Legal

    Privacy Policy

    Inventus Studios LLC · Effective August 13, 2026 · Last updated August 13, 2026

    1. Who we are

    Inventus Studios LLC ("Inventus Studios," "we," "us," or "our") is a limited liability company registered in the State of Washington, United States. We design and implement AI-enabled software and automation for small and mid-sized organizations.

    This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, who we share it with, and the choices and rights available to you.

    Data controller: Inventus Studios LLC
    Contact for privacy matters: info@inventusstudios.com

    2. Scope of this policy

    This policy applies to:

    • The website at inventusstudios.com and any subdomains we operate, including our email delivery subdomain
    • Any application, integration, or automation we operate under the Inventus Studios name, including our LinkedIn integration described in Section 4
    • Our internal client portal and business systems used to manage engagements
    • Business communications with prospective clients, clients, partners, and vendors

    This policy does not apply to systems that we build, configure, or operate on behalf of a client where that client is the data controller. In those engagements, Inventus Studios acts as a service provider or processor under a separate written agreement, and the client's own privacy policy governs. We do not use client end-user data for our own purposes in those engagements.

    This policy also does not apply to LinkedIn Corporation's own handling of your data. LinkedIn's practices are governed by the LinkedIn Privacy Policy.

    3. Information we collect

    3.1 Information you provide to us

    CategoryExamplesWhy we collect it
    Contact detailsName, email address, company name, job titleTo respond to inquiries, deliver services, and manage the client relationship
    Contact form submissionsYour name, email address, selected project type, and messageTo answer your inquiry and follow up about potential work
    Engagement contentDocuments, notes, and materials you share during a projectTo perform the services you have asked us to perform
    Billing detailsBilling address, tax identifiers, invoice and payment recordsTo invoice and meet accounting and tax obligations

    We do not intentionally collect special category data (such as health, biometric, racial or ethnic origin, religious belief, or political opinion) and ask that you do not send it to us unsolicited.

    3.2 Information collected automatically

    When you visit inventusstudios.com, our hosting and infrastructure providers may record IP address, browser type and version, device type, operating system, referring URL, pages viewed, and timestamps. We use this for security, error diagnosis, and aggregate traffic measurement. Our contact form uses Google reCAPTCHA, which evaluates submission signals to block automated abuse; that assessment is governed by Google's privacy policy. See Section 9 for cookie details.

    3.3 Information from third parties

    We may receive contact details from a referral source, a channel partner, or a publicly available business directory when a party introduces us to a prospective client.

    4. LinkedIn integration

    This section describes our use of LinkedIn's APIs and applies specifically to LinkedIn members who authorize our application.

    4.1 What the integration does

    Our LinkedIn application allows an authorized user to sign in with their LinkedIn account and to compose, schedule, and publish content to that user's own LinkedIn profile or to a LinkedIn Company Page they administer. The integration acts only at the direction of the authenticated user and never posts without explicit approval.

    4.2 What LinkedIn data we access

    We request the narrowest set of permissions our functionality requires. Depending on the permissions you grant, we may access:

    • Basic profile information: your LinkedIn member identifier, name, profile headline, and profile picture URL, used to identify the authenticated account within our application and to display which account content will be published from
    • Email address: used solely to associate your LinkedIn authorization with your Inventus Studios account
    • Content authoring permissions: used solely to publish or schedule content that you have composed and explicitly approved
    • Organization administration: where you administer a Company Page, used solely to list the pages you may publish to and to publish approved content to the page you select

    We do not request, access, or store your LinkedIn connections, your messages, your feed, or the profiles of other LinkedIn members.

    4.3 How we use LinkedIn data

    • To authenticate you and maintain your session
    • To display your account identity inside our application so you know which account you are acting as
    • To publish or schedule content you have created and approved
    • To show you the status of content you have published through our application

    4.4 What we will not do with LinkedIn data

    We commit that we do not and will not:

    • Sell, rent, lease, license, or otherwise monetize LinkedIn member data
    • Use LinkedIn member data to build, enrich, or supplement any contact database, lead list, data enrichment service, or resale product
    • Share LinkedIn member data with advertisers, data brokers, or any third party except the infrastructure providers listed in Section 7 that are strictly necessary to operate the application
    • Use LinkedIn member data to train, fine-tune, or otherwise develop machine learning or artificial intelligence models
    • Access LinkedIn data outside the scope of the permissions you have granted, or retain it after your authorization is revoked
    • Combine LinkedIn member data with data from other sources to create profiles of LinkedIn members

    We handle LinkedIn data in accordance with the LinkedIn API Terms of Use and applicable data protection law.

    4.5 Storage and retention of LinkedIn data

    DataWhere storedRetention
    OAuth access and refresh tokensEncrypted at rest in our application databaseUntil you revoke access or the token expires, whichever is first
    LinkedIn member identifier and display nameEncrypted at rest in our application databaseUntil you revoke access or delete your account
    Content you have drafted or scheduled through our applicationEncrypted at rest in our application databaseUntil you delete it, or 12 months after account closure

    We do not maintain a local cache or copy of your LinkedIn profile beyond the fields listed above.

    4.6 Revoking access

    You can disconnect our application at any time by either of these routes:

    1. From LinkedIn: go to Settings & Privacy → Data privacy → Other applications → Permitted services, find the Inventus Studios application, and select Remove.
    2. From us: email info@inventusstudios.com and ask us to disconnect the integration and delete the associated data.

    When authorization is revoked, our access tokens are invalidated immediately and we delete the LinkedIn data described in Section 4.5 within 30 days, except where we are required to retain a record for legal or accounting purposes.

    5. How we use information

    We use personal information to:

    • Provide, operate, and maintain our website and applications
    • Respond to inquiries and provide the services you have engaged us for
    • Send service and administrative communications, including changes to this policy
    • Invoice, process payment, and maintain financial records
    • Secure our systems, detect and prevent fraud or abuse, and diagnose technical problems
    • Meet our legal, regulatory, tax, and contractual obligations

    We do not sell personal information, and we do not use personal information for automated decision making that produces legal or similarly significant effects.

    6. Legal bases for processing

    If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal information on the following legal bases:

    PurposeLegal basis
    Operating the LinkedIn integrationConsent, given through the LinkedIn OAuth authorization screen (Art. 6(1)(a) GDPR)
    Delivering services under an engagementPerformance of a contract (Art. 6(1)(b) GDPR)
    Responding to inquiries, securing our systems, improving our servicesLegitimate interests (Art. 6(1)(f) GDPR)
    Tax, accounting, and regulatory record keepingLegal obligation (Art. 6(1)(c) GDPR)

    Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

    7. How we share information

    We do not sell or rent personal information. We share it only in the following circumstances:

    Service providers. We use a limited set of vendors to operate our business. Each is bound by contract to process personal information only on our instructions and to maintain appropriate safeguards:

    ProviderPurpose
    LovableWebsite hosting, application platform, and deployment
    SupabaseApplication database, authentication, file storage, and serverless functions
    ResendDelivery of transactional and business email
    Google reCAPTCHASpam and abuse prevention on our contact form
    Google WorkspaceBusiness email, calendar, and document storage

    Legal and safety. We may disclose information where required by law, subpoena, or other legal process, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

    Business transfer. If Inventus Studios is involved in a merger, acquisition, or sale of assets, personal information may transfer as part of that transaction. We will notify affected individuals and this policy will continue to apply until superseded.

    8. Data retention

    We keep personal information only as long as needed for the purpose it was collected, or as required by law.

    DataRetention period
    LinkedIn integration dataPer Section 4.5
    Prospect and inquiry records24 months from last contact
    Client engagement recordsDuration of the engagement plus 7 years, for tax, audit, and professional liability purposes
    Email delivery and suppression recordsRetained while needed to honor opt-out requests
    Website server logs90 days

    When a retention period ends we delete the data or irreversibly anonymize it.

    9. Cookies and similar technologies

    Our website uses only the cookies and local storage needed for the site to function, including remembering your display preferences and supporting the reCAPTCHA spam check. We do not use advertising cookies. We may use analytics cookies to understand aggregate site usage.

    You can control cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the site from working. We honor Global Privacy Control (GPC) signals as a valid opt-out request where applicable law requires it.

    10. Email communications

    If we email you, every non-essential message includes a way to opt out. You can unsubscribe at any time using the link in the email or by writing to us directly, and we will add your address to our suppression list so you receive no further messages. Essential service messages related to an active engagement, such as invoices, may still be sent.

    11. Security

    We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold. These include encryption of data in transit (TLS) and at rest, row-level access controls in our application database, access limited to personnel who need it, multi-factor authentication on administrative accounts, and periodic review of vendor security posture.

    No system is completely secure. If we become aware of a breach affecting your personal information we will notify you and the relevant supervisory authority as required by applicable law.

    12. International data transfers

    Inventus Studios is based in the United States and our infrastructure is hosted in the United States. If you access our services from outside the United States, your information will be transferred to and processed in the United States, where data protection law may differ from that of your jurisdiction.

    Where we transfer personal data out of the EEA, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism, together with supplementary measures where appropriate.

    13. Your rights and choices

    Depending on where you live, you may have the right to:

    • Access the personal information we hold about you
    • Correct inaccurate or incomplete information
    • Delete your personal information
    • Port your data to another provider in a structured, machine readable format
    • Object to or restrict certain processing
    • Withdraw consent at any time where processing is based on consent
    • Opt out of the sale or sharing of personal information, and of targeted advertising (we do not engage in any of these)
    • Appeal a decision we make about a rights request
    • Lodge a complaint with your local data protection authority

    To exercise any of these rights, email info@inventusstudios.com. We will respond within 30 days, or within 45 days where United States state law permits and the request is complex, in which case we will tell you before the initial period ends.

    We will verify your identity before acting on a request, usually by confirming control of the email address associated with the data. We will not discriminate against you for exercising a privacy right.

    EEA and UK residents: you may complain to your national supervisory authority. A list is available at edpb.europa.eu, and UK residents may contact the Information Commissioner's Office.

    California residents: we do not sell or share personal information as those terms are defined by the California Consumer Privacy Act as amended by the CPRA. In the preceding 12 months we collected the categories of information described in Section 3 for the purposes described in Section 5. You may designate an authorized agent to submit a request on your behalf.

    14. Children's privacy

    Our website and applications are intended for business use by adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

    15. Third party links

    Our website may link to third party sites. We are not responsible for their privacy practices and encourage you to read their policies before providing personal information.

    16. Changes to this policy

    We may update this policy to reflect changes to our practices or to legal requirements. We will revise the "Last updated" date at the top and, where changes are material, provide notice by email or a prominent notice on our website before the change takes effect. Continued use of our services after the effective date constitutes acceptance of the revised policy.

    Previous versions are available on request.

    17. Contact us

    Inventus Studios LLC
    Washington State, United States

    Privacy or general inquiries: info@inventusstudios.com

    We aim to acknowledge all privacy inquiries within five business days.