Privacy Notice — Inventra

This Privacy Notice explains how Moss Interactive ("we", "us"), the provider of Inventra, collects, uses and protects your personal data when you use our service. Moss Interactive acts as the data controller for the personal data described below.

1. Data we collect

Account data — name, email address, password hash, profile information.
Customer content — inventory items, images, notes, prices and other data you upload.
Support messages — any communications you send us.
Usage and telemetry — pages visited, features used, errors, approximate session timings.
Device and connection data — IP address, browser type, operating system, device identifiers.

Payment data (card details, billing address) is collected and processed directly by our payment provider, Paddle — we do not see or store full card details.

2. How we use your data

Provide the service — create your account, store and display your inventory (contract).
Customer support — respond to your requests (contract, legitimate interests).
Security and fraud prevention — detect abuse and protect accounts (legitimate interests, legal obligation).
Product improvement — understand usage and improve features (legitimate interests).
Service communications — important account, billing and security notices (contract, legal obligation).
Marketing — only with your consent, and you can opt out at any time.

3. Who we share data with

Service providers / subprocessors — cloud hosting, database, analytics, error monitoring, and email delivery providers who process data on our behalf under contract.
Merchant of Record — Paddle.com processes your purchase, manages subscriptions, handles payments, tax compliance and invoicing.
Professional advisers — legal, accounting and similar advisers, where necessary.
Authorities — law enforcement or regulators where required by law.

We do not sell your personal data.

4. International transfers

Some of our providers may process data outside your country, including outside the UK/EEA. Where they do, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Data retention

We keep account and inventory data for as long as your account is active. After account closure we delete or anonymise it within 90 days, unless we're legally required to retain it longer (e.g. tax, accounting, dispute resolution).

6. Your rights

Depending on your location, you may have the right to access, rectify, erase, restrict or port your data, object to processing, and withdraw consent. UK/EEA users also have the right to lodge a complaint with their local supervisory authority. We respond to requests within one month.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), encryption at rest, access controls, and authentication best practices.

8. Cookies

We use essential cookies required for login and security. We may use analytics cookies (only with your consent where required) to understand product usage. You can manage cookie preferences through your browser settings.

9. Contact

For privacy questions or to exercise your rights, contact us through the in-app support channel.