Privacy policy

The data controller is [OWNER], VAT no. / tax code [VAT NO. / TAX CODE], with registered office at [REGISTERED OFFICE]. To exercise your rights or for any request concerning personal data, you can write to info@inventary.it.

We process: account data (name, email); organization and store data; inventory and stock data; sales and restocking data; data of invited staff (email, role); subscription and payment data (handled through Stripe, which processes card data); technical and usage data needed for operation and security.

Each organization’s data is logically isolated and accessible only to that organization’s authorized users.

We process data to: provide the Service and manage the account (performance of the contract); manage subscriptions and payments (contract and legal obligations); ensure security, prevent abuse and provide support (legitimate interest); comply with tax and legal obligations (legal obligation); generate advice and statistics and improve the Service and its artificial intelligence features (legitimate interest, on anonymous/aggregated data).

Some assistance and recognition features (e.g. the chat assistant, automatic column mapping during import) use Google’s artificial intelligence service (Gemini). When you use these features, the content needed for the request (for example the text of your question and the relevant context data) is sent to Google for processing.

The Service currently uses the free tier of Google’s APIs. Under Google’s terms, on the free tier the data sent may be used by Google to improve its services and be subject to human review. If you do not want this processing, avoid using the features based on the AI assistant. The Provider will evaluate moving to a plan with data protection clauses before large-scale use.

The Service offers advice features (e.g. reordering, slow-moving products, markdown candidates) and market insights. To power and improve these models, the Provider may process sales and inventory data in anonymous, aggregated form, so that it is not possible to identify the User, their organization or end customers.

Aggregated and anonymized data may be used to develop and improve Inventary’s artificial intelligence and to provide statistics and network insights to users. This processing is based on the Provider’s legitimate interest; you can object by writing to info@inventary.it.

Where the User records through the Service data relating to their own customers, the User acts as independent controller of that data and the Provider as processor on the User’s behalf, to the extent necessary to provide the Service. The Service is designed to minimize end customers’ personal data.

To provide the Service we rely on providers that process data on our behalf, bound by specific agreements: Supabase (database and hosting), Cloudflare (distribution and hosting of the web app), Stripe (payments), Google (Gemini artificial intelligence) and the transactional email provider used for service communications. We do not sell your data to third parties.

Some providers may process data outside the European Economic Area. In such cases, transfers take place with adequate safeguards under the GDPR (for example standard contractual clauses).

We keep data for as long as necessary to provide the Service and, afterwards, within the limits set by law (for example, tax and accounting documents are kept for the applicable legal periods). When the account is closed, data is deleted or anonymized, subject to retention obligations.

You have the right of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to withdraw consent where given. You can exercise them by writing to info@inventary.it. You also have the right to lodge a complaint with the Italian data protection authority.

We adopt appropriate technical and organizational measures: encrypted connections (HTTPS), data isolation per organization, role-based access controls and the principle of least privilege.

The web app uses only technical cookies and local storage, necessary for authentication and operation (for example to keep your session and preferences).

The inventary.it website uses technical cookies that are always on (necessary for operation) and, only with your explicit consent through the cookie banner, third-party advertising measurement cookies: Meta (Facebook/Instagram), Google Ads and TikTok. They are used to measure the effectiveness of our advertising campaigns. You can change or withdraw your consent at any time through the “Cookie preferences” link in the site footer.

When you arrive on the site or the web app from a link in our social content, we save in your browser’s local storage, for a maximum of 30 days, the parameters of the campaign you came from (so-called UTM parameters: for example the social network and the content). They are not cookies, they contain no name, email or payment data and are not shared with third parties. If you sign up, we associate them with your account to understand which content brings new sign-ups and subscriptions; to our internal social management tool we only send the type of event (sign-up, subscription, cancellation), the campaign, the plan and the amount. The legal basis is our legitimate interest in measuring the effectiveness of the content we publish.

When you consent to marketing cookies, data relating to registration and to the purchase of a subscription (for example that payment was completed, without card details) may be sent to Meta, Google and TikTok to measure advertising conversions, within the limits of their respective privacy notices.

We may update this notice. Material changes will be communicated through the Service or by email and indicated by the update date.