Privacy Policy
Last updated: 7 July 2026
This Privacy Policy explains what personal data Invyzo ("Invyzo", "we", "us") collects, how we use and share it, how long we keep it, and the rights and choices you have. It applies to the Invyzo website and application. Invyzo is operated by Histria Dev, which is the controller of the personal data described in this policy.
1. Information we collect
Account data: the email address and display name on your account and a securely hashed password. Content you create: the business, client, invoice, and document details you enter, and any logo images you upload. Billing data: subscriptions and payments are handled by Paddle.com as merchant of record — we receive your subscription status and a customer reference, and we never receive or store full payment card numbers. Technical data: your IP address, browser type, and basic request logs used to operate and secure the service. Communications: feedback you submit in the app and emails you send us.
2. How we use your data
We use your data to provide the service you signed up for: authenticating you, generating and storing your invoices and documents, and managing your module subscriptions (performance of our contract with you). We send transactional emails such as verification, password-reset, and failed-payment notices (contract and legitimate interest), and we may send occasional product emails about Invyzo, which you can opt out of at any time via the unsubscribe link (legitimate interest, or consent where required). We also use technical data to secure the service, prevent abuse, and rate-limit requests (legitimate interest), and we process data where necessary to comply with legal obligations. We do not sell your personal data and we do not use it for third-party advertising.
3. Cookies and analytics
We use a small number of essential cookies to keep you signed in, and your theme preference is stored locally in your browser. We also use PostHog and Google Analytics to understand how the app is used — which pages are visited and which features are used — so we can improve it. Before you make a choice in our cookie banner, and if you decline, these tools only count visits anonymously: they set no analytics cookies and do not identify you. Only after you accept do we enable full, cookie-backed analytics. We never use advertising cookies.
4. Processors we rely on
We share data with service providers only as needed to run Invyzo: Amazon Web Services (AWS) for hosting, our database, and private file storage for uploaded logos; Paddle.com for subscription billing, acting as merchant of record and as an independent controller for payment processing; Loops for sending email; and PostHog and Google Analytics for product and usage analytics (only when you accept analytics cookies). Each provider processes data under a data-processing agreement or its own legally required terms, and none of them may use your data for their own advertising.
5. International transfers
Some of our providers process data outside your country, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision (including the EU–US Data Privacy Framework where the provider is certified).
6. Data retention and account deletion
We keep your account, invoice, and document data for as long as your account is active. You can delete your account from your settings: it is deactivated immediately and permanently deleted after a 30-day recovery window, during which you can restore it. After that window your content is deleted and personal identifiers are removed from our systems, except for limited records we must retain to meet legal obligations (for example billing records kept by Paddle).
7. Your rights
Depending on your location, you have the right to access, correct, export, or delete your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. You can unsubscribe from product emails at any time via the link in each email. To exercise your rights, contact us at info@invyzo.com. If you are in the EU, EEA, or UK, you also have the right to lodge a complaint with your local data-protection authority.
8. Security
We protect your data with industry-standard measures, including encrypted connections (TLS), hashed passwords, access controls, and private storage for uploaded files that is only accessible through short-lived signed links. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and will inform you of breaches where the law requires it.
9. Children
Invyzo is not directed to children and requires users to be at least 18 years old. We do not knowingly collect personal data from children; if you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time and will post the revised version on this page with an updated date. If a change is material, we will notify you by email or in the app.
11. Contact
If you have questions about this Privacy Policy or how we handle your data, email info@invyzo.com.