Privacy in InkSmith

1. Who we are (Controller information)

Logicos Software ("Logicos", "we", "us", "our") is the controller for the InkSmith website, customer accounts, orders, licensing and our own business communications.

Address: De Lijsterbes 25, 6942TM Didam, Netherlands. Company registration (KvK): 97161705. VAT: NL005252816B07.

Email: privacy@logicos.software.

If you are a customer under a business contract and we process personal data on your behalf as a processor, our processing will be governed by a Data Processing Agreement (DPA) and your instructions.

2. Scope

This statement covers personal data processed in connection with:

• Website visits and inquiries
• Sales and business communications
• Delivery of professional services (custom software, integrations, workshops, security work)
• Use of any hosted/SaaS services (if applicable)
• Marketing communications (where permitted)

For InkSmith this includes browsing inksmith.world, downloading the app, free trials, buying and activating licences, managing your shared Logicos customer account and requesting support. Documents edited locally are not uploaded to us merely because you use the desktop editor. If you connect to InkSmith Press, data is sent to the instance you select; its operator is responsible for that environment. We only receive document content when you choose to send it to us or use a service we operate.

It does not cover third-party sites or services that we do not control.

3. Personal data we collect

Depending on how you interact with us, we may collect:

3.1 Data you provide directly

• Identity and contact data (name, email, phone, role, company)
• Inquiry and project information (requirements, timelines, budgets you choose to share)
• Communications (messages, call notes, meeting recordings where disclosed)
• Billing and contracting information (invoices, purchase orders)
• Workshop participation details (attendance, feedback)

3.2 Data collected automatically (website/usage)

• Device and log data (IP address, browser type, device identifiers)
• Usage data (pages viewed, referring pages, time stamps)
• Approximate location derived from IP address
• Cookie identifiers and similar tracking data (see Cookies section)

InkSmith checkout also processes billing address, country or region, business or personal purchase choice, VAT or KvK number, offer codes, the accepted offer and terms version, and payment status. Accounts contain profile details, authentication and verification information, licences, orders, invoices and subscription details. Licence activation and trial checks use a protected device identifier and may include the device name, operating system and app version.

3.3 Customer Data processed on behalf of customers

If you use our Services as a business customer, we may process personal data contained in Customer Data as instructed by you (e.g., end-user records or employee data). In that case, you are typically the controller, and we are the processor.

Payment details are entered with the payment provider selected at checkout, such as Mollie or Stripe. We receive the transaction information needed to confirm the order, issue the licence and manage invoices, refunds or renewals.

4. Purposes and legal bases (GDPR)

We process personal data for the purposes below. Where GDPR applies, we rely on these legal bases:

Responding to inquiries and providing customer support

Legitimate interests; contract

Sales, contracting, and account management

Contract; legitimate interests

Delivering professional services and operating Services

Contract; legitimate interests

Security, fraud prevention, and service integrity

Legitimate interests; legal obligation

Billing, accounting, and compliance

Legal obligation; contract

Marketing communications (newsletters, events, content)

Consent or legitimate interests, where permitted

Improving our website and Services (analytics)

Consent where required; legitimate interests where permitted

Our legitimate interests include responding to business enquiries, operating and improving our services, preventing fraud and licence abuse, and keeping accounts and systems secure. Where consent is required, you may withdraw it without affecting processing carried out before withdrawal. Required account and billing details are needed to fulfil your request; without them we may be unable to provide an account, complete an order or issue a licence. The InkSmith website currently has no advertising or analytics trackers.

For marketing communications, you can opt out at any time using the unsubscribe link or by contacting us.

5. How we share personal data

We may share personal data with:

• Service providers / processors (e.g., hosting, analytics, CRM, email delivery, support tooling) who process data under confidentiality and security obligations.
• Professional advisors (legal, audit, insurance) as necessary.
• Authorities where required by law or to protect rights and safety.
• Business transfers (merger/acquisition) subject to appropriate safeguards.

InkSmith shop and account requests pass through the website server to the Logicos licence service. Payment providers process transactions under their own privacy notices and, where applicable, act as independent controllers. An organisation operating InkSmith Press controls access to the documents and data on that instance.

We do not sell personal data.

6. International data transfers

Our commitment to EU data sovereignty

We will never transfer any customer data outside of the European Union without your explicit consent. Your data stays in the EU unless you specifically authorize otherwise.

Our infrastructure and services are designed to keep data within the EU. In the rare cases where personal data may need to be transferred outside the EEA/UK (for example, if you explicitly request integration with a non-EU service), we use appropriate safeguards such as:

• European Commission Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Other lawful transfer mechanisms

Any such transfer will only occur with your prior informed consent and under appropriate contractual protections.

7. Data retention

We retain personal data only for as long as necessary for the purposes described, including legal, accounting, and reporting obligations.

Inquiry/contact requests

12–24 months after last interaction

Contract and billing records

As required by law (often 7 years)

Marketing subscriptions

Until unsubscribe + suppression record

Customer Data (hosted services)

Per contract; deleted/returned per terms

Account and licence records are retained while needed to manage your account and entitlements, provide support, prevent abuse and meet legal obligations. Retention of security logs depends on their operational purpose and any incident or legal claim. Browser preferences remain until replaced or cleared; authentication cookies expire with the session or are cleared on sign-out. Deleting an account does not remove records that must be retained by law.

8. Security

We implement technical and organizational measures designed to protect personal data, such as access controls, encryption in transit, logging/monitoring, and least-privilege practices.

The InkSmith website uses HTTPS and a Secure, HttpOnly account cookie. The browser does not store the account bearer token in local storage. You should protect your device, account credentials, backups and any Press instance you operate.

No system is perfectly secure; we cannot guarantee absolute security.

9. Your rights (GDPR)

Where GDPR applies, you may have rights including:

• Access to your personal data
• Rectification (correction)
• Erasure (deletion)
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent
• Lodging a complaint with a supervisory authority

To exercise rights, contact us at privacy@logicos.software. We may request verification of identity.

You may object to processing based on legitimate interests and to direct marketing. Rights can be subject to legal conditions and exceptions, including mandatory record retention. You can complain to the Dutch Autoriteit Persoonsgegevens or the supervisory authority where you live, work or believe an infringement occurred.

10. Cookies and similar technologies

InkSmith World currently uses no advertising cookies or analytics trackers. Essential account cookies keep you signed in and are restricted to the site, sent over HTTPS and inaccessible to JavaScript. They expire according to the session lifetime; signing out clears the local session cookie.

Browser local storage remembers your language (inksmith.website.locale) and screenshot theme. These preferences remain on your device until you change them or clear site data. They are not used for advertising or cross-site tracking.

You can clear or block cookies and local storage in your browser. Blocking essential storage may prevent sign-in or saved preferences from working. Payment providers and other external services may use their own cookies under their privacy notices. If optional tracking is introduced, we will provide information and request consent where required before enabling it.

11. Children

Our Services are not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us to request deletion.

12. Third-party links and services

Our website or Services may link to third-party sites. Their privacy practices are governed by their own policies, and we are not responsible for them.

13. Business customer processing

This section provides an overview of our obligations when acting as a processor.

If we act as a processor for Customer Data, we will:

• Process personal data only on documented instructions from the customer
• Implement appropriate security measures
• Assist with data subject requests where applicable
• Notify customers of personal data breaches as required by contract/law
• Engage subprocessors under appropriate terms
• Delete/return data at end of services per contract

A formal DPA may be provided upon request or as required.

Running InkSmith Desktop or your own Press instance does not by itself make Logicos a processor of documents we never receive. For data controlled by your employer or another organisation, direct requests to that organisation first.

14. Changes to this Privacy Statement

We may update this statement periodically. If changes are material, we will provide notice by posting an updated version and/or via other appropriate communications.

15. Contact

For privacy questions or requests, email privacy@logicos.software or write to Logicos Software, De Lijsterbes 25, 6942TM Didam, Netherlands.

See also our Terms of Service.