Inventifornia Privacy Policy

1. SCOPE AND DEFINITIONS

1.1. Personal Information. Refers to information that identifies, relates to, or could reasonably be linked to a specific natural person, such as a name, email address, or phone number.

1.2. Input Data. Refers to operational inventory records — SKU data, barcodes, quantities, locations, and business-related content uploaded to the Service. Input Data must not include protected health information (PHI) or patient identifiers; see our Operational Data Boundary.

2. INFORMATION WE COLLECT

2.1. Information Provided by You. We collect information when you create an account, subscribe to a plan, or communicate with our support team. This includes:

• Account credentials (username, encrypted passwords).
• Professional contact information (name, business email, job title).
• Payment and billing information (processed via secure third-party gateways).

2.2. Information Collected via the Service. We collect all data entered into the Service interface, including but not limited to:

• Inventory descriptions, quantities, and locations.
• Asset tags, images of inventory, and scanning timestamps.
• Audit logs detailing which user modified specific records.

2.3. Automatically Collected Information. We utilize cookies, log files, and tracking technologies to collect:

• IP addresses, browser types, and device identifiers.
• Clickstream data and navigation patterns within the Service.

3. HOW WE USE INFORMATION

3.1. Provision of Service. To maintain your account, process transactions, and provide technical support.

3.2. Platform Optimization. To analyze usage trends, conduct load testing, and identify potential platform improvements.

3.3. Communication. To send system updates, security alerts, and promotional materials (where permitted by law).

4. DISCLOSURE AND SHARING OF DATA

4.1. Third-Party Service Providers. We share information with vendors who perform services on our behalf, such as cloud hosting (e.g., Cloudflare, AWS), database management, and payment processing (e.g., Stripe). These providers are contractually obligated to protect data.

4.2. Business Transfers. In the event of a merger, acquisition, or sale of assets, information may be transferred to the successor entity.

4.3. Legal Compliance. We will disclose information if required by law, subpoena, or court order, or if we believe such action is necessary to protect the safety, rights, or property of Inventifornia or our users.

5. DATA RETENTION AND TERMINATION RIGHTS

5.1. Retention Period. We retain Personal Information while your account is active. Audit trail records are retained for the life of the account plus seven (7) years after termination to support government accountability requirements.

5.2. Post-Termination. Upon subscription termination, you have 30 days to export your data. We delete Customer data from active production systems within 90 days, subject to backup rotation (30-day rolling backups) and legal hold. Full schedule: Data Retention.

6. SECURITY MEASURES AND LIMITATIONS

6.1. Safeguards. We implement administrative, technical, and physical safeguards described in our Trust Center, including encryption in transit and at rest on Cloudflare's SOC 2 Type II–certified infrastructure.

6.2. User Responsibility. You are solely responsible for maintaining the security of your login credentials and for managing user permissions within your organization's account.

7. INTERNATIONAL DATA TRANSFERS

7.1. Cross-Border Transfers. Information may be stored and processed in Canada, the United States, or any other country where Inventifornia or its service providers maintain facilities. By using the Service, you consent to the transfer of information to countries outside of your country of residence, which may have different data protection rules.

8. YOUR RIGHTS AND CHOICES

8.1. Access and Correction. You may update your account profile through the Service interface.

8.2. Marketing Opt-Out. You may unsubscribe from promotional emails via the "unsubscribe" link. You cannot opt out of critical service-related communications.

9. CHANGES TO THIS POLICY

We reserve the right to modify this Privacy Policy at any time. We will notify you of material changes by updating the "Last Updated" date or through an in-app notification. Continued use of the Service constitutes acceptance of the modified policy.

10. CONTACT INFORMATION

For questions regarding this policy or our data practices, please contact our legal department at support@inventifornia.com.