Privacy Policy

Last updated: July 11, 2026

This policy describes how Wilson Rocha Lacerda JR LTDA ("Company", "we") collects, uses, and protects your data when providing Inkthar.

1. Core Principle: Privacy by Design

Inkthar is a local desktop app. Your projects, chapters, characters, and all writing remain on your computer; we do not send your writing to Inkthar servers. Optional cloud AI features communicate only with the provider you configure and use.

2. Data We Collect

We process only the data required to deliver the site, process payment, protect the service, and activate your license:

Data	Purpose	Storage
Email	Send activation key after purchase	License server (Cloudflare D1)
Activation key hash	Validate activations	License server (Cloudflare D1)
Machine fingerprint	Enforce 2-device activation limit	License server (Cloudflare D1)
Payment data	Process billing	Stripe (we never directly handle card data)
Technical request metadata	Deliver the site and API, prevent abuse, and diagnose failures	Vercel and Cloudflare, according to those platforms' technical logs

The machine fingerprint is a hash derived from hardware characteristics (CPU model, architecture, total memory, username, and platform). It does not personally identify you.

3. What We Do Not Collect

Content from your projects or any text written in the app.
Telemetry about how you use the desktop app.
Location data.
Third-party or social network data.

4. Third Parties and Subprocessors

Stripe — processes payments. Card and billing data remain exclusively with Stripe, subject to their privacy policy.

Resend — sends activation key emails. Your email address is shared only for this purpose.

Cloudflare — hosts our licensing API. Data is stored in Cloudflare data centers under their GDPR/LGPD terms.

Vercel — hosts the public site. We do not use Vercel Analytics or custom tracking events; the platform may process technical metadata required to deliver and protect the pages.

Optional AI providers — Anthropic, OpenAI, Gemini, or Ollama can be used only if you configure the feature. With cloud providers, the query, metadata, and context needed for the assisted action may be sent directly to the service you choose, according to that provider's terms, retention policies, and data-use controls for your account. Ollama is the local option for avoiding calls to cloud AI providers.

Feature	Data that may be sent	Destination/control
Assisted research	Query, provided context, categories, and data required to refine search or answer.	Configured AI provider and search services used by the action.
Ask mode	Question, current context, and content required to turn the answer into a note when requested.	AI provider chosen by you.
Book Chat	Question, recent history, project metadata, current selection when available, and relevant manuscript passages.	Chosen AI provider or local Ollama.
Book Chat embeddings	Manuscript passages used to prepare memory when the embedding provider is cloud-based.	OpenAI/Gemini in the cloud or local Ollama; Anthropic does not provide embeddings in the app.
Contextual RAG	Passages being prepared may be sent to the configured LLM to receive additional context.	Optional feature controlled in AI settings.

5. Legal Basis (LGPD)

We process your data under LGPD Article 7, V — contract performance: processing is necessary to deliver the product you purchased.

6. Data Retention

We keep your data while your license is active. If refunded and revoked, your record is deactivated. You may request full deletion at any time via developer@inkthar.com.

7. Your Rights (LGPD)

You have the right to:

Confirm which data we hold about you.
Request correction of inaccurate data.
Request deletion of your data.
Revoke consent at any time (where applicable).
Data portability (upon request).

To exercise these rights, contact us at developer@inkthar.com.

8. Security

We use technical safeguards: HTTPS/TLS transport, activation keys stored only as SHA-256 hashes, constant-time admin auth comparison, and encrypted local license storage via OS keychain.

9. Cookies

The www.inkthar.com site does not use tracking cookies or behavioral analytics. Local storage is used only for interface preferences such as theme.

10. Policy Changes

We may update this policy. The date at the top of this page always reflects the latest version.

11. Contact and DPO

Data controller: Wilson Rocha Lacerda JR LTDA
Email: developer@inkthar.com

General questions? Visit our contact page or email developer@inkthar.com.