Privacy Policy

InvUltra ("we", "us", "our") provides offline-first point-of-sale, inventory, and invoicing software for retailers. This Privacy Policy explains how we handle personal and business information when you visit our website, create an account, or use our application.

If you have questions, contact us at contact@invultra.com.

This policy applies to shop owners, managers, cashiers, and other staff who register for or use InvUltra.

You may also enter information about your customers and vendors (names, phone numbers, addresses, payment history, and similar business records). For that data, you are the business owner responsible for how you collect and use it with your customers. InvUltra processes it on your behalf so you can run your shop.

We collect the following categories of information:

• Account data: business name, owner name, email address, and password (stored in hashed form).
• Company profile: address, phone, tax ID (NTN), website, and company logo you upload.
• Business records you enter: products, barcodes, stock levels, customers, vendors, invoices, quotes, purchase orders, payments, loyalty points, expenses, and register sessions.
• Authentication and security data: login sessions, optional two-factor authentication settings, and activity logs that record who performed an action and when.
• Technical data: IP address, browser or device type, and sync status needed to operate the service.
• Local device storage: when you use InvUltra as an installable web app, sales and stock changes may be stored locally on your device (IndexedDB) so you can keep selling offline. These records sync to our servers when you are back online.

We use the information above to:

• Provide, maintain, and improve the InvUltra service.
• Sync your data between devices and stores when you are online.
• Authenticate users, enforce roles and permissions, and keep accounts secure.
• Bill your subscription, show plan limits, and provide support.
• Maintain audit trails (activity logs) so owners can review staff actions.
• Send service-related communications such as password reset or account notices.
• Protect against fraud, abuse, and unauthorized access.

Our marketing website uses minimal cookies. The InvUltra application uses session cookies (for example, access tokens) so you stay signed in. We may also store data in your browser's local storage or IndexedDB to support offline operation and faster load times.

You can clear browser storage at any time, but doing so may remove unsynced offline data on that device.

We do not sell your personal or business data.

We share information only with infrastructure providers that host and operate the service (for example, cloud servers and backup storage), when required by law, or to protect the rights and safety of InvUltra, our users, and the public.

Each tenant's data is kept separate. Staff in one shop cannot access another shop's records.

We retain account and business data while your subscription or free account is active and for a reasonable period afterward so you can export records or resolve billing.

We run daily server backups retained for about 30 days, store offsite copies for disaster recovery, and capture frequent database snapshots throughout the day. Backups rotate and older copies are deleted according to our retention schedule.

We use access controls, tenant isolation, encrypted passwords, and optional two-factor authentication. No online service can guarantee absolute security, but we work to protect business-critical sales and inventory data.

You may update company and profile details inside the app. To request access, correction, export, or deletion of account data, email contact@invultra.com. We will respond within a reasonable time.

If you close your account, we will delete or anonymize personal data except where we must keep records for legal, billing, or backup retention purposes.

You are responsible for the accuracy of data you enter, for giving your staff only the access they need, and for informing your customers if you collect their personal information through InvUltra.

Keep your password confidential and enable two-factor authentication where available.

InvUltra is a business service and is not directed at children under 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated date. Continued use of InvUltra after changes means you accept the updated policy.

InvUltra

Email: contact@invultra.com

Website: https://invultra.com