Privacy Policy

Effective Date: February 19, 2026 Last Updated: February 19, 2026

inblog Inc. ("Company," "we," "us," or "our") operates the inblog.ai platform and related services (inpages.ai, informs.io). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our services.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

Account Information: Email address, display name, and profile information provided during registration.
Social Login Data: When you sign in via Google or LinkedIn, we receive your name, email address, and profile picture from the respective provider.
Payment Information: Billing details are processed by our payment provider, Paddle. We do not store your full credit card number. We may retain the last four digits of your card, card brand, and billing address for record-keeping.
Content: Blog posts, pages, images, and other content you create or upload on our platform.
Lead Form Data: If you submit a lead form on a blog powered by our platform, the blog owner collects the information you provide (e.g., name, email, phone, company, job title). inblog processes this data on behalf of the blog owner.
Communications: Messages you send to us via email or live chat (Crisp).

1.2 Information Collected Automatically

Usage Data: IP address, browser type, browser version, device information, operating system, pages visited, time and date of visits, time spent on pages, and referring URLs.
Cookies and Tracking Technologies: We use cookies and similar technologies for analytics purposes. See Section 7 (Cookie Policy) for details.

2. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: To provide, maintain, and improve our platform.
Account Management: To manage your registration and account.
Payment Processing: To process transactions and manage subscriptions.
Communication: To send service-related notices, updates, and respond to inquiries.
Analytics: To analyze usage patterns and improve our services.
AI-Powered Features: To provide search and content-related features (see Section 6).
Security: To detect and prevent fraud, abuse, and security incidents.
Legal Compliance: To comply with applicable laws and regulations.

3. Third-Party Service Providers

We share your information with the following third-party service providers who assist us in operating our platform:

3.1 Payment Processing

Provider	Purpose	Data Shared
Paddle (primary)	Subscription billing and payment processing	Email, billing information, payment details
Lemon Squeezy (legacy)	Payment processing for existing subscribers who signed up before the Paddle migration	Email, billing information, payment details

3.2 Infrastructure and Hosting

Provider	Purpose	Data Shared
Supabase	Database, authentication, backend services	Account data, content, usage data
Vercel	Web hosting and deployment	IP address, access logs
Cloudflare R2	Image and file storage	Uploaded files
Upstash	Caching and rate limiting	Temporary request data

3.3 Analytics and Monitoring

Provider	Purpose	Data Shared
Google Analytics	Website traffic analysis	IP address, pages visited, usage patterns (via cookies)
DataFast	Marketing attribution and conversion tracking	Visitor ID, session ID, conversion events (via cookies)
LogRocket	Session recording for debugging and UX improvement	Session activity, clicks, page interactions

3.4 Communication

Provider	Purpose	Data Shared
Crisp	Live chat customer support	Chat messages, email
Resend	Transactional emails (welcome emails, notifications)	Email address
Mailchimp	Email marketing and newsletter management	Email address, subscription status

3.5 Authentication

Provider	Purpose	Data Shared
Google OAuth	Social login	Email, display name, profile picture
LinkedIn OAuth	Social login	Email, display name, profile picture

3.6 Other Services

Provider	Purpose	Data Shared
Google Search Console	SEO performance data for blog owners	Site performance data (no personal user data)
Calendly	Demo meeting scheduling	Name, email (when you book a meeting)
Slack	Internal team notifications	Aggregated event data (no direct personal data shared with external parties)

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Specifically:

Account Data: Retained until you request account deletion.
Content: Retained until you delete it or close your account.
Payment Records: Retained as required by tax and accounting laws (typically 5 years under Korean law).
Analytics Data: Retained in aggregated, anonymized form.
Log Data: Retained for up to 12 months for security and debugging purposes.

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

5. International Data Transfers

Our primary database is hosted on Supabase servers in West US (North California). Your data may also be processed in other locations through our third-party service providers (see Section 3), including but not limited to the United States.

By using our services, you consent to the transfer of your information to countries outside of your country of residence, which may have different data protection standards. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

6. AI-Powered Features and Data Processing

Our platform uses AI technology to enhance your experience:

Search: We use OpenAI's embedding API (model: text-embedding-3-large) to generate vector representations of blog content for AI-powered search functionality.
Content Processing: Blog post content may be sent to OpenAI's servers in the United States for processing.

Important:

We use the OpenAI API, which is governed by OpenAI's data usage policies. As of the date of this policy, API inputs are not used to train OpenAI's models.
Only content that is already published on the platform is processed. Private drafts are not sent to AI services.
No personal user data (such as email addresses or payment information) is sent to AI providers.

7. Cookie Policy

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help websites function properly and provide analytics information.

7.2 Cookies We Use

Essential Cookies (always active — required for the service to function):

Cookie	Purpose	Provider
Authentication tokens	Maintain your login session	Supabase

Analytics Cookies (loaded only with your consent):

Cookie	Purpose	Provider
`_ga`, `_gid`	Website traffic analysis	Google Analytics
`datafast_visitor_id`	Visitor identification for conversion tracking	DataFast
`datafast_session_id`	Session tracking for marketing attribution	DataFast
Session cookies	Session recording for UX improvement	LogRocket

7.3 Managing Cookies

When you first visit our website, a cookie consent banner will appear. You may:

Accept All: Enable all cookies, including analytics.
Reject: Only essential cookies will be used.

You can change your preference at any time by clearing your browser's local storage for inblog.ai and revisiting the site.

You may also configure your browser to block cookies. Note that blocking essential cookies may prevent our services from functioning properly.

8. Your Rights

Under the Korean Personal Information Protection Act (PIPA) and other applicable laws, you have the following rights:

Right of Access: Request a copy of the personal data we hold about you.
Right to Correction: Request correction of inaccurate or incomplete data.
Right to Deletion: Request deletion of your personal data, subject to legal retention requirements.
Right to Withdraw Consent: Withdraw consent to data processing at any time.
Right to Data Portability: Request your data in a structured, machine-readable format.
Right to Complain: File a complaint with the Personal Information Protection Commission (PIPC) of Korea.

To exercise any of these rights, contact us at sangwon@inblog.ai.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of data in transit (TLS/SSL).
Access controls limiting data access to authorized personnel only.
Regular security monitoring and auditing.
Use of secure, reputable third-party service providers.

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

Our services are not intended for children under the age of 14. We do not knowingly collect personal information from children under 14. If we become aware that we have collected such data, we will take steps to delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. For significant changes, we will notify you via email or a prominent notice on our platform at least 15 days before the changes take effect.

Your continued use of our services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Email: sangwon@inblog.ai
Address: 304, 27 Nambusunhwan-ro 218-gil, Gwanak-gu, Seoul, Republic of Korea (08787)
Data Protection Officer: sangwon@inblog.ai