Privacy Policy

This policy explains what invz collects, why, and who processes it. It applies to people who send agreements (“senders”) and people who sign them (“signers”).

What we collect

• Account data: email, name, country, currency, and business details you add (address, GSTIN, SAC, logo).
• Agreement data: the text of drafts and contracts, the chat used to draft them, parties’ names and emails.
• Signing evidence: signature image, signed name, IP address, browser user agent, timestamps, the consent sentence, and an audit trail of events (created, sent, viewed, signed, completed).
• Invoices and payment details you choose to print on invoices (for example UPI ID or bank details). We never collect card numbers.
• Usage analytics: page views and funnel events, without contract contents.

Why

To draft, deliver and sign agreements, prove who signed what and when, send invoices and reminders, bill subscriptions, prevent abuse, and improve the product.

Processors

AI providers receive agreement text only to produce drafts, summaries and invoice data; we do not allow it to be used to train their models where that option exists.

Retention

Completed agreements and their audit trail are kept while your account exists so both parties can rely on them. If you delete your account, open contracts are voided and completed PDFs stay available to your counterparties for 90 days, then are deleted.

Your rights

You can export your data (Settings → Data) and delete your account at any time. Depending on where you live — for example under India’s Digital Personal Data Protection Act, 2023, or US state laws such as the CCPA — you may have additional rights to access, correct or erase your data. Contact privacy@inv.so.

Security

Signature images and signed PDFs are private and served only through links that expire after one hour. Sign-in uses one-time email codes; we never store passwords.