be sent to:

seal2866@gmail.com