1. Introduction & scope
This Privacy Policy explains how Invizone Infotech LLP ("Invizone", "we", "us") collects, uses, and protects information when you visit invizoneinfotech.com (the "Site") and when you use the Invizone chemical inventory management application (the "Service").
It applies to visitors, prospective customers, and Authorized Users of customer accounts. It does not apply to third-party websites or services we link to. By using the Site or Service, you acknowledge this Policy.
2. Information you provide
We collect information you give us directly, including:
- Account information — name, work email, password, organization/facility name, and role.
- Billing information — plan, billing contact, and payment details processed by our payment provider [PAYMENT PROVIDER].
- Content you enter — chemical records, locations, containers, projects, requests, team members, and related operational data ("Customer Data").
- Communications — messages you send to support, sales, or via forms on the Site.
3. Information collected automatically
When you use the Site or Service, we may automatically collect:
- Usage and log data — actions taken, pages viewed, timestamps, and audit events.
- Device and connection data — IP address, browser type, operating system, and similar technical information.
- Cookies and similar technologies — see Section 6.
4. Customer Data vs. account data
For data that customers enter into the Service ("Customer Data"), the customer organization is the controller and Invizone acts as a processor, handling that data on the customer's behalf and instructions. Customers are responsible for the lawfulness of the data they upload and for managing their Authorized Users.
For account, billing, and Site data, Invizone is the controller. Where required, data processing terms are set out in a separate [DATA PROCESSING ADDENDUM].
5. How we use information
- To provide, maintain, and secure the Site and Service.
- To authenticate users and enforce access controls and audit logging.
- To process payments and manage subscriptions.
- To provide support and respond to your requests.
- To improve and develop our products, including aggregated and de-identified analysis.
- To send service, security, and administrative communications.
- To comply with legal obligations and enforce our terms.
We do not sell personal information.
8. Data retention
We retain account and Customer Data for as long as your account is active and as needed to provide the Service. After account closure, Customer Data is retained for [RETENTION PERIOD] to allow export and recovery, then deleted or de-identified, unless a longer period is required by law.
9. Security
We use technical and organizational measures to protect data, including encryption in transit and at rest, role-based access controls, tenant isolation, and a full audit trail of changes within the Service. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.
10. Your rights
Depending on your location, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@invizoneinfotech.com. For Customer Data, we will refer requests to the relevant customer (controller).
[Add jurisdiction-specific rights, e.g. GDPR / CCPA / DPDP Act, as applicable.]
11. International data transfers
We may process and store information in countries other than where you are located. Where we transfer personal data across borders, we use appropriate safeguards as required by applicable law. Our primary data hosting region is India (Amazon Web Services, Asia Pacific / Mumbai — ap-south-1).
12. Children's privacy
The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from anyone under [AGE].
13. Changes & contact
We may update this Policy from time to time. Material changes will be communicated through the Site or Service, and the "Last updated" date will reflect the latest revision.
Questions about this Policy or your data can be directed to:
Invizone Infotech LLP
Email: privacy@invizoneinfotech.com
Address: [REGISTERED ADDRESS]