🔒 PRIVACY POLICY Your Privacy is Our Priority

Privacy Policy

This Privacy Policy explains how Inventa POS ("Inventa," "we," "us") collects, uses, and shares information when you use our website, cloud POS software, and Inventa Mobile / Inventa Track Mobile apps.

Last updated: August 25, 2026

1. Who We Are & Scope

Inventa provides a multi-tenant point-of-sale (POS), inventory, CRM, HR, and related business software at inventapos.com, including web apps and Inventa Mobile on Google Play and the Apple App Store.

  • Android (Google Play): package com.inventatrack.mobile
  • iOS (App Store): bundle ID com.inventa.mobile (listed as Inventa Mobile)

This policy covers the website, cloud POS, and both mobile apps. The same account and workspace data is used on Play and the App Store.

This policy applies to account holders, employees using the product, and end customers whose data is entered into a tenant's Inventa workspace. Tenant businesses are responsible for lawful use of customer and employee data they store in Inventa.

2. Information We Collect

2.1 Account & business registration

When you register or set up a workspace, we may collect:

  • Name, email address, and password (stored hashed)
  • Company / workspace code and business profile details you provide
  • Acceptance of Terms and this Privacy Policy
  • Optional referral codes
  • reCAPTCHA tokens when bot protection is enabled

2.2 POS, inventory & sales data

To run the product we process operational business data you or your staff enter, including products/services, inventory, warehouses ("locations"), sales and transfers, invoices, payments, and related reports.

2.3 Customers & CRM

If your business uses customer/CRM features, we store customer records you create (for example name, email, phone, tax ID, billing/shipping addresses, notes, and messaging history). Optional OTP verification may be used for customer flows when enabled by the tenant.

2.4 Employees & HR (when enabled)

HR and attendance features may store employee profile data (contact details, date of birth, address, and other HR fields your organization configures), scheduling, attendance/clock records, and—if your company enables fingerprint login—fingerprint templates used for authentication on supported POS/web setups (not a replacement for device Face ID / Touch ID on phones unless your mobile app separately supports that).

2.5 Login, device & security logs

  • IP address, user-agent, and approximate device type (mobile / tablet / desktop)
  • Approximate geolocation derived from IP (country, region, city, coordinates, ISP) for security and login history
  • POS terminal identifiers (for example computer / terminal IDs used to associate a register)
  • Authentication tokens for API and mobile access (for example Sanctum tokens)

2.6 Payments & billing

Subscription and invoice payments are processed by third-party payment gateways configured for your account (for example Stripe, PayPal, Razorpay, and other gateways available in the product). Card numbers are handled by those processors; Inventa does not store full card PAN data as a card vault. We may store billing status, payment references, and limited truncated card indicators where the gateway returns them.

2.7 Messages, files & AI features

Chat and CRM messaging may include message content, delivery/open/read events, and uploaded files (images, documents, audio/video). If Inventa AI features are enabled, relevant business data may be sent to the configured AI provider (for example a self-hosted or configured Ollama endpoint) to generate responses.

3. Mobile Applications (Google Play & Apple App Store)

Inventa Mobile is the same product on Google Play and the Apple App Store. Both apps connect to your Inventa workspace over the internet for login, sales, approvals, transfers, reports, CRM, scheduling, messaging, and notifications. You sign in with the email and password issued by your organization. There is no public consumer sign-up in the mobile apps.

Data processed through the mobile apps typically includes:

  • Account credentials you enter and session / API tokens
  • Push notification tokens: FCM (Firebase Cloud Messaging) on Android / Google Play, and APNs (Apple Push Notification service) on iOS / App Store; plus device type (android / ios) and optional app version
  • Business data you access in the app (sales, transfers, warehouses labeled as "locations," reports, messages, and attachments)
  • Network connectivity required to call Inventa APIs

Device permissions (requested only when a feature needs them):

  • Notifications — push alerts for messages, approvals, and announcements. You can turn these off in app Settings or in iOS / Android system settings.
  • Face ID / Touch ID / fingerprint (optional) — after a successful password login, you may enable biometric unlock on the device. Biometric data stays on the device; we do not receive your face or fingerprint image.
  • Photos / camera (optional) — if you attach an image in chat or a similar feature.

Important clarifications:

  • "Location" in Inventa usually means a warehouse / store location in your account—not continuous GPS tracking of your phone.
  • We do not require Bluetooth or continuous GPS for core mobile features. You can revoke any permission in system settings.
  • Google Play and the App Store each receive the information required to distribute and update the app (for example crash diagnostics if you share them with the store).

4. How We Use Information

We use information to:

  • Provide, operate, secure, and improve Inventa POS and mobile apps
  • Authenticate users, prevent abuse, and maintain login / audit history
  • Process transactions, inventory movements, invoicing, and subscriptions
  • Send service emails, SMS (when configured), and push notifications you have enabled
  • Provide support and troubleshoot issues
  • Comply with legal obligations and enforce our terms

5. How We Share Information

We do not sell your personal information. We share data only as needed to run the service, including with:

  • Payment processors for subscriptions and invoices
  • Google Firebase Cloud Messaging (FCM) and Apple Push Notification service (APNs) for mobile push delivery
  • SMS / messaging providers (for example Twilio) when SMS or messaging integrations are enabled
  • Email delivery providers configured for transactional and notification mail
  • IP geolocation providers (for example ip-api) used for approximate login location
  • Cloud storage providers (for example Amazon S3) when file storage is configured that way
  • AI providers when Inventa AI features are enabled for your account
  • Integrations and webhooks you or your administrator configure (CRM, WhatsApp, Inventa Track webhooks, etc.)
  • Professional advisors, or authorities when required by law, or in connection with a merger, acquisition, or asset sale

Within a tenant workspace, authorized staff can access business data according to roles and permissions set by that business.

6. Cookies & Similar Technologies

We use cookies and similar technologies for authentication, preferences, POS terminal association, security, and—where enabled—cookie consent preferences. Where cookie consent is enabled in your deployment, you can manage choices through the consent banner. You can also control cookies in your browser settings; disabling some cookies may limit product functionality.

7. Data Security

We use commercially reasonable safeguards appropriate for a cloud business application, including:

  • Encrypted transport (HTTPS / TLS) between clients and our servers
  • Hashed passwords and application-level encryption for selected sensitive fields (for example optional encryption of biometric templates using industry-standard algorithms such as AES-256-CBC where enabled)
  • Access controls, role permissions, and authentication tokens
  • Optional fingerprint authentication for supported POS/web environments when a tenant enables it
  • Optional Face ID / Touch ID on Inventa Mobile (iOS) and biometric unlock on Android, processed on-device

No method of transmission or storage is 100% secure. Inventa is not marketed as providing end-to-end encryption of all POS business data between every party.

8. Data Retention

We retain account and operational data for as long as your workspace remains active and as needed to provide the service, meet legal, accounting, or dispute requirements, and maintain security logs. Mobile app access and push tokens can be removed as described in section 9. Organization business records are kept according to this retention practice unless we are required by law to change how long we keep them.

9. Your Rights & Choices

Inventa Mobile (App Store and Google Play): Accounts are created by your organization, not by public sign-up in the app. To remove your mobile access, ask your Inventa administrator to deactivate your staff login, or email privacy@inventapos.com from the email on the account. We will revoke that user’s app access and delete stored push tokens for that device. Workspace business records (sales, inventory, and similar) stay with the organization as described in section 8.

If your data was collected by a business using Inventa (for example as their customer), contact that business about their own records. They are typically the data controller for that information.

You may also:

  • Update profile information in account settings where available
  • Disable push notifications in the mobile OS or app settings
  • Revoke app permissions (including Face ID / notifications / photos) in device settings
  • Opt out of non-essential marketing communications where offered

10. Children's Privacy

Inventa is a business product intended for organizations and their staff. The website and POS are not directed to children under 13. Inventa Mobile is intended for workplace staff (typically 16+). We do not knowingly collect personal information from children for consumer use of the product.

11. International Processing

We may process and store information on servers in regions where we or our service providers operate. If you access Inventa from another country, your information may be transferred across borders subject to appropriate safeguards and applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Continued use of Inventa after changes become effective constitutes acceptance of the updated policy where permitted by law.

13. Contact Us

Questions about this Privacy Policy:

Ready to Take Your Business to the Next Level?

Discover how InventaPOS can streamline your sales, master your inventory, and put you in control of your business. Request your personalized quote today and unlock your business's full potential!

Interested in