Customer privacy notice

• Anything uploaded to our services (files, emails etc.),
• The email address used to sign up,
• Any email addresses we may provide you (Invotek Mail customers),
• The domains used for any services (Invotek Web or Mail customers),
• Other personal data used by Stripe.
  This may include your name, email address, billing address, payment and transaction info, account credit, etc.
  
  We only have access to a very limited amount of this information. Please see their Data Processing Agreement for details:

Stripe's Data Processing Agreement

• The email address used to sign up,
• Any email addresses we may provide you (Invotek Mail customers).

• The email address or Discord username used to contact us,
• If you contact us via Discord, we can also see any information on your profile,
• Any other information you provide when you contact us.

• The email address used to sign up,
• Anything uploaded to our services (files, emails etc.),
• Other personal data used by Stripe.
  This may include your name, email address, billing address, payment and transaction info, account credit, etc.
  
  We only have access to a very limited amount of this information. Please see their Data Processing Agreement for details:

Stripe's Data Processing Agreement

You have the right to ask us for copies of your personal data, and other information, like where we got it from, or who we share it with.

There may be exceptions where you do not receive everything you ask for. Check the ICO's website (above) for a list of exceptions.

You have the right to ask us to correct/delete personal data you think is inaccurate/incomplete.

You have the right to ask us to delete your personal data.

You have the right to ask us to limit how we use your personal data.

You have the right to object to the processing of your personal data.

You have the right to ask that we transfer the personal data you gave us to another organisation, or to you.

When we use consent as our lawful basis, you have the right to withdraw your consent at any time.

We use contract¹ as our legal basis.

We use contract¹ as our legal basis.

We use contract¹ because we may need to inform you of downtime, changes in pricing, etc., that may mean we can't provide our services anymore.

We use contract¹ and legitimate interests² as our legal basis.

We use contract¹ because there may be issues that significantly affects your service and thus affects us being able to carry out our contract with you.

We use legitimate interests² because we need to reply to your support queries via email/Discord, and provide you with general support/troubleshooting.

We use legitimate interests² as our legal basis.

We use legitimate interests² because Stripe needs to identify and block fraudulent transactions. We also need this to manually/automatically review uploaded content to ensure compliance with the law and our Terms of Service, and prevent you from buying from us again if this is not met.

¹ "Contract" means we have to collect/use this data to enter into, or carry out, a contract with you.

All of your data protection rights may apply, except the right to object.

² "Legitimate interests" means we're collecting/using your data because it benefits you, our organisation, or someone else, without causing an undue risk of harm to anyone.

All of your data protection rights may apply, except the right to portability.

Kept as long as you are a customer. Deleted two months after your last service ends. We'll send you reminders 30 days, 14 days, and 3 days before deletion.

Please note: We are legally required to keep transaction information for up to 6 years.

Kept as long as your query is open. Deleted one month after being resolved, to allow for any follow-up queries.

Please note: Any emails related to purchasing our services will be kept if you made a transaction in the past 120 days, so we can prove to your bank you authorised the transactions.

Kept for up to 10 years, to identify and prevent you from buying our services again.