Privacy Notice — Invecta

1. Who we are

Invecta is operated by Sirlopu Technology Services, LLC ("Invecta", "we", "us"). For the personal data described in this notice, Sirlopu Technology Services, LLC acts as the data controller.

2. Personal data we collect

Account data: name, email address, password hash, and profile settings.
Workspace data: workspace name, members, roles, customers, invoices, and other records you create in the Service.
Support communications: messages and attachments you send to us for help.
Usage and device data: log data, IP address, browser and device identifiers, and product telemetry needed to operate and secure the Service.
Billing data: collected and processed directly by Paddle as the Merchant of Record; we receive limited billing status information (e.g. subscription status, last four digits of a card).

3. How we use personal data

To create and manage your account and workspaces.
To provide the Service and its features.
To secure the Service and prevent fraud and abuse.
To provide customer support.
To improve the product, including analytics on aggregated usage.
To send transactional emails (invites, invoices, receipts, security notices). Marketing emails are only sent with your consent and can be unsubscribed from at any time.
To comply with legal obligations.

4. Legal bases

Where applicable law (e.g. the GDPR / UK GDPR) requires a legal basis, we rely on: performance of a contract with you, our legitimate interests in operating and improving the Service, your consent (where required, e.g. for marketing or non-essential cookies), and compliance with legal obligations.

5. Sharing your data

We share personal data with:

Service providers / subprocessors that help us operate the Service, including cloud hosting, database, email delivery, analytics, and error-monitoring providers, under contractual confidentiality and data-protection terms.
Paddle.com Market Limited, our Merchant of Record for the sale of subscriptions, including for payments, invoicing, subscription management, and tax compliance.
Professional advisors such as legal and accounting advisors where necessary.
Authorities where required by law, legal process, or to protect our rights.
A successor entity in the context of a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

6. International transfers

Personal data may be processed in the United States and other countries where we or our service providers operate. Where required by law (for example, transfers from the UK/EEA), we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Data retention

We retain personal data for as long as your account and workspace are active, and for a limited period afterward to meet legal, accounting, and security obligations. When data is no longer required, we delete or anonymize it.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, to withdraw consent, and to complain to a data protection authority. To exercise these rights, contact privacy@invecta.app. We respond within 30 days where required by law.

9. Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, audit logging, and least-privilege access to production systems.

10. Cookies

We use essential cookies to keep you signed in and to secure the Service. We may also use limited analytics cookies to understand how the Service is used. You can manage cookies through your browser settings.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them.

12. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be highlighted in the Service or by email.

13. Contact

Sirlopu Technology Services, LLC — privacy@invecta.app. See also our Terms of Service and Refund Policy.