Privacy Policy

iDreamable LLC, a North Carolina, USA company ("we," "us," or "our"), operates the MyInvy mobile application and web platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, visit our website, or communicate with us.

By using MyInvy, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Personal Information

When you create an account or use our services, we may collect:

• Name and display name
• Email address
• Profile avatar
• Organization name and details

Business Data

To provide our inventory management services, we store:

• Inventory items, categories, and quantities
• Location and stocking area information
• Count sessions and schedules
• Shopping lists and purchase orders
• Supplier information
• Item images you upload

Setup and Count Activity

We record setup and count milestones for your account, on the web and in the mobile apps, such as when a business is created, items are added, reorder levels are set, or a count is started or completed. Our iOS and Android apps also record steps of setup and counting, such as which setup screens were shown, which buttons were tapped, whether the result of a count was shown, which steps of the getting-started guide were opened, and whether the prompt to turn on notifications was shown and accepted. These records are linked to your account and to your business.

Besides that link, each record holds only what happened, when it happened, and details made of numbers and fixed words, such as how many items were added, how many items were low after a count, or which way of adding items was chosen. The records do not hold text you type, item names, or business names. Records made from the iOS and Android apps also note the platform and app version.

Marketing and Communications Information

When you communicate with us or we contact a business through a publicly listed business channel, we may collect:

• Public business contact details, contact role, source URL, and verification date
• Messages, replies, meeting notes, and communication preferences
• Unsubscribe, do-not-contact, delivery-failure, and complaint records
• Coarse account milestones, such as whether registration or a first count is complete or an account is approaching a plan limit

We do not copy inventory items, quantities, supplier details, employee activity, recovery email addresses, or multi-factor-authentication status into marketing records.

Payment Information

We process payments through Stripe, the Apple App Store, and Google Play. We do not store your credit card numbers or bank account details directly. Payment processors may collect:

• Subscription plan and billing status
• Billing dates and renewal preferences
• Transaction identifiers (managed by Stripe, Apple, or Google)

Device and Technical Information

We automatically collect certain technical information:

• IP address and browser/device user-agent (for login security)
• Push notification device tokens (to send you alerts)
• Device type and platform information

Biometric Data

If you enable biometric or device-credential unlock, authentication is processed entirely on your device by Apple's or Android's security framework. We never receive, transmit, or store your biometric data.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our inventory management services
• Authenticate your identity and secure your account
• Process subscription payments and manage billing
• Send push notifications for low stock alerts and updates
• Respond to support requests
• Send relevant business outreach, product information, and onboarding help, subject to your communication choices
• Tailor onboarding or plan information using the minimum account-level milestone needed for the message
• Understand where people get stuck during setup and counting, and improve onboarding
• Monitor and improve the reliability of our services
• Detect and prevent fraud or unauthorized access

3. How We Share Your Information

We do not sell your personal information. We share data with the following service providers to operate our platform, and with optional connected services as described below:

• Microsoft Azure — cloud hosting, data storage, identity management (Azure B2C), email communications, and push notifications
• Stripe — payment processing for web subscriptions
• Apple — payment processing for in-app subscriptions via the App Store
• Google — payment processing for Android subscriptions through Google Play and delivery of Android push notifications through Firebase Cloud Messaging
• OpenAI — reading item names from a photo of a list that you choose to send from the iOS or Android app

Photos of Lists

In the iOS and Android apps, an owner or manager can add items by taking or choosing a photo of a written or printed list. The app makes a re-encoded JPEG copy of the photo, at most 2,048 pixels on its longest side and without its location, date or camera details, and sends that copy to MyInvy's servers, which send it to OpenAI with a fixed instruction to return the item names. The request to OpenAI does not include your name, your email address, or any identifier of your account or business, but anything else visible in the photo is sent with it.

MyInvy's servers do not store the photo or OpenAI's answer. While a request is processed, the server can hold the photo in a temporary file, which is deleted when the request ends. For photo reading, the servers keep a count of the photos read for your business each day, with the time of the last one, to apply a daily limit. As with other requests, our service logs record each photo request and its call to OpenAI with their time, outcome, and duration, and a request that ends in an error, such as reaching the daily limit or the reading service being unavailable, is logged with your account identifier. These records do not contain the photo or the names. OpenAI may keep the request, including the photo, for up to 30 days for abuse monitoring.

The names that are read appear in the Add Items list on your device, where you can check and change them. The device keeps that list of names, stored under your business, until you add the items or discard the list, even if you sign out, and the list is included when the device is backed up or moved to a new device, for example with iCloud or computer backups on iOS and with Google backup or device-to-device transfer on Android. Items you add are stored like any other item. Neither app adds the photo to your photo library, and the iOS app does not keep it. The Android app has the camera save a photo to a temporary file in the app's private cache and deletes that file once the photo is loaded, or right away if the photo is not used. If the app is closed while the camera is open, the file stays in that cache, as the camera saved it and with any location the camera added, until the next time you start adding items from a photo or the app's cache is cleared.

Optional AI Connections

When you choose to connect MyInvy to an AI service such as OpenAI's ChatGPT or Anthropic's Claude, that service receives the results of requests authorized by your connection permissions and MyInvy account access. Depending on the permissions you approve, results may include organization and location information, inventory quantities and units, configured costs, supplier details, consumption and count history, and existing shopping lists, including stored notes and links to records.

Connection authorization shares an account identifier with the connected service. If you approve the email permission, MyInvy also shares your email address and its verification status. The current AI connection provides read-only access to business records; it does not change inventory or place orders. Connecting an AI service is optional.

The AI service processes information it receives under its own terms and privacy policy, including its retention and deletion practices. Disconnecting does not delete information already received by that service. You can revoke the connection from MyInvy's Connected Apps page. Revocation blocks token renewal immediately; existing access tokens expire within 10 minutes. You may also need to disconnect the integration in the AI service.

We may also disclose your information if required by law, regulation, or legal process.

4. Data Storage and Security

Your data is stored on Microsoft Azure infrastructure in the United States. We use industry-standard security measures including encrypted connections (TLS), secure authentication tokens, and role-based access controls to protect your information.

Item images and import files are stored in encrypted cloud storage. Access to your organization's data is restricted to authorized members based on their assigned roles and locations.

We record routine security and operational audit logs for AI connection requests, including account, organization, and client identifiers, requested tool and permission, request correlation identifier, duration, outcome, and result counts. These logs support access security and service reliability. The routine tool-call audit entry does not contain the request arguments or returned business records.

5. Data Retention

We retain your personal and business data for as long as your account is active or as needed to provide our services. Login audit records (IP address and device information) are retained for up to 6 months for security purposes.

If your account is inactive for 12 consecutive months, we may delete your account and all associated data, including inventory records, item images, and organization information. We will attempt to notify you by email before deletion.

When you delete your account, we remove your personal information from our identity system and your organization membership. You may also request full deletion of your data at any time by contacting us.

The setup and count activity records linked to your account are deleted when you delete your account. When an owner deletes their account and this closes the business, we also delete the activity records of the business and of its other members.

We delete or anonymize an unresponsive prospect record within 90 days after the last outreach. We review records connected to a genuine business conversation every 90 days and delete or anonymize them within 12 months after the last interaction unless an active customer or partner relationship requires the record. We keep only the minimum suppression record needed to honor an unsubscribe or do-not-contact choice and prevent recontact.

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated personal data
• Export your inventory data
• Opt out of push notifications at any time through your device settings
• Opt out of promotional email or business outreach through the message's unsubscribe method or by contacting us

To exercise any of these rights, contact us at support@myinvy.com.

We treat an unsubscribe, direct do-not-contact request, hard bounce, or spam complaint as an immediate stop for promotional outreach. We retain a minimal suppression record so a later import does not add the contact back to a campaign.

7. Children's Privacy

MyInvy is a business tool designed for use by adults and authorized employees. We do not knowingly collect personal information from anyone under the age of 16. If we learn that we have collected data from a person under 16, we will take steps to delete that information promptly.

8. Analytics and Tracking

We may use website analytics to understand public page visits, signup and App Store button clicks, and whether a visitor creates an account or starts a paid-plan trial after using the marketing site. These website analytics use non-PII event details such as page path, campaign parameters, referrer host, and CTA location.

The setup and count activity described in section 1 is recorded by MyInvy itself. The iOS and Android apps send their screen and tap events only to MyInvy's own servers.

We do not use third-party analytics, advertising, or tracking SDKs in our mobile apps. We do not collect advertising identifiers or share your data with ad networks.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

support@myinvy.com