Privacy Policy

Who this policy covers

This Privacy Policy explains how InkedBond collects and uses personal information through our brand site, customer application, review tools, order support, digital archives, and related communications.

InkedBond is responsible for the personal information described here. Contact team@inkedbond.com with privacy questions or requests.

Information we collect

• Account data, including your user ID, email address, sign-in status, and information supplied through Google sign-in when you choose it.
• Order and story data, including names, relationships, nicknames, personal memories, story answers, creative preferences, personal messages, and sign-offs.
• Photographs of the purchaser, gift recipient, or other people included in the story.
• Delivery data, including the recipient name, address, country, postal code, selected shipping service, and telephone number where provided.
• Transaction data, including order number, amount, currency, payment status, add-ons, and Stripe checkout identifiers. Stripe handles complete card details.
• Review and communication data, including revision comments, approvals, ratings, support requests, and emails related to an order.
• Technical and analytics data, including route, device and browser information, identifiers, approximate location derived from network data, feature flags, and interaction events.

Information about gift recipients

A purchaser often provides information about another person. This can include a recipient’s name, photograph, delivery details, relationship, habits, and memories. The purchaser is responsible for having an appropriate reason and permission to provide that information.

If someone has submitted your information to InkedBond and you want to understand, correct, or remove it, contact us. Some requests may be limited while an order is being fulfilled or where retention is required by law.

How we use information

• Create, review, revise, print, ship, and support personalized manga orders.
• Generate character references, story drafts, artwork, pages, covers, and companion assets.
• Authenticate customers and protect accounts, orders, and review access.
• Process payments, prevent fraud, keep financial records, and resolve disputes.
• Send transactional messages about payment, previews, approval, shipment, cancellation, and support.
• Operate analytics, feature flags, reliability monitoring, and service improvements.
• Comply with legal obligations and establish, exercise, or defend legal claims.

Why we can use it

Depending on where you live and the activity involved, we rely on performance of our contract with you, compliance with legal obligations, legitimate interests in operating and protecting the service, and consent where the law requires it.

When processing is based on consent, you may withdraw that consent. Withdrawal does not make earlier processing unlawful and may affect services that require the information.

AI-assisted creation

We use AI services to help turn submitted stories and photos into creative drafts and artwork. Story text, prompts, and relevant photo references may be sent through OpenRouter to selected language or image models. InkedBond staff may then review, refine, organize, and approve the resulting material.

Do not include unnecessary sensitive information in a story. We configure and select providers for business use, but their handling of inputs is also governed by our agreements and their applicable service terms.

Who helps us provide the service

• Supabase provides authentication and database infrastructure.
• Amazon Web Services provides application hosting, storage, delivery, and workflow infrastructure.
• Stripe processes checkout and payment information.
• OpenRouter and selected AI model providers process creative prompts, story material, and relevant image references.
• Lulu and its delivery partners produce and ship printed orders.
• Resend delivers transactional email.
• PostHog provides analytics, feature flags, and limited session recording where enabled.
• Google Tag Manager loads optional advertising tags only after advertising consent.
• Meta and TikTok receive limited page, checkout, and purchase events for advertising measurement and retargeting where enabled.
• Google supports optional account sign-in and supplies website fonts.

Cookies, analytics, and saved drafts

We use essential cookies and browser storage for account sign-in, security, checkout, saving your consent choice, and keeping an order or review draft available while you work. These functions remain available when you reject optional Analytics and Advertising.

We activate PostHog browser analytics only after you choose to allow analytics. If allowed, PostHog helps us understand product usage, test features, and may provide limited session replay. We configure it to avoid capturing story text, names, addresses, photographs, messages, and payment details as analytics properties. Form inputs are masked in session replay, and request headers and bodies are not recorded.

Advertising is a separate optional choice. When enabled, Google Tag Manager loads Meta and TikTok browser pixels on public landing pages and limited order routes. We send allowlisted page, checkout, purchase value, currency, product, and opaque event identifiers. We do not use advanced matching and do not send customer names, email addresses, phone numbers, account identifiers, delivery addresses, story content, photographs, order numbers, or Stripe checkout identifiers to these advertising pixels.

Meta and TikTok may use their browser identifiers and the limited events described above to measure campaigns, attribute purchases, optimize ad delivery, and build or exclude advertising audiences. Browser privacy controls, consent choices, and content blockers can limit this measurement.

We store your cookie choice for up to six months and use it across InkedBond subdomains where the browser permits. You can change or withdraw Analytics and Advertising independently through the Cookie settings control available on our sites. Rejecting a category removes the related first-party cookies and browser-storage entries that our sites can access and prevents the related tags from loading again.

The order form saves unfinished answers in local storage and photographs in IndexedDB on your own device so you can resume. Review comments may also be stored locally until submission. This local data remains under the browser profile until the flow clears it, you clear the draft, or you remove browser data.

Separate from optional browser analytics, we may process limited server-side operational events where reasonably necessary for security, fraud prevention, service reliability, order fulfillment, and business records. We also use an account identifier to evaluate service-availability and rollout settings through PostHog after sign-in. These checks do not use optional browser cookies, session replay, or browser analytics events.

Archive and link sharing

A printed edition may contain QR codes that open review or online story destinations. Online archives and media may be accessible to anyone who has the relevant link. Treat these links like a private invitation and share them only with people you trust.

If you believe an archive or link has been shared without permission, contact us so we can review available access or removal options.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes described here, including completing orders, maintaining purchased digital access, meeting accounting and legal duties, resolving disputes, preventing fraud, and protecting the service.

• Unlinked pending media uploads are configured to expire after seven days.
• Local drafts remain in your browser until they are cleared by the product flow or by you.
• Order records and related creative assets may be retained while the order and online archive remain active, followed by a reasonable backup and deletion period.
• Financial, fraud, dispute, and legal records may be retained for the period required or permitted by applicable law.

Security and international transfers

We use access controls, encrypted connections, private storage, signed upload methods, and operational safeguards designed to protect personal information. No online system can guarantee absolute security.

Our providers and staff may process information in countries other than your own, including Egypt and the United States. Where required, we use contracts or other recognized safeguards for international transfers.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to withdraw consent. You may also have the right to complain to a data protection authority.

Email team@inkedbond.com to make a request. Include enough information for us to locate the relevant account or order. We may need to verify your identity and authority before acting, especially where the information concerns another person.

Children

The service is not designed for children to purchase independently. A parent or legal guardian must manage any order involving a child and must have authority to provide the child’s information and photographs.

Updates and contact

We may update this policy as InkedBond, our providers, or applicable laws change. We will publish the revised date and provide additional notice when a material change requires it.

For privacy questions, rights requests, or concerns, email team@inkedbond.com.