Privacy Policy

1. Introduction

Invenio Potential Sdn Bhd ("we", "us", or "our") operates Invist.ai (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and being transparent about our data practices. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Full name
• Authentication credentials (managed securely by our authentication provider)

2.2 Usage Data

We automatically collect certain information when you use the Service:

• Chat messages and conversations
• Files you upload and their metadata
• AI model selections and preferences
• Usage statistics and interaction patterns
• Device information (browser type, operating system, IP address)
• Log data (access times, pages viewed, errors)

2.3 Content Data

We process and store:

• Messages you send to AI models
• Files and documents you upload (PDF, CSV, XLSX, images)
• AI-generated responses and artifacts
• Conversation threads and history

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• To provide and maintain the Service
• To process your requests to AI models
• To store and retrieve your conversations and files
• To enable features like document analysis and web search

3.2 Service Improvement

• To analyze usage patterns and improve our Service
• To develop new features and functionalities
• To optimize performance and user experience

3.3 Communication

• To send service-related notifications
• To respond to your inquiries and support requests
• To notify you of updates or changes to the Service

3.4 Security and Compliance

• To detect, prevent, and address technical issues
• To protect against fraudulent or illegal activity
• To comply with legal obligations

4. Data Sharing and Disclosure

4.1 Third-Party AI Providers

We share your messages with third-party AI model providers (OpenAI, Anthropic, Google, etc.) to generate responses. Each provider has its own privacy policy and data handling practices.

4.2 Service Providers

We may share data with service providers who assist us in:

• Cloud hosting and storage
• Authentication services
• Analytics and monitoring
• Payment processing

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls and monitoring
• Secure cloud infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your information for as long as necessary to provide the Service and comply with legal obligations:

• Account Data: Retained while your account is active
• Conversation History: Retained for the duration of your account unless deleted by you
• Uploaded Files: Retained according to your storage preferences
• Usage Logs: Typically retained for 90 days

You can delete your conversations and files at any time through the Service interface.

7. Your Rights and Choices

You have the following rights regarding your personal data:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Export: Request a copy of your data in a portable format
• Opt-out: Opt out of marketing communications
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at info@invenioptl.com.

8. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Help us understand how you use the Service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings, but disabling certain cookies may affect Service functionality.

9. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Malaysia. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification

Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: