Privacy Policy

Last updated: [EFFECTIVE_DATE]

This Privacy Policy explains how [COMPANY] ("Innvil," "we," "us") collects, uses, shares, and protects personal information when you use the Innvil platform, websites, dashboards, and APIs (the "Platform"). By using the Platform, you agree to this Policy.

1. Our role

Innvil is the controller of personal information about Panel Owners and visitors to our own website. For information that a Panel Owner's Customers submit on that Panel Owner's panel, the Panel Owner is the controller of that information and Innvil acts as a processorthat stores and processes it on the Panel Owner's behalf. Panel Owners are responsible for providing their own privacy notice to their Customers.

2. Information we collect

Account information — email address and an encrypted (hashed) password, and any display name you provide.
Panel and catalog data — panels you create, settings, branding, imported services, and pricing.
Transaction data — orders, wallet balances, deposits, and ledger records needed to operate the service and compute commission.
Support data — messages and tickets you send us.
Credentials you connect — Provider and Payment-Gateway API keys, which are stored encrypted and used only server-side; they are never exposed to browsers.
Technical data — IP address, device/browser information, log data, and session cookies used to keep you signed in and secure the service.

We do not process card numbers or crypto private keys. Payments are handled by the Payment Gateways that Panel Owners connect.

3. How we use information

To provide, maintain, and secure the Platform and your account.
To route orders to your connected Provider and reconcile wallet balances and deposits.
To calculate and collect commission and to keep transaction records.
To provide support and respond to your requests.
To detect, prevent, and address fraud, abuse, and security issues.
To comply with legal obligations and enforce our Terms.

4. Legal bases (where applicable, e.g. GDPR)

We process personal information as necessary to perform our contract with you, to pursue our legitimate interests in operating and securing the Platform, to comply with legal obligations, and, where required, with your consent.

5. How we share information

We share personal information only as needed:

Infrastructure and service providers that host and operate the Platform (for example, our database/authentication host and cloud hosting provider), under contracts that require appropriate protection.
Providers and Payment Gateways you connect — order and payment details are transmitted to fulfill and settle transactions you initiate.
Legal and safety — when required by law, legal process, or to protect rights, property, or safety.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information.

6. Cookies

We use essential cookies to keep you authenticated and to operate the Platform securely. These are required for the service to function.

7. Data retention

We retain personal information for as long as your account is active and as needed to provide the Platform, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Transaction records may be retained longer where required by law.

8. Security

We use technical and organizational measures to protect information, including encryption of connected API keys, access controls, and row-level data isolation between panels. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, and to data portability. To exercise these rights, contact us at [CONTACT_EMAIL]. If you are a Customer of a specific panel, please also contact that Panel Owner, who is the controller of your information on their panel.

11. Children

The Platform is not directed to individuals under 18, and we do not knowingly collect their personal information.

12. Changes to this Policy

We may update this Policy from time to time. Changes will be posted here with a new date and, where required, notified to you.

13. Contact

[COMPANY]
[ADDRESS]
[CONTACT_EMAIL]