Privacy Policy

InkStage ("we," "us," or "our") provides Software-as-a-Service (SaaS) infrastructure for printing businesses. We process two distinct categories of information:

• Account/Platform Data: Information about the printing businesses (our tenants) who use our platform. Where applicable by law, we generally act as a Data Controller (or equivalent) for this information.
• Tenant/Customer Data: Information about the printing businesses' end-customers, print jobs, and artwork. Where applicable by law, we generally act as a Data Processor (or service provider) for this information. The printing business determines why and how this customer/job data is processed.

Account/Platform Data

We collect user identity, workspace/organization information, authentication/account identifiers and session/security metadata, usage diagnostics, and support interactions from our tenants to operate and secure the platform.

Tenant/Customer Data

Our tenants upload print-shop customer contact information, job/order details, artwork/proof files, approval decisions, and proof feedback. This data is content provided or controlled by the tenants and/or respective rightsholders.

We use Account/Platform Data to:

• Provide and operate the SaaS infrastructure.
• Maintain authentication and security.
• Send transactional communications (e.g., job updates, proof requests).
• Perform diagnostics and error monitoring to ensure platform stability.

We use trusted third-party services to operate InkStage. These include:

• Supabase: For secure database hosting, authentication, and file storage.
• Vercel: For cloud application hosting and edge computing.
• Resend: For delivering transactional emails and proof notifications.
• Sentry: For diagnostic error monitoring and crash reporting.

Exports: Organization Owners can request a supported tenant-data export that includes the implemented export scope and excludes platform-security/audit/infrastructure data.

Tenant Deletion: Organization Owners can permanently delete their tenant workspace. This initiates a multi-phase destructive deletion process that removes tenant domain data and Storage objects through the implemented workflow, but limited governance/audit records may be retained for security/accountability.

Retention: We retain Account Data for as long as the account is active. Tenant Data is retained according to the tenant's instructions or until the tenant is deleted. Data may persist temporarily in secure system backups according to our standard backup and retention processes.

We implement strong technical and organizational measures to protect data, including strict multi-tenant isolation, capability-based security tokens, and encryption in transit and at rest.

InkStage is hosted on global cloud infrastructure. Data may be processed or hosted internationally. We ensure appropriate safeguards are in place for cross-border data transfers.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at: privacy@inkstage.com.