Privacy policy

Data controller

INKORE, a French simplified joint-stock company, 60 rue François 1er, 75008 Paris, France, SIREN 101 937 332. For any question about your data: hello@inkore.io.

What this site collects

By default, the site loads no audience measurement tool. If you explicitly accept audience measurement, Google Analytics 4 processes information about pages viewed, visit source, browser, device and contact-intent interactions. No text entered in the assistant and no visitor email address is sent to Analytics.

Cue purchase journey

The commerce journey stores an order reference, its status, file versions, accepted terms and a hash of the recovery code. For new purchases, the full confirmation also freezes the name and email received from Stripe, offer, terms, price, versions and dates. Resend processes that document and its recipient to send it. Provision evidence distinguishes acceptance by the recipient’s email server from a retrieved copy explicitly acknowledged by the buyer. Neither establishes that it was read. Stripe processes card details. The necessary access cookie expires after 90 days; for a confirmed commercial purchase, this does not limit the right to retrieve purchased files with the code.

Real purchases remain closed while launch preparation continues. Acceptance testing uses separate test environments. Billing details are collected before Stripe to issue an invoice with an address in metropolitan France, including Corsica. Payment processing is necessary to perform the contract; invoicing and withdrawal handling also serve our legal obligations. No customer account or automatic recovery-code email is offered.

Withdrawal declaration

The withdrawal form collects your first and last name, details identifying the contract and the email address chosen for the acknowledgement. The declaration, timestamp and acknowledgement content are stored in the database. No secret purchase code is requested; the reference supplied grants no access to an order.

A downloadable acknowledgement is available after recording. When sending is configured, Resend processes your email address and acknowledgement content to send it. Provider acceptance does not guarantee delivery. The confirmation and its access capability may remain in your tab’s session storage to recover a lost response; they are not added to a URL or sent to Analytics.

This processing receives and retains your declaration under the contract and applicable legal obligations. Sales remain closed. Submitting a declaration does not automatically issue a refund.

Commercial data retention

The launch retention policy is: unpaid carts, 30 days after expiry and payment reconciliation; necessary accounting records, 10 years after the accounting year closes; necessary contractual evidence, 5 years after the relevant relationship ends; ordinary support, 3 years after last contact. Minimal file-access records remain necessary while the purchased entitlement applies. A dispute may extend retention of relevant evidence. Production purging still requires qualification before sales open; no general automatic deletion is claimed.

Consent and Google Analytics

The Google Analytics tag loads only after you choose “Accept”. Rejecting leaves the site fully usable. Your choice is stored locally for no more than six months so that the site does not ask on every visit.

You can change or withdraw your choice at any time through the “Analytics choices” button available on the site. On withdrawal, Analytics cookies accessible to the site are removed and new events are blocked.

inKore’s Analytics property is currently configured to retain event data for two months and user data for fourteen months. Google may process data outside the European Economic Area under the safeguards described in its terms and privacy documentation.

The conversation assistant

The site offers an automated assistant with preconfigured answers. It runs entirely in your browser: your messages are sent to no server — neither ours nor a third party’s — and no remote AI is called.

Nothing is stored: the conversation disappears when you close the page. The email template opened from the assistant never contains conversation text. Information you add afterwards leaves only if you send it from your own mail client.

Hosting logs

Our hosting provider Vercel Inc. records technical connection logs (IP address, timestamp, requested page, user agent) needed to operate and secure the service. This processing rests on the publisher’s legitimate interest in keeping the site available and secure.

If you contact us

When you write to us, we process the information you send solely to answer your request and, where relevant, to manage the business relationship that follows. This data is kept for three years from the last contact, then deleted.

Recipients

Your data is not sold or rented for marketing. Vercel hosts the website and private files, with file storage in Paris; Neon hosts the order database in Frankfurt; Stripe processes payments and invoices; Resend delivers transactional emails. Encrypted backups are intended for the private GitHub repository. These regions do not guarantee exclusively European processing: providers and subprocessors may process some data outside the EEA under their processing agreements and transfer safeguards. Google Analytics is used only after consent.

Your rights

Under Regulation (EU) 2016/679, you have rights of access, rectification, erasure, restriction, objection and portability. You can exercise them at hello@inkore.io. If our answer does not satisfy you, you may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).