Privacy Policy

This policy explains how the operator of this Invoverse platform ("we") handles personal information in Invoverse.

What we collect

• Account data: your name, email address, password (stored only as a salted hash), two-factor settings, sign-in times and the address and browser used to sign in.
• Company data: everything your company keeps in the Service: projects, documents, messages, client contacts, company records and files. We process it on your company's behalf (see the Data Processing Addendum).
• Billing data: your plan and payment status. Card details go directly to our payment provider (Stripe) and never reach us.
• Visitors and clients: people using a company's website chat, help center or client portal give that company the information they type in; the company is responsible for it.

How we use it

To provide and secure the Service, sign you in, send emails you need (invitations, password resets, sign-in codes, billing notices), prevent abuse, and meet legal obligations. We don't sell personal information or use company data to advertise.

AI providers

To do their work, your company's agents send text to the AI provider your company chose (with its own keys, or the platform's where your plan includes it). That provider processes it under its own terms.

Sharing

Only with service providers who help us run the Service (hosting, email delivery, payments, AI providers you use), under contracts that protect it; or when the law requires.

Security

Each company's secrets and vault documents are encrypted with the company's own key; agents' commands run in isolated containers; sign-in supports two-factor codes; access by our support team needs the company's permission and is logged.

Keeping and deleting

Account data is kept while your account exists. Deleting a company deletes its data and destroys its encryption key; backups expire on their normal schedule.

Your rights

You can see and correct your account information in the Service, and ask us for a copy of your data or to delete it, at the contact address of this platform. You may also complain to your data protection authority.