Privacy policy
Effective date: 2026-08-02.
What we collect
Without an account: standard server logs (IP address, pages requested, timestamps) used for security and capacity. With an account: your email address, name if you provide one, and usage records such as lookups, searches, watchlist entries, and exports, kept per organization.
Behavioral tracking and retroactive association
When analytics tracking is enabled, a cookie records pages you visit on inveo.io. If you later create an account, browsing history recorded by that cookie from before signup is associated with your account identity. This includes which company pages you viewed and when. We use this to understand what visitors need and to prioritize product work. You can decline the tracking cookie in the consent banner, and declining does not limit use of the site.
Company data is not personal data
The directory republishes public regulatory records about businesses. Names, addresses, and phone numbers appearing in those records are published by the issuing agency as business records. Corrections to them belong with the agency; our matching errors are corrected by us when reported.
Service providers
We use Supabase (database and authentication), Cloudflare (hosting and content delivery), Resend (transactional email), and HubSpot (customer relationship management and, when enabled, analytics). Each processes data only to provide its service.
Retention and deletion
Account data is kept while the account exists. Cancelling a paid plan keeps the account on the free tier; you can request full deletion of your account and personal data by email, and we will complete it within 30 days.
Transactional email (sign-in links, alerts you configured) is sent to account holders. Marketing email, where sent, includes an unsubscribe link and our postal address, and stops when you unsubscribe.
Contact
Privacy requests: william@inveo.io. Postal address available on request while the public business address is being finalized.