Privacy Policy for Inkwell
Last updated: May 13, 2026
Developer: Curythm
Contact: contact@curythm.com
1. Introduction
Inkwell (“we”, “our”, or “the App”) is a Shopify blog editor application developed by Curythm. This Privacy Policy explains how we collect, use, and protect information when you use our App.
2. Information We Collect
When you install and use Inkwell, we access the following data through the Shopify API:
- Store information: Store name and domain
- Blog and article data: Blog posts, articles, titles, content, tags, authors, and related metadata
- Product data: Product titles, descriptions, prices, images, and handles (for product card insertion)
- File uploads: Images uploaded through the editor are stored via the Shopify Files API on Shopify’s CDN
- Per-store usage metrics: To decide when to display an in-app review or feedback prompt, we record the install date, the number of articles you have saved, and the timestamp the prompt was last shown. These metrics are keyed by your Shopify shop domain only and contain no personal data.
We do not collect any personal data from your store’s customers. We do not use cookies or tracking technologies on your storefront.
3. How We Use Your Information
We use the collected information solely for the following purposes:
- To provide and operate the blog editing functionality
- To save and restore article drafts (stored in our database as TipTap JSON)
- To display product information within article content
- To detect and prevent data conflicts (stale data detection)
- To decide when to surface an in-app review or feedback prompt, based on install date and save count
We limit our processing of personal data to the stated purposes listed above.
4. Data Storage
- Database: Article draft data (TipTap JSON format) and per-store usage metrics (install date, save count, last prompt-shown timestamp) are stored in our database (Neon PostgreSQL, AWS ap-southeast-1 (Singapore) region)
- Images: Images are stored on Shopify’s CDN via the Files API
- Access tokens: We do not store your Shopify access tokens beyond the session
5. Data Sharing
We do not sell, trade, or share your data with third parties. Your data is only accessed through the Shopify API for the purposes described above.
6. Data Retention and Deletion
- Draft data is retained for the duration of your app subscription
- Published article data remains on your Shopify store and is managed by Shopify
- When you uninstall the App, we receive a webhook notification and delete all associated data from our database, including draft content and per-store usage metrics
- Article content published to Shopify remains on your store after uninstallation
- Draft data and usage metrics stored in our database are permanently deleted upon uninstallation, and again on receipt of Shopify’s
shop/redact webhook (sent up to 48 hours after uninstall) as a safety net
7. Data Subject Requests
We respond to data subject requests (data access, data deletion) received through Shopify’s mandatory compliance webhooks. Requests are processed within 30 days of receipt. As Inkwell does not store customer personal data, data subject requests related to your store’s customers do not require action on our part.
8. Security
We implement reasonable security measures to protect your data, including:
- Secure authentication via Shopify OAuth
- Encrypted data transmission (HTTPS)
- Database access restricted to authorized services only
- Encrypted data at rest
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated date.
10. Contact Us
If you have questions about this Privacy Policy, please contact us at:
Curythm
Email: contact@curythm.com