Customer privacy notice

E91A EAE3 73E1 52F2 20D9 31D6 3081 5AED 2F37 CBDF

0x30815AED2F37CBDF

Public key (.asc)

How to use OpenPGP

• Anything uploaded to our services (files, emails, forms etc.),
• The email address used to sign up,
• Any email addresses we may provide you (Invotek Mail customers),
• The domains used for any services (Invotek Web or Mail customers),
• Other personal data used by Stripe.
  This may include your name, email address, billing address, payment and transaction info, account credit, etc.
  
  We can only read a very limited amount of this information. Please see their Data Processing Agreement for details:

Stripe's Data Processing Agreement

• Your name,
• The email address used to sign up,
• Any email addresses we may provide you (Invotek Mail customers).

• Your name,
• The email address or Discord username used to contact us,
• If you contact us via Discord, we can also see any information on your profile,
• Any other information you provide when you contact us.

• The email address used to sign up,
• Anything uploaded to our services (files, emails etc.),
• Other personal data used by Stripe.
  This may include your name, email address, billing address, payment and transaction info, account credit, etc.
  
  We can only read a very limited amount of this information. Please see their Data Processing Agreement for details:

Stripe's Data Processing Agreement

• Your name,
• The email address used to sign up.

You have the right to ask us for copies of your personal data, and other information, like where we got it from, or who we share it with.

There may be exceptions where you do not receive everything you ask for. Check the ICO's website (above) for a list of exceptions.

You have the right to ask us to correct/delete personal data you think is inaccurate/incomplete.

You have the right to ask us to delete your personal data.

You have the right to ask us to limit how we use your personal data.

You have the right to object to the processing of your personal data.

You have the right to ask that we transfer the personal data you gave us to another organisation, or to you.

When we use consent as our lawful basis, you have the right to withdraw your consent at any time.

We use contract¹ as our legal basis.

We use contract¹ as our legal basis, as we may need to inform you of downtime, changes in pricing, etc., which may mean we can't provide our services anymore.

We use contract¹ and legitimate interests² as our legal basis.

We use contract¹ as there may be issues that significantly affects your service and thus affects us being able to carry out our contract with you.

We use legitimate interests² as we need to reply to your support queries via email/Discord, and provide you with general support/troubleshooting.

We use legitimate interests² as our legal basis as Stripe needs to identify and block fraudulent transactions. We also need to review uploaded content to ensure legal/ToS compliance, and add you to our purchasing blocklist if you break the law or our ToS.

We use consent³ as our legal basis.

¹ "Contract" means we have to collect/use this data to enter into, or carry out, a contract with you.

All of your data protection rights may apply, except the right to object.

² "Legitimate interests" means we're collecting/using your data because it benefits you, our organisation, or someone else, without causing an undue risk of harm to anyone.

All of your data protection rights may apply, except the right to portability.

³ "Consent" means we have permission from you after we gave you all the relevant information.

All of your data protection rights may apply, except the right to object. You have the right to withdraw your consent at any time.

Kept as long as you are a customer. Deleted two months after your last service ends, or earlier upon request. We'll send you reminders 30 days, 14 days, and 3 days before deletion.

Please note: We are legally required to keep transaction information for up to 6 years.

Please note: Any emails or other contacts related to purchasing our services will be kept if you made a transaction in the past 120 days, so we can prove to your bank you authorised the transactions.

Kept on our Stripe blocklist for up to 5 years, to identify and prevent you from buying our services again.

For those that are not an Invotek customer, we keep email conversations for up to 30 days after the last email sent or received.