Privacy Policy

Effective date: September 1, 2025

Inveno provides AI software that helps warehouse teams plan labor, manage waves, slot inventory, and optimize dock and yard operations. Our product runs on top of your existing systems with a zero integration approach. This policy explains how we handle information when you visit our websites, talk to us as a prospective customer or partner, and when you use our product.

If you are a warehouse operator or an employee of a customer that uses Inveno, your company is the controller of your data inside the product. Inveno acts as a processor and handles that data on your company’s instructions.

1. Scope and who we are

This policy covers:

  1. Websites and marketing including inveno.tech and any content we publish.

  2. Sales and support when you contact us or we contact you.

  3. The Inveno product including our AI operator that interacts with your WMS, LMS, TMS and related tools.

“Inveno,” “we,” and “us” means Inveno Inc., a Delaware company. Contact: admin@inveno.tech. Postal address available on request.

2. Types of information we process

A. Customer Data inside the product

Provided or made available by a customer and processed under a contract:

  • Warehouse operations data such as orders, SKUs, wave plans, pick lists, dock schedules, slotting and inventory positions.

  • Workforce and shift data such as names, employee IDs, team, role, shift, productivity metrics.

  • System context that the AI operator can see through the user interface, for example screen content and form fields in a WMS.

  • Audit data such as actions performed by the AI operator, timestamps, and outcomes.

B. Service Data we generate to run the product

  • Authentication and authorization logs.

  • Telemetry such as feature usage, latency, error codes, and device or browser attributes.

  • Model decision logs to support monitoring, safety, and quality.

C. Website and marketing data

  • Contact details you submit, meeting notes, email interactions, and CRM records.

  • Analytics events, cookies, and similar technologies on our sites.

  • Basic business information about prospective customers from public or commercial sources.

We do not knowingly collect data about children and our services are for business use by adults.

3. How we use information

Inside the product as a processor

  • Deliver and improve the product features you enable.

  • Operate the AI operator to read and enter data in customer systems using accounts you authorize.

  • Provide security, auditability, and support.

  • Detect abuse and ensure acceptable use.

We do not train foundation models on Customer Data without your written permission. By default, Customer Data stays within your tenant and is used only to provide your services, monitor quality, and meet legal or safety obligations.

Outside the product as a controller

  • Market and sell our services, manage events, and handle inquiries.

  • Run analytics to improve our websites and content.

  • Meet legal requirements and defend our rights.

Where required by law we rely on consent. Otherwise we rely on legitimate interests or performance of a contract.

4. How the AI operator works with your systems

  • You create service or user accounts for the operator inside your WMS, LMS, TMS or related systems, or you route access through your SSO.

  • All actions taken by the operator are logged with timestamps and identifiers.

  • We follow least privilege. You control what the operator can see and do.

  • We do not store your credentials inside any model. Credentials are kept in secure secret storage.

5. Sharing and disclosures

We share information only with:

  1. Vendors and subprocessors that help us run the product or our business, for example cloud hosting, storage, observability, and customer support tools. We bind them with data protection terms and limit access. A current list is available on request.

  2. Your systems and tools as directed by you.

  3. Professional advisers and legal authorities when required by law or to protect rights and safety.

  4. Corporate transactions such as a merger or acquisition with appropriate protections.

We do not sell personal information. We do not share personal information for cross context behavioral advertising.

6. International transfers

We may process data in the United States or other countries where we or our vendors operate. When law requires transfer safeguards, we use Standard Contractual Clauses or similar mechanisms. Regional hosting options may be available by agreement.

7. Security

We apply administrative, technical, and physical safeguards, including:

  • Encryption in transit and at rest.

  • Access control with multi factor authentication and role based permissions.

  • Network isolation, secret management, and regular vulnerability management.

  • Logging, monitoring, and incident response.

No method is perfect. If we learn of a breach that affects you we will notify you as required by law and by our contract.

8. Data retention

  • Customer Data is retained for the term of the contract and deleted or returned within 30 days after termination unless law requires longer retention. You can request earlier deletion for specific data sets.

  • Service Data and logs are typically kept for 30 to 180 days for security and operations, then aggregated or deleted.

  • Website and marketing data is kept for as long as needed for the purpose or until you opt out.

Retention settings can be tailored in your agreement.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information, and to object to certain processing.

  • If you use Inveno through your employer, please send requests to your employer. We will support them as a processor.

  • For website and marketing data that we control, contact admin@inveno.tech.

  • You can opt out of marketing emails by using the unsubscribe link or by emailing us.

Residents of California, Virginia, Colorado, Connecticut, Utah, and other U.S. states with privacy laws can exercise the same rights described above. We do not sell or share personal information for targeted advertising, so there is no need to opt out of those practices.

If you are in the EEA, UK, or Switzerland you can contact your data protection authority and you may have the right to lodge a complaint. Where the GDPR applies, Inveno Inc. is the controller for website and marketing data. For product data we act as a processor to our customers.

10. Cookies and similar technologies

We use cookies and similar technologies for:

  1. Essential site features.

  2. Analytics to understand traffic and improve content.

  3. Remembering your preferences.

You can control cookies through your browser. Some features may not work without essential cookies.

11. Customer responsibilities

As the controller for data inside the product, you agree to:

  • Provide any required notices to your personnel and contractors whose data is processed.

  • Set and review role permissions and credentials.

  • Configure retention and regional preferences to meet your obligations.

  • Enter into our Data Processing Addendum which includes Standard Contractual Clauses where applicable.

12. Third party links

Our sites may link to other services. Their privacy practices are their own. Please review their policies.

13. Changes to this policy

We may update this policy as our services and laws evolve. We will post the new version with a new effective date. If changes are material we will provide additional notice.

14. Contact

Questions or requests about privacy:

Email: admin@inveno.tech
Postal: Available on request
Security reports: admin@inveno.tech

Appendix: Summary for California Notice at Collection

We collect the following categories for the purposes in Sections 2 and 3: identifiers, professional or employment information, internet or network activity, geolocation derived from IP, and inferences to improve our sites. We keep this information for the periods in Section 8. We do not sell personal information and we do not share it for cross context behavioral advertising.

Effective date: September 1, 2025

Inveno provides AI software that helps warehouse teams plan labor, manage waves, slot inventory, and optimize dock and yard operations. Our product runs on top of your existing systems with a zero integration approach. This policy explains how we handle information when you visit our websites, talk to us as a prospective customer or partner, and when you use our product.

If you are a warehouse operator or an employee of a customer that uses Inveno, your company is the controller of your data inside the product. Inveno acts as a processor and handles that data on your company’s instructions.

1. Scope and who we are

This policy covers:

  1. Websites and marketing including inveno.tech and any content we publish.

  2. Sales and support when you contact us or we contact you.

  3. The Inveno product including our AI operator that interacts with your WMS, LMS, TMS and related tools.

“Inveno,” “we,” and “us” means Inveno Inc., a Delaware company. Contact: admin@inveno.tech. Postal address available on request.

2. Types of information we process

A. Customer Data inside the product

Provided or made available by a customer and processed under a contract:

  • Warehouse operations data such as orders, SKUs, wave plans, pick lists, dock schedules, slotting and inventory positions.

  • Workforce and shift data such as names, employee IDs, team, role, shift, productivity metrics.

  • System context that the AI operator can see through the user interface, for example screen content and form fields in a WMS.

  • Audit data such as actions performed by the AI operator, timestamps, and outcomes.

B. Service Data we generate to run the product

  • Authentication and authorization logs.

  • Telemetry such as feature usage, latency, error codes, and device or browser attributes.

  • Model decision logs to support monitoring, safety, and quality.

C. Website and marketing data

  • Contact details you submit, meeting notes, email interactions, and CRM records.

  • Analytics events, cookies, and similar technologies on our sites.

  • Basic business information about prospective customers from public or commercial sources.

We do not knowingly collect data about children and our services are for business use by adults.

3. How we use information

Inside the product as a processor

  • Deliver and improve the product features you enable.

  • Operate the AI operator to read and enter data in customer systems using accounts you authorize.

  • Provide security, auditability, and support.

  • Detect abuse and ensure acceptable use.

We do not train foundation models on Customer Data without your written permission. By default, Customer Data stays within your tenant and is used only to provide your services, monitor quality, and meet legal or safety obligations.

Outside the product as a controller

  • Market and sell our services, manage events, and handle inquiries.

  • Run analytics to improve our websites and content.

  • Meet legal requirements and defend our rights.

Where required by law we rely on consent. Otherwise we rely on legitimate interests or performance of a contract.

4. How the AI operator works with your systems

  • You create service or user accounts for the operator inside your WMS, LMS, TMS or related systems, or you route access through your SSO.

  • All actions taken by the operator are logged with timestamps and identifiers.

  • We follow least privilege. You control what the operator can see and do.

  • We do not store your credentials inside any model. Credentials are kept in secure secret storage.

5. Sharing and disclosures

We share information only with:

  1. Vendors and subprocessors that help us run the product or our business, for example cloud hosting, storage, observability, and customer support tools. We bind them with data protection terms and limit access. A current list is available on request.

  2. Your systems and tools as directed by you.

  3. Professional advisers and legal authorities when required by law or to protect rights and safety.

  4. Corporate transactions such as a merger or acquisition with appropriate protections.

We do not sell personal information. We do not share personal information for cross context behavioral advertising.

6. International transfers

We may process data in the United States or other countries where we or our vendors operate. When law requires transfer safeguards, we use Standard Contractual Clauses or similar mechanisms. Regional hosting options may be available by agreement.

7. Security

We apply administrative, technical, and physical safeguards, including:

  • Encryption in transit and at rest.

  • Access control with multi factor authentication and role based permissions.

  • Network isolation, secret management, and regular vulnerability management.

  • Logging, monitoring, and incident response.

No method is perfect. If we learn of a breach that affects you we will notify you as required by law and by our contract.

8. Data retention

  • Customer Data is retained for the term of the contract and deleted or returned within 30 days after termination unless law requires longer retention. You can request earlier deletion for specific data sets.

  • Service Data and logs are typically kept for 30 to 180 days for security and operations, then aggregated or deleted.

  • Website and marketing data is kept for as long as needed for the purpose or until you opt out.

Retention settings can be tailored in your agreement.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information, and to object to certain processing.

  • If you use Inveno through your employer, please send requests to your employer. We will support them as a processor.

  • For website and marketing data that we control, contact admin@inveno.tech.

  • You can opt out of marketing emails by using the unsubscribe link or by emailing us.

Residents of California, Virginia, Colorado, Connecticut, Utah, and other U.S. states with privacy laws can exercise the same rights described above. We do not sell or share personal information for targeted advertising, so there is no need to opt out of those practices.

If you are in the EEA, UK, or Switzerland you can contact your data protection authority and you may have the right to lodge a complaint. Where the GDPR applies, Inveno Inc. is the controller for website and marketing data. For product data we act as a processor to our customers.

10. Cookies and similar technologies

We use cookies and similar technologies for:

  1. Essential site features.

  2. Analytics to understand traffic and improve content.

  3. Remembering your preferences.

You can control cookies through your browser. Some features may not work without essential cookies.

11. Customer responsibilities

As the controller for data inside the product, you agree to:

  • Provide any required notices to your personnel and contractors whose data is processed.

  • Set and review role permissions and credentials.

  • Configure retention and regional preferences to meet your obligations.

  • Enter into our Data Processing Addendum which includes Standard Contractual Clauses where applicable.

12. Third party links

Our sites may link to other services. Their privacy practices are their own. Please review their policies.

13. Changes to this policy

We may update this policy as our services and laws evolve. We will post the new version with a new effective date. If changes are material we will provide additional notice.

14. Contact

Questions or requests about privacy:

Email: admin@inveno.tech
Postal: Available on request
Security reports: admin@inveno.tech

Appendix: Summary for California Notice at Collection

We collect the following categories for the purposes in Sections 2 and 3: identifiers, professional or employment information, internet or network activity, geolocation derived from IP, and inferences to improve our sites. We keep this information for the periods in Section 8. We do not sell personal information and we do not share it for cross context behavioral advertising.