Invitrace Connect — Privacy Policy

This Privacy Policy explains how INVITRACE COMPANY LIMITED (“Invitrace”, “we”, “us”, or “our”) collects, uses, and protects your information when you use the Invitrace Connect mobile application (the “App”).

Information we collect

• Account & profile. Your name, email address, and profile photo. For Invitrace team members these are provided by your Google Workspace account; for client users, your email address (and any name you provide).
• Authentication data. Sign-in credentials processed via Google Sign-In, the one-time passcodes we email to you, and the session tokens that keep you signed in.
• Messages. The messages and notifications delivered to you in the App.
• Device & technical data. A push-notification token (so we can deliver messages), app version, device and operating-system type, and basic diagnostic or crash information.
• Usage data. Limited activity such as your last sign-in time.

We do not collect payment information or precise location, and we do not sell your personal data.

How we use your information

We use your information to authenticate you, deliver and display your messages and notifications, maintain your profile, secure your account, and operate, support, and improve the App.

How we share information

We share data only with service providers who process it on our behalf:

• Google — sign-in and Google Workspace authentication.
• Amazon Web Services (Amazon SES) — sending one-time passcode emails.
• Apple Push Notification service and Google Firebase Cloud Messaging — delivering notifications.
• Cloud hosting and infrastructure providers that run our backend services.

We may also disclose information where required by law.

Data retention

We keep your information while your account is active and for as long as needed to provide the App, after which we delete or anonymize it when it is no longer required.

Your rights & data deletion

You may request access to, correction of, or deletion of your personal data — including deletion of your account — by emailing [email protected].

Security

Data is encrypted in transit using HTTPS. Session tokens are stored in the device's secure storage (iOS Keychain / Android Keystore), and access to the App is protected by a personal PIN and device biometrics (Face ID, Touch ID, or fingerprint).

Children

The App is not directed to children under 16, and we do not knowingly collect personal data from them.

International transfers

Your information may be processed in countries other than your own. Where this occurs, we apply appropriate safeguards to protect it.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version at this address with an updated effective date.

Contact us

If you have any questions about this Privacy Policy or your personal data, contact us: