Last updated: September 3, 2026

Privacy Policy

1. Who this policy covers

This policy applies to anyone who uses INVENTRI — whether you're a buyer searching for products, or a merchant listing your store. It applies regardless of where you are in the world. INVENTRI is built to be used globally, and we apply the same baseline privacy standard to every user, modeled on the EU's General Data Protection Regulation (GDPR), regardless of your location.

2. Information we collect

From buyers

• Account information: name and email address (if you sign up with email), or basic profile information (name, email) if you sign in with Google.
• Search activity: the queries you type or speak, products you click on, items you add to cart or keep for later.
• Approximate location: if you allow location access, to show nearby merchants. We do not collect precise GPS location without your permission.
• Device and usage data: browser type, general device information, and how you interact with the site (for improving the product).

From merchants

• Business information: business name, email, password (securely hashed — we never store your password in readable form), store address, store type, Instagram handle, and any links you submit.
• Product information: the products, prices, and descriptions you upload or that are automatically indexed from a link you provide.
• Performance data: how many buyers view or click your listings, and what they searched for.

From publicly available sources (for indexed/crawled listings)

If you submit a public link (such as an Instagram profile or website), INVENTRI may automatically extract publicly visible product information from that link to build your store listing. This data is treated the same as information you provide directly, and you can claim, edit, or remove it at any time by creating an account.

3. How we use your information

• To operate the core discovery service — matching buyer searches to merchant inventory
• To maintain and improve the accuracy and freshness of our product index
• To communicate with you about your account, including service updates and (for merchants) buyer activity
• To detect, prevent, and address fraud, abuse, or technical issues
• To analyze aggregate usage trends to improve INVENTRI — we do this in ways that do not identify you personally wherever possible

We do not sell your personal information to third parties. We do not show personalized third-party advertising based on your search history.

4. AI-assisted matching

INVENTRI uses artificial intelligence — specifically a third-party large language model (Claude, by Anthropic) — to help interpret search queries and rank results by relevance. For example, if you type or paste a shopping list in plain language, AI helps understand what you mean and match it against merchant inventory.

To be clear about what this AI does and doesn't do: it ranks and interprets search results. It does not decide whether a merchant's listing is approved, removed, or promoted based on payment, and it does not generate fake reviews, fake stock, or fake listings — every result reflects real merchant-submitted or automatically indexed product data. Your search query text is sent to Anthropic to generate results, but is not linked to your name or email when we do this.

5. When we share information

We share information only in these limited circumstances:

• Between buyers and merchants: when you, as a buyer, click through to a merchant's product, the merchant may see that their listing was viewed or clicked — but we do not share your personal identity with merchants unless you choose to contact them directly.
• Service providers: we use trusted infrastructure providers (such as our database and hosting providers) strictly to operate INVENTRI. These providers are contractually bound to protect your data and use it only for the services they provide us.
• Legal requirements: if required by law, regulation, legal process, or government request.
• Business transfers: if INVENTRI is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy commitments described here.

6. Third-party services we use

This is the complete list of third-party services that process INVENTRI data today. We update this table before adding any new one — we don't add trackers or integrations silently.

We do not currently use Google Analytics, Meta Pixel, or any third-party advertising or cross-site tracking service. If we ever plan to sell a product on Apple's App Store or Google Play, we'll complete the store's required privacy disclosure (Apple's "Nutrition Label," Google Play's Data Safety section) before submitting, matching this table.

7. How we protect your data

We take the security of your information seriously and apply industry-standard safeguards, including:

• Passwords are never stored in plain text — they are hashed using strong, one-way cryptographic hashing (bcrypt)
• Data is stored with infrastructure providers that maintain encryption at rest and in transit (HTTPS/TLS)
• Access to production data is restricted and limited to what's operationally necessary
• We apply row-level security policies on our database to prevent unauthorized access between accounts

No system can guarantee absolute security, but we are committed to using reasonable and appropriate measures to protect your information, and to improving these measures as INVENTRI grows.

8. How long we keep your data

9. Your rights

Regardless of where you live, INVENTRI extends the following rights to all users:

• Access: you can request a copy of the personal data we hold about you
• Correction: you can update inaccurate information directly through your dashboard, or by contacting us
• Deletion: you can request that we delete your account and associated personal data, subject to limited legal exceptions
• Portability: you can request your data in a structured, commonly-used format
• Objection: you can object to certain uses of your data, such as analytics, where applicable

To exercise any of these rights, contact us at discover@inventri.ai. We will respond within 30 days.

10. International data transfers

INVENTRI operates globally. Your information may be processed and stored on servers located outside your country of residence, including in jurisdictions that may have different data protection laws than your own. Where we transfer personal data internationally, we take steps to ensure it remains protected to a standard consistent with this policy.

11. Children's privacy

INVENTRI is not directed at children under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.

12. Cookies and similar technologies

INVENTRI uses minimal session storage in your browser to keep you signed in and remember your cart or search history during a session. We do not currently use third-party advertising cookies or cross-site tracking technologies.

13. Data breach notification

In the event of a data breach that poses a risk to your rights and freedoms, we commit to notifying affected users and relevant data protection authorities without undue delay, and in any event within 72 hours of becoming aware of the breach, consistent with GDPR Article 33 standards — regardless of your location.

14. Changes to this policy

We may update this policy as INVENTRI evolves. If we make material changes, we will notify you via email or a prominent notice on our website before the changes take effect.

15. Contact us

If you have questions about this policy or how your data is handled, contact us at discover@inventri.ai.