Privacy Policy

Last updated: 14 June 2026

This Privacy Policy explains how invenios.ai (operated by [Company Legal Name], company number [Company Number], registered office [Registered Address]) collects, uses, and protects personal data when you visit our website, create an account, or use our platform.

This policy covers personal data for which we are the controller — primarily data about our business customers and website visitors. When we process personal data on a customer's behalf as a processor (for example, the content of conversations between a customer's assistant and its end users), that processing is governed by our Data Processing Agreement and the customer's own privacy notice.

1. Who we are

invenios.ai is the controller of the personal data described in this policy. You can contact us about privacy at hello@invenios.ai.

2. Personal data we collect

  • Account data: name, email address, organisation name, and authentication identifiers (managed through our authentication provider).
  • Billing data: plan, billing contact, and transaction records. Card details are handled by our payment provider; we do not store full card numbers.
  • Usage and device data: log data, IP address, approximate location, browser and device information, and how you interact with the platform.
  • Support and communications: messages you send us and related metadata.
  • Customer Content: configuration, knowledge sources, and conversation data that you create or that flows through your assistants. For most of this we act as a processor on your behalf (see the DPA).

3. How and why we use personal data

We use personal data to:

  • provide, secure, and operate the platform (lawful basis: performance of a contract);
  • process payments and manage billing (contract / legal obligation);
  • communicate with you about your account and service updates (contract / legitimate interests);
  • provide support and respond to enquiries (legitimate interests);
  • monitor, analyse, and improve the platform and prevent abuse (legitimate interests);
  • send marketing where you have not opted out or where you have consented, which you can withdraw at any time (consent / legitimate interests); and
  • comply with legal obligations and enforce our terms (legal obligation / legitimate interests).

Where we rely on legitimate interests, we balance those interests against your rights.

4. AI processing

When you use the platform, prompts and related content may be processed by the AI model providers you connect to your assistants. Those providers process this data under their own terms. We do not use the content of your assistants' conversations to train our own or third parties' foundation models.

5. Sharing your data

We share personal data with:

  • Service providers (sub-processors) who help us run the platform, including cloud hosting (Amazon Web Services, primarily in the EU/Ireland region), authentication, payment processing, email delivery, and analytics;
  • AI model providers you connect to your assistants;
  • Professional advisers, auditors, and authorities where required by law; and
  • A successor entity in connection with a merger, acquisition, or reorganisation.

We do not sell personal data.

6. International transfers

We host data primarily in the EU (Ireland). Where personal data is transferred outside the UK or EEA, we use an appropriate safeguard, such as the UK International Data Transfer Agreement / Addendum or the EU Standard Contractual Clauses, together with any additional measures required.

7. Retention

We keep personal data only as long as necessary for the purposes described, to comply with legal obligations, resolve disputes, and enforce agreements. Account and billing records are typically retained for the duration of the relationship and for a limited period afterwards as required by law. Customer Content is retained and deleted in line with your account settings and the DPA.

8. Security

We maintain technical and organisational measures appropriate to the risk, including encryption in transit, access controls, tenant isolation, and logging. No system is completely secure, but we work to protect personal data against unauthorised access, loss, or misuse, and we maintain processes to respond to security incidents.

9. Your rights

Subject to applicable law, you have the right to access, correct, delete, or restrict the processing of your personal data; to object to processing; to data portability; and to withdraw consent. To exercise these rights, contact hello@invenios.ai. You also have the right to complain to a supervisory authority — in the UK, the Information Commissioner's Office (ICO). Where the data relates to a customer's assistant and we act as a processor, we will direct your request to the relevant customer.

10. Cookies

We use cookies and similar technologies that are necessary to operate the site and, where you consent, to measure and improve it. You can manage non-essential cookies through your browser or any cookie controls we provide.

11. Children

The platform is intended for businesses and is not directed to children. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and, where changes are material, provide additional notice.

13. Contact

For any privacy question or request, contact hello@invenios.ai.