Privacy Notice

Who we are

The controller is Invenios Solutions, БЪЛГАРИЯ, гр. Добрич (9300), жк. Дружба 4, 4, бл. 65, вх. Б, ет. 1, ап. 1 . Write to us at hello@invenios.site.

What we collect

• Profile: name, email address and profile photo, received from Google at sign-in. We never store or see your password.
• Your questionnaire answers and your site's content, including any photos you upload.
• Domain and registrant details, if you buy a domain through us - passed to the registry because ICANN's rules require it.
• Technical data while using the studio: IP address and browser, for security and abuse prevention.
• Payment records: what you bought, when, and how much - never your card number, which only our payment provider sees.
• A record of what you did in the studio: each site generation, section rewrite, payment and plan change, so we can apply fair limits and answer questions about your account.
• A record of what you agreed to and when - the terms, and whether you asked to receive our emails.

Why, and on what basis

We process this data to perform our contract with you - to build, host and maintain your site. We process registrant data because we have a legal and contractual duty to pass it to the domain registry.

We keep payment records because accounting and tax law requires it.

We send you emails about your own order - the receipt, your site going live, a domain that could not be bought and has been refunded - as part of that contract. You cannot opt out of these: they tell you what happened to your money.

We send anything else - tips, news, reminders that a site was left unfinished - only if you have agreed to it. That agreement is yours to withdraw at any time, from your settings or the unsubscribe link in any such email, and withdrawing it changes nothing else about your account.

Cookies

The studio sets one cookie, to keep you signed in. It is required for the product to work at all and is not used to track you. We run no advertising or analytics cookies on our own pages.

For how long

• For as long as you hold an account with us, plus a reasonable period after it closes.
• Unfinished questionnaire answers with no site created: 12 months.
• The record of which automatic emails we sent you: 12 months.
• Photos uploaded before an account existed and never used: 14 days.
• Payment and invoice records: 10 years, as accounting and tax law requires - longer than your account lasts. When a site is deleted they are kept apart from it, with the site's name and whom the invoice was made out to.
• A site that has never been online: 60 days after it was last worked on.
• A site kept offline (no plan, or unused for a year on the free plan): twelve months, with 30 days' notice and a copy of the site.
• Whether an email address has already had a free trial or a welcome-back discount: kept for 24 months after an account is deleted, only as a one-way code made from the address, so the same offer is not given twice. The address itself is not kept.
• Consent records: for as long as we rely on them, and afterwards for as long as we may need to show what was agreed.

Who we rely on

We work with processors who handle data on our instructions. Each one receives only what it needs:

• Google - signing in to your account.
• Cloudinary - storing and serving your photos.
• Namecheap - domain registration.
• Resend - sending emails.
• Railway - servers and database.
• Stripe - taking payments and holding your card details, which never reach us.
• Anthropic - writing your site's text from the answers you gave. Your answers are sent there to be turned into a website, and are not used to train anyone's model.

Data outside the EU

Some of these providers are in the United States: Stripe, Anthropic, Cloudinary and Namecheap. Where data reaches them, it is transferred under the European Commission's standard contractual clauses. Your site itself, its database and its backups stay in the EU.

Your rights

You have the right to access, correct, erase, port and object. Write to us at hello@invenios.site. If you believe we have handled your data wrongly, you can complain to Bulgaria's Commission for Personal Data Protection (KZLD), kzld.bg.