Privacy Policy

Invorcer is operated by Invorcer Technologies Inc. ("Invorcer", "we", "us", or "our"), a company incorporated in Canada. We provide a cloud-based invoicing and compliance platform for Canadian vape wholesalers.

If you have any questions about this Privacy Policy, you can contact us at privacy@invorcer.com.

We collect the following types of information:

**Account information:** When you create an account, we collect your name, email address, and business name.

**Business data:** Information you enter into the platform including customer details, invoice data, product lists, and payment records. This data belongs to you.

**Usage data:** How you interact with the platform, including pages visited, features used, and actions taken. This helps us improve the product.

**Payment information:** If you subscribe to a paid plan, billing is handled by Stripe. We do not store your credit card details.

**Technical data:** IP address, browser type, device information, and cookies used to keep you signed in and maintain your session.

We use your information to:

— Provide and operate the Invorcer platform

— Process your subscription and payments

— Send transactional emails (account verification, password reset, invitations)

— Respond to support requests

— Improve and develop new features

— Comply with legal obligations

We do not sell your personal information to third parties. We do not use your business data to train AI models or for any purpose other than providing you the service.

Your data is stored securely using Supabase, with servers located in Canada (Canada Central region). We use industry-standard encryption in transit (TLS) and at rest.

Access to your data is protected by Row Level Security — meaning your organization's data is strictly isolated from other users of the platform.

We take security seriously and regularly review our practices. However, no system is 100% secure. If you discover a security issue, please contact us immediately at security@invorcer.com.

We share your information only with the following third-party service providers who help us operate the platform:

— Supabase — database and authentication

— Stripe — subscription billing and payment processing

— Vercel — application hosting

— Resend — transactional email delivery

All service providers are bound by data processing agreements and are not permitted to use your information for their own purposes.

You have the right to:

— Access your personal information at any time

— Correct inaccurate information

— Export all your data at any time from Settings → Export All Data

— Delete your account and all associated data by contacting us at privacy@invorcer.com

— Withdraw consent for optional data processing at any time

We will respond to all requests within 30 days.

We use essential cookies to maintain your authenticated session. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this will prevent you from signing in to the platform.

We retain your data for as long as your account is active. If you cancel your subscription and delete your account, we will permanently delete your data within 30 days, except where we are required to retain it for legal or regulatory compliance purposes.

Invorcer is a business-to-business platform and is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify you by email if the changes are material. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

privacy@invorcer.com

Invorcer Technologies Inc.

Canada