Privacy PolicyVersion 3.0

Invenzo Labs India Private Limited (“Invenzo Labs”, “we”, “us”, “our”) builds and operates a connected platform for retail and distribution businesses. We are committed to handling personal data lawfully, transparently and securely.

Please read this policy alongside our Terms & Conditions, Cookies Policy and Security page. If you do not agree with it, please do not use this website or our platforms.

1. Two roles, and which one applies to you

We handle personal data in two distinct capacities. Which one applies depends on how you came to us, and it determines whose policy governs.

When you deal with us directly. This means visiting this website, requesting a demo, subscribing to our updates, applying for a job or contacting our team. In this case, we decide why and how your personal data is used. Under India’s Digital Personal Data Protection Act, 2023 we are the Data Fiduciary; under the UK and EU General Data Protection Regulation we are the controller. This policy describes what we do in that capacity, and it is the policy that applies to you.

When one of our customers uses our platforms to run their business — and personal data about their shoppers, riders, retailers, dealers or staff passes through our platforms — that customer decides why and how the data is used. We process it only on their documented instructions. In that relationship we are the processor, our customer is the Data Fiduciary or controller, and their privacy notice governs, not this one. Our obligations to them are set out in the data processing terms of their service agreement, which we provide on request.

If you are a shopper, rider, retailer or dealer with a question about data held by a business that uses our platform, please contact that business directly. We will support them in answering you, but we cannot act on their data without their instruction.

2. The platforms we operate

Our platforms are licensed to small, medium and large enterprises on a subscription or licence basis, and are listed on our website under Products:

• Izoleap — branded webstore and mobile applications, product information management, multi-channel order management, inventory visibility, store processing and order routing, synchronisation with external systems, returns management, payment processing and reconciliation, billing and reporting.
• Izoleap B2B — distributor and dealer management, field sales automation including offline order capture, retailer and stockist self-service ordering, loyalty and scheme management, claim processing, and territory and coverage reporting.
• Izowhiz — last-mile delivery and rider management, quick commerce fulfilment, shipment tracking, courier and carrier integration, returns management, cash-on-delivery reconciliation and logistics automation.
• Izoware — purchase order management, inbound receiving and putaway, picking and packing, quality control, cycle counting, returns management and outbound processes.
• IzoPOS — in-store billing and checkout, shift and cash management, store-level inventory, and customer identification and loyalty at the point of sale.
• Izo.AI — search and product discovery, demand and inventory forecasting, delivery time estimation, node and route optimisation, and conversational assistance across the platforms above.
• Behavioural Analytics — funnel and conversion analysis, customer segmentation, campaign performance measurement, operational reporting and anomaly detection.

3. Personal data we collect

We collect personal data when you:

• Request a demo, complete a form on our website, use live chat, or email us.
• Request customer or onboarding support.
• Register for an account on one of our platforms, including the password you set.
• Subscribe to our updates or research reports.
• Apply for a job with us.
• Visit our website — including pages viewed, time on page, referring source and similar usage data collected through cookies and comparable technologies. Our Cookies Policy explains this in detail.
• Interact with our accounts on LinkedIn, X, YouTube or Instagram.
• Register as a delivery partner or rider on a customer’s instance, where we may collect location data, camera access for proof of delivery, and media access for delivery documentation. This is processed on behalf of that customer under section 1.

The categories of personal data involved include your name, business email address, contact number, job title, employer, and technical data such as IP address, browser type and device information. We do not collect payment card details through this website.

You may be asked to provide data classified as sensitive personal data under applicable law in order for us to provide certain services. Providing it is always your choice.

4. How we use personal data

We use personal data to respond to your enquiries and demo requests; to provide, support and improve our services; to send you information about our products, research and events where you have asked to receive it or where we are otherwise permitted to; to authenticate users and prevent fraud and misuse; to understand how our website is used; to recruit; and to meet our legal and regulatory obligations.

Where the GDPR applies, we rely on the following legal bases: performance of a contract with you; our legitimate interests in operating and promoting our business, balanced against your rights; your consent, where we have asked for it; and compliance with a legal obligation.

5. Marketing

We send marketing communications only where you have asked to receive them or where we are permitted to do so under applicable law. Every marketing email includes an unsubscribe link, and you can opt out at any time by writing to info@invenzolabs.com. Opting out of marketing does not affect service or transactional messages relating to an active account.

6. Sharing and disclosure

We do not sell, trade or rent personal data. We share it only in the circumstances below.

• Service providers and sub-processors who help us operate, including cloud hosting, email and communications, analytics, customer relationship management, payment processing and customer support tooling. Each is bound by written terms requiring confidentiality and appropriate security, and may process personal data only on our instructions.
• Where required by law — to comply with a legal or regulatory obligation, to respond to a lawful request from a government or law enforcement authority, to enforce our terms, or to protect the rights, property or safety of Invenzo Labs, our customers or the public.
• In a corporate transaction — in connection with a merger, acquisition, reorganisation or sale of assets, in which case we will take reasonable steps to ensure the recipient continues to protect your data.
• With your consent — in any other case.

We may publish aggregated or anonymised statistics about usage and traffic. This information cannot be used to identify you.

A current list of our sub-processors is available on request from info@invenzolabs.com

7. How long we keep personal data

We keep personal data only as long as we need it for the purpose it was collected, or as long as the law requires.

When a retention period ends, we delete the data or irreversibly anonymise it.

8. International transfers

We are based in India, and our platforms are hosted in India-region data centres. Some of our service providers operate outside India, which means personal data may be transferred across borders.

Where we transfer personal data internationally, we do so in accordance with applicable law and put appropriate safeguards in place, including contractual protections with the recipient. Where the GDPR applies, we rely on Standard Contractual Clauses or another recognised transfer mechanism. You can request details of the safeguards in place by writing to info@invenzolabs.com

9. Your rights

If we hold personal data about you in our capacity as Data Fiduciary or controller, you have the right to:

• Access — obtain a summary of the personal data we hold about you and how it is being processed
• Correction and completion — have inaccurate or incomplete data corrected or completed
• Erasure — have your personal data deleted, where we are not required to retain it
• Withdraw consent — as easily as you gave it, with effect from the point of withdrawal
• Grievance redressal — raise a complaint with our Grievance Officer, and escalate to the Data Protection Board of India if you are not satisfied with our response
• Nomination — nominate another individual to exercise these rights on your behalf in the event of death or incapacity

If you are in the European Union or the United Kingdom, you additionally have the rights to data portability, restriction of processing, and objection to processing, and you may lodge a complaint with your local supervisory authority.

To exercise any of these rights, write to info@invenzolabs.com with enough detail for us to identify you. We will respond within thirty days, and sooner where we can. We may need to verify your identity first. In limited circumstances we may be unable to act on a request — for example where the law requires us to retain the data — and we will explain why if that applies.

Deleting your personal data may mean we can no longer provide you with an account or certain features.

10. Children

Our website and platforms are intended for business users and are not directed at children. We do not knowingly collect personal data from anyone under the age of eighteen in our capacity as Data Fiduciary. If you believe a child has provided us with personal data, please contact info@invenzolabs.com and we will delete it.

11. Security

We protect personal data using encryption in transit and at rest, role-based access controls, multi-factor authentication on production systems, network segmentation, logging and monitoring, and a documented incident-response process. Our Security page describes these in detail.

Your account is protected by the password you set. Please keep it confidential, and notify us immediately at devops@invenzolabs.com if you believe it has been compromised.

No security system is impenetrable. While we work to protect your personal data against unauthorised access, disclosure, alteration and destruction, we cannot guarantee absolute security.

We will never ask for your password, card details or national identification numbers in an unsolicited email or phone call. If you receive such a request claiming to be from us, please report it to info@invenzolabs.com

12. Cookies

We use cookies and similar technologies on our website. Our Cookies Policy explains what we use, why, and how you can control them.

13. Links to other sites

Our website and platforms may contain links to third-party websites and services. We do not control them and are not responsible for their privacy practices. We recommend reading the privacy policy of any third-party site before providing personal data to it.

14. Changes to this policy

We may update this policy from time to time. When we do, we will revise the version number and the effective date at the top of this page. Where a change is material, we will take reasonable steps to notify you — for example by email or a prominent notice on this website. Your continued use after a change takes effect means you accept the updated policy.

15. Contact us

Data Fiduciary: Invenzo Labs India Private Limited, No. 602 Unnati, 15th Cross, Outer Ring Road, 24th Main Rd, 1st Phase, J. P. Nagar, Bengaluru 560078, Karnataka, India.

Privacy and data protection enquiries: info@invenzolabs.com

Grievance Officer: Ms. Jyothsna Iyengar, Invenzo Labs India Private Limited, No. 602 Unnati, 15th Cross, Outer Ring Road, 24th Main Rd, 1st Phase, J. P. Nagar, Bengaluru 560078, Karnataka, India. Email: jyothsna.i@invenzolabs.com. We acknowledge grievances within seven working days and aim to resolve them within thirty days.

If you are not satisfied with our response, you may escalate to the Data Protection Board of India, or to your local supervisory authority if you are in the EU or UK.