Privacy notice.

Who we are

Inack Inc. operates InackGuard and this website. For account and website data we are the controller. For the people and companies our customers screen, our customer is the controller and we process that data on their instructions under a data-processing agreement.

What we collect

Account data: name, work email, organisation, role, a protected password hash, an optional authenticator secret (stored encrypted) and sign-in history. Customer-submitted data: names, dates of birth, countries, identifiers, lists, transaction files and uploaded documents. Billing data: payment identifiers held by our payment processor; we never store card numbers. Operational data: request logs with time, page, status and IP address.

How we use it

To run the service you asked for, keep it secure, bill you, answer support requests and meet legal obligations. We do not sell personal data, and we do not use customer-submitted data to train AI models.

AI processing

For document reviews and report summaries, the relevant text is sent to an AI model provider under contract. The provider acts on our instructions; output is checked against the sources before it is shown, and the AI never makes a decision. An administrator can turn AI assistance off for the organisation.

Who receives data

Only providers that need it to do the job, under contract: cloud hosting and storage, an AI model provider, a payment processor, an email delivery provider, and search and public-register services that receive a name as a search term. The full list is part of our data-processing agreement and is available on request; we tell customers 30 days before adding a recipient of customer data.

Where data is stored

In the United States. Customers outside the United States can sign standard contractual clauses with our data-processing agreement.

How long we keep it

Uploaded document text: deleted after 30 days. Report previews that were not purchased: deleted after 14 days. Reports: kept for the period of your plan, from 30 to 365 days, or as agreed for enterprise accounts. A legal hold set by your administrator stops deletion while it applies. Account data: for the life of the account and as the law requires after.

Your rights

You can ask to access, correct or delete personal data, or object to its use. If you were screened by one of our customers, write to them first; we will help them answer. Erasure runs through a controlled path that records what was erased. Write to privacy@inack.io and we will respond within 30 days.

Security

Encryption in transit, encrypted secrets, separation between organisations, single sign-on, multi-factor authentication and a tamper-evident evidence record. Details and the roadmap are in the trust centre.

Cookies

This website uses essential storage to remember your cookie choice and run the site. Analytics loads only if you choose Accept all, with IP addresses anonymised. Choosing Essential only means no analytics. To change your choice, clear this site's data in your browser and the banner returns. The signed-in platform uses only essential cookies for sign-in and security.

Changes

We will post changes here with a new date and tell account administrators about material changes in advance.

Contact

privacy@inack.io for privacy questions and requests; support@inack.io for everything else.