Plain-English version of what we do with your data, why, and what your rights are. The legal text is below. We've tried to keep it short. Where we couldn't, we've tried to keep it readable.
Invariant AI Solutions Private Limited, a company incorporated in India, with its registered office in Bhopal, Madhya Pradesh. References to “we,” “us,” and “our” mean Invariant. Our Data Protection Officer is reachable at privacy@invariant.co.in.
Three categories. Account data — your name, email, phone, company, role. Operational data — the events your business produces inside Invariant (invoices, payments, stock movements, returns, and everything we describe in our product pages). Usage data — basic telemetry about how the product is used, errors, performance, device and browser information.
We do not sell your data. We do not use your operational data to train AI models for other customers. We do not share your data with advertisers. We have no advertising business.
Inside India. Our primary data centre is in Mumbai, with a secondary in another Indian region for disaster recovery. Operational data does not leave India. AI inference, where it operates on your data, is performed on infrastructure we have contracted to keep your data within Indian jurisdiction.
Only the sub-processors strictly necessary to operate the service: cloud infrastructure, transactional email, customer support tooling, error tracking, and the official Indian compliance portals (GST, IRP, NIC, TRACES) on your behalf. The current list is available on request and is updated whenever it changes; you have a right to object before any addition.
We disclose data to authorities only when legally compelled. We notify you when permitted by law to do so.
For the duration of your subscription, plus the periods required by Indian tax, accounting, and statutory law (typically 8 years from the relevant financial year). When the retention period expires, we delete the data, including from backups, within a reasonable window.
If you cancel your subscription, you can export your data in full at any time before the deletion window. We'll help you do it.
Under the Digital Personal Data Protection Act, 2023 and applicable rules, you have the right to:
Email us at privacy@invariant.co.in and we'll respond within the timelines required by law, usually faster.
Encryption in transit and at rest, capability-based access control, append-only audit logs, hardware-backed key management, documented incident response, regular third-party penetration testing. The full picture is on the Security page.
Strictly necessary cookies for authentication and session management. We do not use third-party advertising cookies. We do not use analytics that fingerprint you. If we ever change this, we'll ask first.
If we change anything material, we'll email you and update the “Last updated” date above. Old versions are kept on the log, because of course they are.
Invariant AI Solutions Private Limited
Bhopal, Madhya Pradesh, India
privacy@invariant.co.in