Data Processing Addendum

You are the controller of personal data in your account, including data about your team and locations. INKD Royalties is the processor and handles it only on your documented instructions, which are the Terms, this addendum and your use of INKD.

Providing INKD: storing records, calculating royalties, sending emails, answering support and billing your subscription.

People with access are bound to confidentiality. We use access controls, encryption in transit and separation of each business's data.

You authorize the subprocessors on the subprocessor list. We will update that page before adding a new one, and you can object by emailing support@inkdroyalties.com.

Our AI provider, OpenAI, receives only what is needed to answer a support question. INKD's policy is that customer data is not authorized for AI model training.

We will help you respond to data subject requests and will tell you without undue delay after becoming aware of a personal data breach affecting your data.

Subprocessors may process data outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

Your data stays available as a read-only export for 30 days after your account ends. We email warnings 7 days and 1 day before deletion. After that, we delete your account data. Billing, terms and login records are retained for 2 years. Backups are purged within 30 days of deletion.