INOSX Privacy Policy

Effective Date: August 27, 2026
Last Updated: August 27, 2026

INOSX respects your privacy and is committed to handling personal information responsibly, transparently, and in accordance with applicable data protection laws.

This Privacy Policy explains how INOSX (“INOSX,” “we,” “us,” or “our”) collects, receives, uses, stores, shares, and protects personal information when you subscribe to, access, purchase from, communicate with, or otherwise interact with the INOSX publication and related services.

These services may include newsletters, articles, editorial content, courses, workshops, downloadable resources, community features, educational materials, and other digital content (collectively, the “Services”).

The INOSX publication is currently hosted and distributed through Substack, a third-party technology platform operated by Substack Inc.

This Privacy Policy describes INOSX’s privacy practices as a publisher. Substack separately processes personal information under its own Privacy Policy.

1. Roles and Responsibilities

For personal information associated with the INOSX subscriber and reader relationship, INOSX generally acts as the data controller, meaning that we determine why and how that information is used for our publication and related Services.

Substack generally acts as a data processor when processing subscriber information on our behalf.

Substack may also act independently as a data controller for its own purposes, including platform operations, account management, security, analytics, recommendations, payments, fraud prevention, legal compliance, and other activities described in Substack’s Privacy Policy.

Accordingly, certain personal information may be processed independently by both INOSX and Substack under their respective privacy responsibilities.

2. Personal Information We May Receive

The information available to INOSX depends on how you interact with the Services.

2.1 Contact and Account Information

We may receive:

• your email address;

• your name or display name;

• your Substack username or profile information;

• your subscription preferences; and

• information you voluntarily provide when communicating with us.

2.2 Subscription Information

We may receive information concerning your subscription, including:

• free or paid subscription status;

• subscription plan or tier;

• subscription start or renewal information;

• cancellation status; and

• payment or transaction status.

INOSX does not need to receive or store your complete payment card details in order to operate the publication.

Payment information such as full credit card numbers is handled by Substack and its authorized payment processors.

2.3 Engagement and Analytics Information

Substack may make certain audience and engagement information available to INOSX, such as:

• article or page views;

• newsletter open activity;

• link clicks;

• referral sources;

• subscriber counts;

• subscription activity;

• interactions with posts;

• comments;

• likes or reactions; and

• aggregated audience information.

The specific analytics available to INOSX may change as Substack modifies its platform.

2.4 Communications and User-Generated Content

If you communicate with INOSX or participate in community features, we may process information contained in:

• emails;

• comments;

• replies;

• surveys;

• forms;

• questions;

• feedback;

• workshop interactions;

• support requests; and

• other communications you voluntarily submit.

Please avoid providing sensitive personal information unless it is genuinely necessary.

2.5 Technical Information

Substack and other technology providers may automatically collect technical information when you use the Services, including:

• IP address;

• browser type;

• device information;

• operating system;

• approximate location;

• referring pages;

• usage activity;

• cookie identifiers; and

• similar technical information.

INOSX may have access to some of this information through analytics or reporting features but may not have direct access to all technical information collected by Substack.

3. How We Use Personal Information

INOSX may use personal information to:

• deliver newsletters and subscribed content;

• administer free and paid subscriptions;

• provide access to courses, workshops, downloads, and other resources;

• respond to questions and support requests;

• communicate important service or account information;

• send editorial and publication communications you have requested;

• manage subscriber relationships;

• understand how readers interact with our content;

• measure publication performance;

• improve content, products, and Services;

• develop new educational or editorial offerings;

• prevent fraud, abuse, or misuse;

• maintain the security and integrity of our Services;

• enforce our Terms of Service;

• protect INOSX, our readers, and third parties;

• comply with legal and regulatory obligations; and

• establish, exercise, or defend legal claims.

We do not use personal information for purposes that are materially incompatible with those described in this Policy without providing appropriate notice or obtaining consent where required.

4. Legal Bases for Processing

Where the European Union General Data Protection Regulation (“EU GDPR”), UK GDPR, or similar data protection legislation applies, INOSX processes personal information under one or more lawful bases.

Depending on the activity, these may include:

Consent

We may rely on your consent when you voluntarily subscribe to communications or when applicable law requires consent for a particular processing activity.

You may withdraw consent at any time.

Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.

Performance of a Contract

We may process information when necessary to provide a subscription, course, workshop, digital resource, or another Service you have requested or purchased.

Legitimate Interests

We may process information when reasonably necessary for legitimate business interests, including:

• operating and improving the publication;

• understanding audience engagement;

• maintaining security;

• preventing fraud;

• responding to communications;

• developing content and Services; and

• protecting our legal rights.

When relying on legitimate interests, we consider those interests against the rights and privacy interests of affected individuals.

Legal Obligations

We may process or retain information where necessary to comply with applicable legal, regulatory, accounting, tax, law-enforcement, or judicial requirements.

5. Newsletter and Marketing Communications

When you subscribe to INOSX, we may use your email address to deliver the publication and related communications.

You may unsubscribe from newsletter communications at any time using the unsubscribe link provided in emails or through the subscription management features offered by Substack.

Certain transactional, security, legal, or administrative communications may still be sent where necessary even if you unsubscribe from editorial or marketing communications.

INOSX does not send unrelated third-party marketing communications using subscriber information without appropriate authorization.

6. Payments

Payments for paid subscriptions and other purchases made through Substack are processed through Substack and its designated payment providers.

INOSX may receive information such as:

• payment status;

• subscription status;

• transaction status;

• subscription tier; and

• limited billing-related information necessary to manage the customer relationship.

INOSX does not receive or store complete credit or debit card numbers processed through Substack’s payment infrastructure.

Payment providers process payment information according to their own privacy policies and legal obligations.

7. Cookies and Similar Technologies

Substack uses cookies and similar technologies to operate its platform.

These technologies may be used for purposes including:

• authentication;

• security;

• remembering preferences;

• platform functionality;

• performance measurement;

• analytics; and

• personalization.

Substack controls many of the cookies associated with its platform and describes these practices in its own Privacy Policy.

Substack may also allow publishers to configure certain analytics or tracking technologies.

If INOSX separately implements analytics, tracking technologies, or other cookies requiring disclosure or consent, we will provide appropriate information and controls where required by applicable law.

You may also manage cookies through your browser settings and, where available, through cookie-management tools provided by the platform.

Disabling certain cookies may affect the functionality of the Services.

8. Email Analytics

Newsletters may contain technologies that allow Substack and INOSX to understand whether an email was opened or whether links were clicked.

Such information helps us understand audience engagement and improve our content.

Depending on your email client, disabling automatic image loading or modifying privacy settings may limit certain email-open tracking functionality.

9. How We Share Personal Information

INOSX does not sell subscriber lists.

We may disclose personal information only when reasonably necessary to the following categories of recipients.

Service Providers

We may use service providers to help operate our Services, including providers of:

• publishing infrastructure;

• email delivery;

• hosting;

• analytics;

• payment processing;

• cloud infrastructure;

• customer support;

• security; and

• other technology services.

These providers may process personal information only as permitted by their contractual obligations, applicable law, and their respective privacy responsibilities.

Substack

Substack processes information necessary to provide the technology infrastructure used by the INOSX publication and may also independently process information as described in its own Privacy Policy.

Professional Advisers

Information may be disclosed to lawyers, accountants, auditors, consultants, insurers, or other professional advisers where reasonably necessary.

Legal and Regulatory Authorities

We may disclose information when reasonably necessary to:

• comply with applicable law;

• respond to lawful requests or legal process;

• protect legal rights;

• investigate fraud or security incidents;

• protect individuals from harm; or

• comply with regulatory or judicial obligations.

Business Transactions

If INOSX participates in a merger, acquisition, corporate restructuring, financing, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

10. No Sale of Personal Information

INOSX does not sell subscriber personal information or subscriber lists to third parties.

INOSX does not disclose subscriber personal information to third parties for their independent cross-context behavioral advertising purposes.

If these practices materially change, this Privacy Policy will be updated and any legally required choices or notices will be provided.

This section describes INOSX’s practices and does not replace or modify Substack’s separate disclosures concerning data processed independently by Substack.

11. International Data Transfers

INOSX serves an international audience, and the infrastructure used to provide the Services may process information in countries other than your country of residence.

Substack is based in the United States and uses service providers located in the United States and other jurisdictions.

Where required by applicable data protection laws, appropriate mechanisms may be used for international transfers, including contractual safeguards, adequacy mechanisms, or recognized data-transfer frameworks.

Substack maintains its own mechanisms for international transfers as described in its Privacy Policy and Publisher Agreement.

12. Data Retention

INOSX retains personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

• maintaining an active subscriber relationship;

• providing requested Services;

• maintaining appropriate business records;

• complying with legal or regulatory requirements;

• resolving disputes;

• preventing fraud or abuse; and

• establishing, exercising, or defending legal claims.

Retention periods may vary depending on the type of information, the nature of the relationship, applicable law, and operational requirements.

When information is no longer reasonably required, we may delete, anonymize, or otherwise securely dispose of it.

Information separately controlled by Substack is retained according to Substack’s own retention policies.

13. Data Security

INOSX takes reasonable administrative, technical, and organizational measures designed to protect personal information against:

• unauthorized access;

• misuse;

• loss;

• alteration;

• unauthorized disclosure; and

• destruction.

We also rely on the security measures implemented by technology providers used to deliver the Services.

However, no internet transmission, information system, or data-storage method can be guaranteed to be completely secure.

Users are responsible for maintaining the confidentiality and security of their own accounts and authentication credentials.

14. Your Privacy Rights

Depending on where you live, applicable law may provide rights concerning your personal information.

These rights may include the right to:

• request access to personal information;

• request correction of inaccurate information;

• request deletion of personal information;

• request restriction of processing;

• object to certain processing activities;

• withdraw consent;

• request portability of certain information;

• obtain information about categories of information collected or disclosed;

• opt out of certain forms of processing where applicable; and

• submit a complaint to an appropriate data protection authority.

Privacy rights are not absolute and may be subject to legal exceptions.

INOSX may need to verify your identity before fulfilling certain requests.

15. European Economic Area and United Kingdom

If you are located in the European Economic Area or United Kingdom and applicable data protection law applies, you may have rights under the EU GDPR or UK GDPR, including rights of:

• access;

• rectification;

• erasure;

• restriction;

• data portability;

• objection; and

• withdrawal of consent.

You may also have the right to lodge a complaint with the data protection authority responsible for your jurisdiction.

Where processing is based on legitimate interests, you may object to that processing based on your particular circumstances.

Where processing is based on consent, you may withdraw your consent at any time.

16. United States Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.

Depending on your jurisdiction and whether applicable statutory thresholds are met, these rights may include:

• confirming whether personal information is processed;

• accessing personal information;

• correcting inaccurate information;

• requesting deletion;

• obtaining a portable copy of certain information;

• learning about categories of information disclosed to third parties;

• opting out of certain targeted advertising, sale, or profiling activities; and

• exercising privacy rights without unlawful discrimination.

INOSX does not sell subscriber lists or subscriber personal information.

Rights available under state law vary, and some laws apply only when specific business or processing thresholds are met.

17. California Residents

California residents may have additional rights under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), where those laws apply.

Such rights may include:

• the right to know categories and specific pieces of personal information collected;

• the right to request deletion;

• the right to request correction;

• the right to know categories of sources and recipients;

• the right to opt out of certain sales or sharing;

• the right to limit certain uses of sensitive personal information where applicable; and

• the right not to receive discriminatory treatment for exercising applicable privacy rights.

INOSX does not sell subscriber personal information or subscriber lists.

Substack maintains separate privacy disclosures concerning information it controls independently.

18. Children’s Privacy

The Services are not directed to children under 16 years of age.

INOSX does not knowingly seek to collect personal information from children under 16 through the publication.

Substack also maintains age and eligibility requirements for use of its platform.

If we become aware that personal information from a child has been collected in circumstances inconsistent with applicable law, we will take reasonable steps to address the situation.

Parents or legal guardians who believe a child has provided personal information to INOSX may contact us using the information below.

19. Community and Public Information

Information you voluntarily post in comments, discussions, profiles, community areas, or other public-facing portions of the Services may be visible to other users and potentially to the general public.

You should not publish information that you wish to remain confidential.

INOSX is not responsible for how third parties independently use information that you voluntarily make public, subject to applicable law.

20. Third-Party Websites and Services

INOSX content may contain links to external websites, tools, applications, software platforms, research resources, or other third-party services.

Those services maintain their own privacy practices.

INOSX is not responsible for the privacy, security, or data-processing practices of independent third parties.

We encourage users to review the privacy policies of external services before providing personal information.

21. Automated Systems and Artificial Intelligence

Because INOSX focuses on technology and artificial intelligence, some internal workflows may use automated tools or artificial intelligence to assist with activities such as:

• content preparation;

• research organization;

• classification;

• summarization;

• editorial workflows;

• operational automation; or

• customer-support assistance.

INOSX does not intentionally use private subscriber personal information to train publicly available artificial intelligence models.

Where personal information is processed using automated systems, we seek to use such systems in a manner consistent with this Privacy Policy and applicable law.

We do not intentionally make legally significant decisions about individual subscribers solely through automated processing unless permitted by applicable law and accompanied by any legally required safeguards.

22. Publication Migration or Platform Changes

INOSX may in the future migrate the publication, subscriber list, or associated Services from Substack to another technology platform or operate portions of the Services directly.

Because INOSX maintains the publisher relationship with its subscribers, subscriber information may be transferred to a replacement or additional service provider where reasonably necessary to continue providing the Services.

Any such transfer will be performed subject to applicable privacy laws, contractual requirements, and appropriate safeguards.

Where required by law, users will receive appropriate notice or choice before a material change in processing occurs.

23. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in:

• our Services;

• technologies;

• business practices;

• service providers;

• legal requirements; or

• regulatory guidance.

The date at the beginning of this Policy identifies the most recent revision.

If a change materially affects how we process personal information, we may provide additional notice through the publication, email, or another appropriate method.

24. Relationship With Substack’s Privacy Policy

This Privacy Policy governs personal information processed by INOSX in connection with the INOSX publication and related Services.

Substack maintains a separate Privacy Policy governing personal information it processes as an independent data controller.

When Substack processes information on behalf of INOSX as a processor, INOSX remains responsible for its own obligations regarding that processing as required by applicable law.

Readers should review both policies to understand the complete privacy framework applicable when using the INOSX publication through Substack.

25. Contact and Privacy Requests

For questions, concerns, or requests relating to this Privacy Policy or personal information controlled by INOSX, contact:

INOSX
Email: [email protected]

Please include sufficient information for us to understand and, where necessary, verify your request.

Requests concerning information controlled independently by Substack may need to be directed to Substack through its privacy request channels.