Inkwell Writer's Studio

Privacy Notice

Last updated: 19 July 2026

1. Who we are

This Privacy Notice describes how Reverloom Creative Limited("Reverloom Creative", "we", "us", "our"), trading as Inkwell Writer's Studio, acts as data controller for personal data collected through the Service.

2. Personal data we collect

  • Account data: email address, display name, hashed authentication credentials.
  • Content data: chapters, notes, books, community hub posts, translations, analyses, and version history you create.
  • Usage data: feature usage counters, timestamps, and product telemetry needed to operate the Service and enforce free-tier limits.
  • Support data: messages you send us and information you provide in support requests.
  • Device and log data: IP address, browser type, device identifiers, and basic diagnostic logs.
  • Cookies: essential cookies for authentication and session management. We do not currently use advertising cookies.

Payment card and billing address data is collected directly by our reseller Paddle.com when you subscribe. We do not receive or store full payment card numbers.

3. How we use personal data

  • To create and secure your account and provide the Service (legal basis: performance of a contract).
  • To process your requested AI analyses, translations, and proofreading (contract).
  • To operate the community hub and moderate content (contract; legitimate interests in a safe community).
  • To detect, prevent, and address fraud, abuse, and security incidents (legitimate interests; legal obligation).
  • To provide customer support and respond to inquiries (contract; legitimate interests).
  • To improve the Service and understand usage patterns in aggregate (legitimate interests).
  • To comply with legal, tax, and accounting obligations (legal obligation).

4. Sharing your personal data

We share personal data only with the following categories of recipients:

  • Merchant of Record (Paddle.com): for the sale of subscriptions, payment processing, invoicing, tax compliance, and subscription management.
  • Infrastructure and service providers: hosting, database, authentication, and email delivery providers acting as processors on our behalf.
  • AI providers: when you request an analysis, translation, or proofread, the relevant chapter text is transmitted to third-party AI providers to generate the output you asked for. They act as processors and do not use your content to train their models under our agreements.
  • Professional advisers: legal, accounting, and audit professionals, where necessary.
  • Authorities: where disclosure is required by law, court order, or to protect our rights.

5. International transfers

Our providers may process personal data outside the country in which you live, including in the United States and other jurisdictions. Where personal data is transferred out of the UK or EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or applicable adequacy decisions.

6. Data retention

We keep your personal data for as long as your account is active and as needed to provide the Service. If you delete your account, we delete or anonymize personal data associated with it within a reasonable period, except where we are required to retain it for legal, tax, or accounting purposes, or for the establishment or defense of legal claims.

7. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate or incomplete data;
  • request erasure ("right to be forgotten");
  • request restriction of, or object to, certain processing;
  • request portability of data you provided to us;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at reverloomlimited@gmail.com. We aim to respond within one month.

8. Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, role-based permissions, and server-side enforcement of entitlements. No system is 100% secure; please help us keep your account safe by using a strong password and notifying us of any suspicious activity.

9. Children

The Service is not directed to children under 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

10. Cookies

We use essential cookies and similar technologies (such as localStorage) to keep you signed in and remember your preferences. Where required by law, we will request your consent before setting non-essential cookies.

11. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be announced on this page with a new "Last updated" date.

12. Contact us

Reverloom Creative Limited — reverloomlimited@gmail.com.