Privacy Policy

Last Updated: February 2026

common.ink (“we”, “us”, or “our”) operates the common.ink service. This page explains how we collect, use, and protect personal data when you use the service.

Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Password hash and related auth metadata

Product Data

  • Notes and related metadata needed to provide the service
  • Deployment metadata for apps you run through common.ink
  • Data is stored in account-isolated storage and encrypted at rest

Usage Data

We collect operational telemetry needed to run and secure the platform:

  • Access timestamps
  • Feature usage events
  • Error and audit logs (excluding private content where possible)

How We Use Your Information

We use collected data to:

  • Provide and maintain the service
  • Authenticate users and authorize connected clients
  • Send transactional emails (for example, login and recovery flows)
  • Detect abuse and secure accounts
  • Improve reliability and performance

Data Security

Your account data is protected through:

  • Encryption at rest
  • Per-account data isolation
  • Access controls and authenticated API access

Data Retention

  • Account data is retained while your account is active
  • Deleted content is removed according to operational retention windows
  • You may request account deletion at any time

Third-Party Services

We rely on infrastructure and service providers such as cloud hosting, email delivery, and payment processing vendors to operate common.ink.

Your Rights

Depending on jurisdiction, you may have rights to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your data

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page.

Contact Us

If you have questions about this Privacy Policy, contact: privacy@common.ink