Privacy policy

Who is responsible

The data controller is Invokely. Contact privacy@invokely.ai with a privacy request.

Data we process

Account data includes your name, email address, organization membership, and sign-in records.

Product data includes MCP endpoints, test settings, measurement results, and evidence submitted by authorized users.

Service records include request times, device and browser information, IP address, security events, and feature usage.

The payment provider processes payment details. Invokely keeps billing identifiers, plan status, amounts, and invoice records needed to provide the service and keep financial records.

Why we process data

We process data to provide accounts and measurements, secure the service, support customers, meet legal duties, and improve product reliability.

Public measurements

Public directory pages may show facts measured from public MCP endpoints. Public pages do not show owner credentials, raw bearer tokens, or private security evidence.

Service providers

We use service providers for hosting, email, payments, monitoring, and model inference. They receive only the data needed for their role under their service terms and our agreements.

International transfers

When data is processed outside your country, we use the transfer safeguards required by applicable law.

Retention

We keep account and product data while the account is active, then for the periods needed for security, dispute handling, and legal records. Measurement evidence follows the retention period shown in the applicable plan or report.

Your rights

Depending on where you live, you may ask for access, correction, deletion, restriction, objection, or a portable copy of personal data. You may also complain to your local data protection authority.

Send a privacy request to privacy@invokely.ai. We may need to verify your identity before completing it.

Account deletion

You can request account deletion from settings or by email. Some records may remain where law requires them or where they are needed to establish, exercise, or defend legal claims.

Security

We limit access to personal data, encrypt stored credential values, and remove secret patterns from measurement evidence before storage. No security measure can remove every risk.

Policy changes

We will post material changes on this page and update the effective date.

Contact

Privacy questions and requests: privacy@invokely.ai.