Privacy Policy

1. Who we are

InvVid is a cloud-based SaaS platform providing AI video creation and marketing tools for businesses worldwide. It is operated by INVVEN Ltd, a New Zealand registered company.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights regarding it. It applies to all users of the InvVid platform at invvid.com.

For privacy enquiries or to exercise your rights, contact: support@invven.com

2. What data we collect

We collect and process the following types of data:

Account information

Your name, email address, and authentication credentials when you sign up. Managed through our identity provider and kept secure.

Business details

Company name, website URL, business description, logo, and settings you configure in InvVid.

AI-generated content

Video scripts, hooks, CTAs, voiceovers, and generated video files created through the platform. You retain ownership of all content generated for your account.

Uploaded media

Photos, video clips, and audio files you upload to the platform for use in video production.

Usage data

Pages visited, features used, session timing, and actions taken. Helps us improve the product and diagnose issues.

Technical data

IP address, browser type, device type, and operating system — collected automatically when you connect to InvVid.

Payment data

Subscription plan, payment status, and billing history. We do not store your full card number — payment processing is handled by our payment provider.

3. How we use your data

We use your data to:

• Create and manage your InvVid account.
• Generate AI videos, scripts, voiceovers, and marketing content on your behalf.
• Process website URLs and business descriptions to extract content for AI generation.
• Process your subscription billing and manage payments.
• Send you service-related notifications (e.g. payment confirmations, account alerts).
• Provide customer support and respond to your enquiries.
• Monitor, maintain, and improve the reliability and performance of the platform.
• Detect and prevent fraud, abuse, and security threats.
• Comply with legal obligations.

We do not use your data for advertising and we do not sell your data to third parties.

4. Legal bases for processing

We process personal data on the following legal bases:

• (a) Contract Performance — processing necessary to provide the Service under your subscription agreement.
• (b) Legitimate Interests — processing necessary for platform security, fraud prevention, and service improvement.
• (c) Legal Obligations — processing required to comply with applicable laws.
• (d) Consent — where you have provided explicit consent, which may be withdrawn at any time.

5. Who we share your data with

We share data only with trusted third-party service providers who process it on our behalf to deliver the service. Each is bound by a data processing agreement and/or their own privacy policies.

We use trusted third-party service providers for:

• Payment processing
• Cloud hosting and infrastructure
• User authentication
• Email delivery
• AI video and image generation
• AI voice synthesis
• Analytics and infrastructure monitoring

When you use AI generation features, your business information and content are processed by AI service providers (including large language model and video generation APIs). We do not use your data to train AI models.

A current list of our subprocessors is available on request by contacting support@invven.com.

6. Where your data is stored

Primary application data is hosted in Sydney, Australia. Some trusted service providers may process limited data in other jurisdictions where necessary to provide the service.

All data is encrypted in transit using TLS and encrypted at rest. Where your data is transferred to, or accessible from, countries outside your own jurisdiction, we rely on data processing agreements and standard contractual clauses as appropriate.

7. Cookies and tracking

InvVid uses essential cookies required to operate the service, including authentication session cookies. These are strictly necessary — the service cannot function without them.

We also collect usage analytics to understand how the platform is being used. We do not use advertising cookies, cross-site tracking cookies, or sell any tracking data to third parties.

8. Data retention

We retain your data for as long as your account is active and for a period afterwards as required by law:

• Account and billing data — retained for as long as required for tax, accounting, and dispute resolution purposes.
• Generated content and project data — deleted 37 days after account closure.
• Usage and technical data — generally retained for up to 12 months.

You may request deletion of personal data not subject to mandatory retention obligations by contacting support@invven.com.

9. Your rights by jurisdiction

Depending on where you are located, you have specific rights regarding your personal data. To exercise any of the rights described below, contact us at support@invven.com.

New Zealand — Privacy Act 2020

Right to access, correct, and complain to the Privacy Commissioner. Contact: privacy.org.nz

Australia — Privacy Act 1988

Right to access, correct, opt out of marketing, and complain to the OAIC. Contact: oaic.gov.au

United Kingdom — UK GDPR

Right to access, rectify, erase, restrict, port, and object. Lodge complaints with the ICO: ico.org.uk

European Union — GDPR

Full GDPR rights including access, rectification, erasure, restriction, portability, and objection. Find your national authority at edpb.europa.eu

United States — CCPA

We do not sell or share your personal information with third parties for monetary consideration or targeted advertising.

10. Security

We implement reasonable technical and organisational measures to protect your data, including:

• TLS encryption for all data in transit.
• Encryption at rest for all stored data.
• Role-based access controls.
• Secure, managed cloud infrastructure.

If you become aware of a security issue involving InvVid, please notify us immediately at support@invven.com.

11. Children's privacy

The Service is intended for users aged 18 and over. We do not knowingly collect personal data from individuals under 18. Contact support@invven.com if you believe a minor has provided us with personal data.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by displaying a notice within the InvVid application, with the updated effective date shown at the top of this page.

13. Contact us

For any privacy-related questions, data requests, or complaints: