Privacy Policy

This Privacy Policy explains how Invia collects, uses, stores, and shares information when organizations and visitors use the platform.

It is written to reflect the product behavior currently implemented in the app, including account access, dashboard workflows, public share pages, and support requests.

We collect information you provide directly, such as names, email addresses, passwords or authentication data, property details, client details, messages, and support requests.

We also process data generated by use of the product, including organization membership, share-link activity, and public page events.

We use information to operate the dashboard, authenticate users, manage organizations, send messages, generate and revoke share links, and display public property pages.

We also use data to maintain security, prevent abuse, diagnose errors, and improve the service.

When an authorized user creates a public share link, Invia can display property information on a tokenized public page.

Opening a share page may create an event record so the organization can understand whether a link was accessed. Public pages may also expose selected contact actions and visibility settings chosen by the organization.

If you submit our contact form, we collect the fields you enter and process them to respond to your request.

The form includes anti-spam protections such as a hidden honeypot field, a minimum-submit-delay check, and rate limiting. Rate limiting may rely on in-memory and persistent records so repeated abuse can be reduced.

We use authentication data to verify account access and support login, invitation, and session-handling flows.

Authenticated users can access the private dashboard only when their organization membership and profile are active.

We share information with service providers that help us host the application, store data, authenticate users, and deliver email.

These providers may process information on our behalf under their own infrastructure and security controls. We do not sell personal information.

We keep information for as long as needed to operate the platform, maintain records, support security and anti-abuse controls, or comply with legal obligations.

When an organization removes access or a share link is revoked, some records may remain for operational, audit, or security purposes unless a deletion request applies and law allows removal.

We use administrative, technical, and organizational measures intended to protect information. No system is perfectly secure, and you should protect account credentials and share links carefully.

Depending on your location, you may have rights to access, correct, delete, or restrict certain information, or to object to certain processing.

If you believe information is inaccurate or you want to request deletion or review of a record, contact us using the details below.

The platform may use session-related technologies or similar mechanisms required to keep you signed in and to operate the service.

If we add additional analytics or advertising technologies later, we will update this policy accordingly.

Invia is intended for professional use and is not directed to children.

We may update this Privacy Policy when the service changes or when legal requirements change.

We will update the effective date below when we make changes.

For privacy requests or questions, contact [privacy contact email].