GDPR Policy
Draft template — not yet ready to publish. These policies have not been reviewed by a lawyer, and some values may still be unset. Fill in the company and legal policy details under Branding in the admin console, have the text reviewed by qualified legal counsel, then switch this notice off there.
This GDPR Policy supplements our Privacy Policy and explains how InventiPro Pvt. Ltd., a company registered in India, with its registered office at 141, Laxmi Nagar, Niwaru Road, Jhotwara, Jaipur - 302012, Rajasthan processes the personal data of individuals located in the European Economic Area ("EEA"), the United Kingdom, and Switzerland in connection with the InventiPro desktop application, web application, installable Progressive Web App, and related services (collectively, the "Service"), and the rights available to those individuals under the EU General Data Protection Regulation ("GDPR") and the UK GDPR.
1. Who This Policy Covers
This policy applies to you if you are located in the EEA, UK, or Switzerland and either (a) use the Service yourself as an individual user, or (b) are a customer, employee, or other individual whose personal data a business using the Service (a "tenant") has entered into the Service. Where a tenant enters data about their own customers or staff, that tenant is the data controller for that data and we act as a data processor on their behalf; for account and billing data relating to the tenant business itself, we act as the data controller. Our general data-handling practices, including what we collect and why, are described in our Privacy Policy and Data Usage Policy — this page focuses on the specific rights and legal bases the GDPR provides.
2. Legal Bases for Processing
Under Article 6 of the GDPR, we rely on the following legal bases, depending on the processing activity:
- Contract performance: processing your account information and business/tenant data is necessary to provide the Service you have signed up for.
- Consent: where you have separately agreed, for example to receive optional marketing communications.
- Legitimate interests: for activities such as maintaining the security and reliability of the Service, preventing fraud, and improving our product — carried out in a way that does not override your rights and interests.
- Legal obligation: where we are required to retain or disclose information to comply with tax, accounting, or other applicable law.
3. Your Rights Under the GDPR
Subject to the conditions and exemptions set out in the GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you;
- Rectification — request correction of inaccurate or incomplete personal data;
- Erasure — request deletion of your personal data, sometimes known as the "right to be forgotten";
- Restriction of processing — request that we limit how we use your personal data in certain circumstances;
- Data portability — request your personal data in a structured, commonly used, machine-readable format, or ask us to transmit it to another controller where technically feasible;
- Objection — object to processing carried out on the basis of legitimate interests, or to direct marketing at any time;
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.
We do not use your personal data for any decision-making that produces legal or similarly significant effects on you based solely on automated processing, including profiling.
To exercise any of these rights, contact us at support@inventipro.com. Where a tenant business is the data controller for your data (see Section 1), we may direct your request to that tenant, since they control what data is entered into the Service and for what purpose.
4. International Data Transfers
InventiPro Pvt. Ltd. is based in India. Providing the Service to individuals in the EEA, UK, or Switzerland necessarily involves transferring personal data outside those regions, including to India and to the jurisdiction of the hosting infrastructure provider described in our Data Usage Policy. We are in the process of putting appropriate safeguards in place for these transfers, such as the European Commission's Standard Contractual Clauses where applicable. If you have questions about a specific transfer of your data, contact us at support@inventipro.com.
5. Data Retention
As described in our Privacy Policy, we retain personal data for as long as your account (or the tenant account associated with your data) remains active, and for a further period of a limited period afterward, except where a longer period is required by law.
6. Data Protection Contact
We have not appointed a statutory Data Protection Officer, as we do not currently meet the GDPR's criteria requiring one. Questions or requests relating to this GDPR Policy, or to the processing of your personal data more generally, can be sent to support@inventipro.com.
7. Right to Lodge a Complaint
If you are not satisfied with how we have handled your personal data or a request you have made, you have the right to lodge a complaint with the data protection supervisory authority in your EEA member state, the UK Information Commissioner's Office (ICO), or the Swiss Federal Data Protection and Information Commissioner (FDPIC), as applicable to your location. We would appreciate the opportunity to address your concern directly first — contact us at support@inventipro.com.
8. Changes to This Policy
We may update this GDPR Policy from time to time. Material changes will be notified via the Service or by email to your registered address. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
9. Contact
Questions about this GDPR Policy can be sent to support@inventipro.com.