Privacy notice

Effective: 10 November 2026

Inkrid is run by Matej Kujundzic, an individual in Serbia ([email protected]). We are the controller for your account and the data you sync to us.

When a team uses Inkrid on its own analytics data, we process that data for the team under our data processing terms, linked at the foot of this page.

  • Your account: name, email, avatar and the sign-in account you used (GitHub or Google), to give you an account. Legal basis: our contract with you.
  • Sign-in tokens: GitHub or Google send them when you sign in. We store them with your account, encrypted where they give access to your GitHub or Google account, and do not use them after sign-in. Legal basis: our contract with you.
  • Sessions: when you signed in, your IP address and browser, to keep you signed in and protect the account. Legal basis: our legitimate interest in security.
  • Your workspace, while you are signed in: your chats, with the results shown in them, are saved to your account so they appear on every device, alongside your charts, saved definitions and metrics, and connection settings. Passwords and keys for your connections stay out unless you seal them with your passphrase. Legal basis: our contract with you.
  • Teams: members of a team see each other’s name, email and avatar.
  • Calls through our server to the tools you connect: which account called which host, when, and the answer’s status and size, never what was sent or returned, to trace abuse. Legal basis: our legitimate interest in security.
  • Error reports: what failed in the app, with your account id but not your name or email. Legal basis: our legitimate interest in a working service.
  • Request logs: our host, Railway, logs each request to this site with your IP address and browser. For a call through our server, the logged address can name your tool and hold values from your query. Legal basis: our legitimate interest in a working, secure service.

Passwords and API keys for the tools you connect are kept only in your browser, or, if you sync them, sealed with a passphrase only you know, so we cannot read them. A sign-in you give a tool’s own AI tools (Metabase) is kept only in that browser and never synced.

Calls to Kibana go straight from your browser. Calls to your other dashboards and your databases, and to those tools’ own services (such as PostHog’s MCP server or Google’s Analytics Admin API), pass through our server only to reach them. They carry the key, password or sign-in the tool needs, which our server uses for that call only and never stores. What they send and return is never stored, apart from each call’s address in our host’s request logs. For 30 days we keep which account called which host, when, and the answer’s status and size, to trace abuse of the service.

There are no analytics, advertising or tracking scripts on this site.

Your questions, the shape of your data and the results of the queries the AI runs go from your browser to the AI provider you pick in AI settings, under that provider’s terms. We do not receive or store those calls.

Some providers’ free plans use what you send to train their models. Use a paid plan for personal or confidential data.

  • Railway Corporation: hosting of the website and the account database, in an EU region.
  • Functional Software, Inc. (Sentry): error reports, in Germany (EU).
  • GitHub, Inc. and Google LLC: sign-in, only when you choose them.

Some of them are in the United States. Where data leaves the EU or Serbia, it is covered by the standard contractual clauses or equivalent safeguards in our agreements with them.

  • Your account and synced workspace: until you delete them or your account.
  • Sign-in tokens: until you delete your account.
  • Sessions: they end 7 days after you last used them, and expired ones are deleted within a day.
  • Records of calls through our server: 30 days, also after you delete your account.
  • Error reports: 30 days, then Sentry deletes them.
  • Request logs: for a limited time set by Railway; our plan shows us the last 7 days.
  • Backups: at most 30 days, after which deleted data is gone from them too.

You can download what we keep about you (all of it but the sign-in tokens) and delete your account at any time from the account menu. You can also ask us to correct your data, to restrict or object to its use, or for a copy, at the address above.

You can complain to the data protection authority where you live or work, or to the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (poverenik.rs).

We set only the cookies that keep you signed in. The app keeps its settings and your connections in your browser’s storage. None of this tracks you, so there is no cookie banner.

We will say here when this notice changes, and tell you in the app before a change that affects you takes effect.