Privacy Policy
Last updated: 30 September 2026
1. Who we are
This website https://www.invunion.com (“Website”) is operated by:
Francois SURET s.p. – Invunion
Ljubljana 1000, Slovenia
Email: [email protected]
Francois SURET s.p. – Invunion is the data controller for personal data collected through this Website.
This policy does not apply to the Invunion application at app.invunion.com (when available). That service will be governed by a separate privacy policy.
2. What data we collect
2.1 Contact form
When you contact us, we may collect:
- First name and last name
- Work email address
- Company name (optional)
- Subject and message
2.2 Optional marketing and product updates
If you choose the optional checkboxes on the contact form, we also record:
- Your request to be registered as an alpha tester
- Your request to receive our newsletter
These options are voluntary and not required to send us a message.
2.3 Technical data
When you visit the Website, our hosting and content delivery provider may automatically process technical data, such as your IP address, browser type and version, device information, date and time of access, and pages requested. This is used to deliver, secure, and maintain the Website.
2.4 Fonts
We use Google Fonts to display typography. Your browser may connect to Google’s servers when loading pages. Google may process technical data (including IP address) under its own privacy policy.
3. How we use your data
| Purpose | Legal basis (GDPR) |
|---|---|
| Respond to contact requests | Legitimate interest and/or steps prior to a contract |
| Alpha tester registration (if opted in) | Consent |
| Newsletter (if opted in) | Consent |
| Operate, secure, and maintain the Website | Legitimate interest |
| Legal compliance | Legal obligation |
You may withdraw consent for marketing or alpha registration at any time (see Section 8).
4. How long we keep your data
- Contact inquiries: up to 24 months after our last communication, unless a longer period is required by law
- Newsletter / alpha tester: until you unsubscribe or withdraw consent, then deleted within a reasonable period
- Server logs: up to 30 days, unless a longer period is required for security or legal reasons
5. Who we share data with
We do not sell your personal data.
We use service providers who process data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, security | United States and global network locations (including possibly the EEA) |
| Google LLC | Font delivery (Google Fonts). With your consent, website analytics (Google Analytics 4). | United States |
| Brevo (Sendinblue SAS) | Contact form processing, contact management, newsletter and alpha tester lists, transactional email notifications | France (European Union) |
When personal data is transferred outside the European Economic Area (EEA), we rely on appropriate safeguards where required, such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms.
6. Cookies and similar technologies
We keep cookies to a minimum. Cookies that are not strictly necessary are used only with your consent.
Strictly necessary. The cookie invunion_cookie_consent stores your cookie choice for 6 months. It is required so the site can remember whether you allowed analytics.
Analytics. If you allow analytics, we use Google Analytics 4, provided by Google LLC in the United States, to measure visits, pages viewed, device type, approximate location, and how you reached the site. The legal basis is your consent (GDPR Article 6(1)(a)). Google may set cookies named _ga and _ga_*,
which can last up to 2 years. We do not use advertising cookies. Google signals are off, and ad personalization is off.
You can reject analytics cookies, or withdraw consent later, with Cookie settings in the footer. Withdrawing consent stops new analytics cookies and deletes existing Google Analytics cookies in your browser. You can also block cookies in your browser settings.
7. Security
We use appropriate technical and organisational measures to protect personal data. No method of transmission over the Internet or electronic storage is completely secure.
8. Your rights
If you are in the EEA, UK, or Switzerland, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data in certain circumstances
- Restrict processing in certain circumstances
- Object to processing based on legitimate interest
- Data portability where applicable
- Withdraw consent at any time (without affecting prior lawful processing)
To exercise your rights, email [email protected]. We may need to verify your identity.
You may lodge a complaint with:
Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec)
https://www.ip-rs.si
9. Children
The Website is aimed at business users. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.
10. Links to other websites
Our Website may link to third-party sites (e.g. LinkedIn). We are not responsible for their privacy practices. Please read their policies.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be highlighted on the Website where appropriate.
12. Contact
Email: [email protected]
Address: Francois SURET s.p. – Invunion, Ljubljana 1000, Slovenia
For privacy requests or questions about this policy, use the contact details above.