← Back to Home

Privacy Policy

Last updated: March 2026

1. Information We Collect

We collect the following categories of information when you use the Inkept platform:

Account Information

Name, email address, company name, billing address, and payment details provided during registration and subscription management.

Financial Data

Invoices, purchase orders, receipts, bank transaction data, vendor/customer records, and other financial documents you upload or connect through integrations.

Usage Data

Device information, browser type, IP address, pages visited, feature usage patterns, and interaction logs collected automatically when you use the Service.

2. How We Use Your Information

  • Service delivery: Processing invoices, matching transactions, generating reports, and automating AP/AR workflows.
  • AI processing: Running your financial data through AI models to extract, classify, and reconcile information. AI outputs are used solely to provide features within your account.
  • Analytics: Aggregated, anonymized usage data to improve product performance, reliability, and user experience.
  • Communication: Sending transactional emails, service alerts, and (with your consent) product updates.
  • Security and compliance: Detecting fraud, preventing abuse, and meeting legal obligations.

3. Data Sharing

We do not sell your personal data. We share data only with the following categories of third-party service providers, solely to operate and improve the Service:

  • Plaid— Secure bank account linking and transaction retrieval.
  • Stripe— Payment processing and subscription billing.
  • Mindee OCR — Optical character recognition for invoice and document parsing.
  • Anthropic (Claude) — Large language model processing for intelligent document analysis, categorization, and workflow automation.

Each provider is contractually bound to use your data only for the specific service they provide and to maintain appropriate security controls.

4. Data Security

We implement industry-standard security measures to protect your data, including encryption at rest (AES-256) and in transit (TLS 1.3), role-based access controls, audit logging, and regular vulnerability assessments. SOC 2 Type II compliance is currently in progress. No system is 100% secure, and we cannot guarantee absolute security, but we are committed to protecting your data to the highest practical standard.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account termination, we retain data for up to 90 days to allow for reactivation or data export requests, after which it is permanently deleted. Certain data may be retained longer if required by law or for legitimate business purposes such as fraud prevention.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your account and associated data.
  • Export your data in a machine-readable format.

To exercise any of these rights, contact us at privacy@inkept.com. We will respond within 30 days.

7. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We may also use analytics cookies (such as privacy-focused, anonymized analytics) to understand how the Service is used. You can disable non-essential cookies in your browser settings. We do not use third-party advertising trackers.

8. Children’s Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will take steps to delete it promptly.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • The right to know what personal information is collected, used, shared, or sold.
  • The right to delete personal information held by us.
  • The right to opt out of the sale of personal information.
  • The right to non-discrimination for exercising your CCPA rights.

We do not sell personal information. To submit a CCPA request, contact privacy@inkept.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice within the Service or sending an email to your registered address. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy or our data practices, contact us at privacy@inkept.com.