Privacy Policy

1. Introduction

Inkeep, Inc. ("the Company," "we," "us," or "our") operates getinkeep.com and the Inkeep platform (collectively, "the Service"). Inkeep is an AI-powered developer support agent: customers connect their private documentation, GitHub repositories, and past support tickets so Inkeep can build and serve an AI agent that answers developer questions with citations to the customer's own sources.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to information collected through the website, the platform, and direct communications with us. We are located at 535 Mission Street, 14th Floor, San Francisco, CA 94105, and can be reached at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly, including:

• Contact details (name, email address, phone number) when you sign up, fill out a form, or request a demo;
• Company information you choose to share (employer, role, project context, support workflow description);
• The content of messages you send us through contact forms or email.

2.2 Customer Content You Connect to the Platform

Inkeep's core function is to ingest content you authorize us to access. When you use the platform, you may connect:

• Documentation sources - URLs of your docs site, Confluence spaces, or Notion pages;
• Code repositories - GitHub repositories (READMEs, inline comments, code examples) that you authorize via OAuth;
• Support history - closed tickets from Zendesk, Linear, Intercom, or Freshdesk that you export or connect via API.

This customer content is processed solely to build and serve your AI support agent. We index it semantically to enable accurate, citation-backed answers. We do not use your customer content to train shared or general-purpose models without your explicit written consent. You retain ownership of your source content; we process it only as a data processor acting on your instructions.

2.3 Information Collected Automatically

When you visit getinkeep.com, we automatically collect limited technical information:

• IP address and approximate location (city or region level);
• Browser type, operating system, and device class;
• Pages visited, referring URLs, and time on page;
• Cookie and similar identifiers (see Section 5 and our Cookie Policy).

2.4 Sub-processors

To deliver the Service, we use third-party infrastructure and AI providers (sub-processors) including cloud hosting providers and large language model (LLM) inference services. Customer content is transmitted to these sub-processors only as necessary to generate responses and index knowledge. We maintain data processing agreements with each sub-processor. We do not authorize sub-processors to use your customer content for their own training or commercial purposes.

2.5 We Do Not Knowingly Collect Children's Data

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and improve the Inkeep platform and AI support agent functionality;
• Index connected documentation, repositories, and ticket history to build your agent's knowledge base;
• Serve AI-generated answers with source citations to your developers and end users;
• Respond to inquiries, support requests, and demo requests;
• Send service updates and, where you have opted in, product news;
• Monitor usage patterns to improve answer quality, escalation routing, and knowledge sync reliability;
• Detect, investigate, and prevent fraud or abuse of the Service;
• Comply with legal obligations.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (including cloud hosting, LLM inference, email delivery, and analytics) under contractual confidentiality and data processing terms that restrict secondary use;
• Legal authorities, when required by law or to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy and appropriate notice to affected parties.

We do not sell personal information or customer content to third parties.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. For details and choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy and to satisfy legal, accounting, or dispute-resolution obligations. Specifically:

• Customer knowledge base content (indexed documentation, repository data, ticket history) is retained for the duration of your active account and for 60 days following account closure to support data export requests, then permanently deleted;
• Account and contact information is retained for the duration of the relationship and for the period required by applicable law thereafter;
• Inactive marketing-list contacts are purged after 24 months of no activity;
• Server access logs are retained 90 days, then aggregated into non-personal usage statistics.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information and customer content. These include TLS encryption in transit, access controls on indexed knowledge stores, restricted least-privilege access to production systems, and logging of administrative actions on customer data. No system is perfectly secure; we cannot guarantee absolute security. If you believe a security incident has affected your data, please contact us promptly at [email protected].

8. Your General Rights

Depending on your jurisdiction, you may have rights including access to, correction of, deletion of, and the ability to limit certain processing of your personal information. To make a request, email [email protected]. We will respond within the timeframe required by applicable law.

9. California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), California residents have specific rights regarding personal information collected about them. This section supplements the rest of the Policy.

9.1 Categories We Collect

In the past 12 months, we have collected the following categories of personal information defined under Cal. Civ. Code §1798.140: identifiers (name, email, IP address); commercial information (service inquiries, account and subscription data); internet activity (browsing on getinkeep.com, queries submitted to the Inkeep agent); professional information (employer, role, project context provided voluntarily); and inferences drawn from the above for service-improvement purposes. We do not collect sensitive personal information as defined by Cal. Civ. Code §1798.140(ae) for purposes beyond those permitted without authorization (no precise geolocation, no government ID, no biometric identifiers).

9.2 Sources, Purposes, Disclosure

We obtain this information from you directly, through automatic site instrumentation, and (for platform users) through the documentation sources and repositories you connect. We use it to operate and improve the Service, answer developer questions through the AI agent, communicate with you, and meet legal obligations. We disclose it only to service providers under written contract and to legal authorities where required.

9.3 Your CCPA / CPRA Rights

• Right to Know: request the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: request deletion of personal information we collected from you, subject to legal exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: we do not sell personal information; we do not "share" it for cross-context behavioral advertising as defined under CPRA.
• Right to Limit Use of Sensitive PI: we do not use sensitive personal information for purposes beyond those permitted without authorization.
• Right to Non-Discrimination: we will not deny services, charge different prices, or provide a different level of service because you exercised a right.

9.4 How to Exercise

Submit a verifiable request by emailing [email protected] with the subject line "California Privacy Request." Include enough detail for us to verify you are the person whose information is the subject of the request. We respond within 45 days, with a possible 45-day extension for which we will notify you.

9.5 Authorized Agents

You may designate an authorized agent to make a request on your behalf. The agent must provide proof of authorization; we may also require you to verify your identity directly.

9.6 "Shine the Light"

California Civil Code §1798.83 entitles California residents to request information regarding our disclosure of personal information to third parties for direct marketing. We do not disclose personal information for third-party direct marketing.

9.7 Do Not Track and Global Privacy Control

Under the California Online Privacy Protection Act (Cal. Bus. & Prof. Code §22575), we disclose how we respond to "Do Not Track" (DNT) browser signals. Because there is no common industry standard for interpreting DNT signals, we do not currently respond differently to them. We do not authorize third parties to collect personally identifiable information about your activity across different websites when you use the Service. We honor an opt-out preference signal sent by a platform or browser that complies with the CPRA, such as the Global Privacy Control (GPC); when we detect a GPC signal, we treat it as a valid request to opt out of the sale or sharing of personal information for that browser or device.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to: