1. Who is responsible for your data
For the personal data described in this policy, the data controller is Stamp Social Ltd, a company registered in England and Wales (company number 17188757), registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. We are registered with the Information Commissioner's Office (ICO) under registration number ZC142084. You can contact us about privacy at inkwell@stamp.foundation.
2. The app collects nothing about you
The Inkwell desktop app is local-only. It has no account, no sign-in and no analytics. It does not track what you ask, which files you open, what it edits or creates, or how often you use it. Your documents and everything Inkwell does with them stay on your computer and are never sent to us or to anyone else.
The only time the app contacts the internet is to validate your licence key when you activate it, to move your licence to another computer, or to recover a lost key. Those requests carry your licence key, the email address tied to it, and a one-way fingerprint of the computer used to enforce the two-computer install limit. They do not carry any of your files or anything you do in the app.
3. The personal data we hold, and why
| Data | Why we hold it | Lawful basis (UK GDPR) |
|---|---|---|
| Your name and email address | To take payment for your licence, send you your licence key, and provide support and important notices about your purchase. | Performance of our contract with you (Article 6(1)(b)). |
| Payment details (card information) | Collected and processed by Stripe to take your one-off payment. We do not see or store your full card number. | Performance of our contract with you (Article 6(1)(b)). |
| Your licence key, the email tied to it, and a one-way device fingerprint | To activate your licence, enforce the two-computer install limit, move your licence between machines and recover a lost key. | Performance of our contract with you (Article 6(1)(b)), and our legitimate interest in preventing licence misuse (Article 6(1)(f)). |
| Records of your purchase (such as the invoice and the amount paid) | To meet our tax and accounting duties. | Compliance with a legal obligation (Article 6(1)(c)). |
| Emails you send us | To answer your questions and provide support. | Our legitimate interest in helping our customers (Article 6(1)(f)). |
We do not use your data for advertising, we do not sell it, and we do not build a profile of you.
4. The processors who help us
We use a small number of trusted service providers who process some personal data on our behalf, under contract and only on our instructions:
- Stripe handles payment. Stripe collects and processes your payment details and, to confirm the sale, your name and email. See Stripe's own privacy notice for how it handles that data.
- Our licence-validation service (hosted on our behalf) processes your licence key, the email tied to it, and the one-way device fingerprint, so we can activate, move and recover licences.
- Our email provider is used to send your licence key and to reply to support messages.
Where a provider is based outside the United Kingdom, we rely on a recognised safeguard such as a UK adequacy decision or the International Data Transfer Agreement, so your data stays protected to UK standards.
5. How long we keep it
We keep your purchase and licence records for as long as your licence is active, and afterwards for the period our tax and accounting duties require (generally six years from the end of the relevant financial year). We keep support emails for as long as we need them to help you, and then delete them. We delete or anonymise personal data when we no longer have a reason to keep it.
6. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you, and receive a copy;
- Rectify data that is wrong or incomplete;
- Erase your data where we no longer have a lawful reason to keep it (we may need to retain limited purchase records to meet our tax duties);
- Restrict or object to how we use it in certain cases;
- Portability, to receive certain data in a portable format;
- Withdraw consent at any time where we rely on consent.
To exercise any of these, email inkwell@stamp.foundation. We will respond within one month. There is normally no charge.
7. Cookies and the website
This website stores a single setting in your browser to remember your light or dark theme choice. That is a functional preference, not tracking, and it never leaves your browser. We do not use any cookies that identify you, and we do not use any third-party trackers (no Google Analytics, no advertising pixels, nothing from another company).
So that we can understand which of our messages resonate, the marketing pages count anonymous, aggregate visits and a few funnel events (a page being viewed, the demo being tried, the buy button being clicked). This counting is first-party, runs on our own systems, and is built to be the most privacy-respecting it can be: it uses no cookies, sets no identifier that follows you between visits, and records no personal data at all, not your name, not your IP address, not which browser you use. We cannot tell who you are or join one visit to another from it. If your ad link carried a campaign label, we count that label so we know which advert worked, never anything about you. The Inkwell app itself, by contrast, counts nothing at all and never phones home.
8. Children
Inkwell is intended for adults. We do not knowingly collect personal data from anyone under 18.
9. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it last changed. Significant changes will be reflected here.
10. Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk.
11. Contact
Stamp Social Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Email inkwell@stamp.foundation.