Privacy Policy

1. Information used for the service

Account and signup information includes your name, email address, company name, selected package, account credentials in hashed form, membership role and the record of accepting the Terms and this Policy. A successful signup keeps the package and acceptance receipt, while clearing the pending signup password hash and replacing the confirmation token.

Company information may include business and billing contacts, addresses, purchase-order details, invoices and account notes. Guide information may include site names, entrance coordinates, instructions, contacts, photographs, suggested corrections and update or review dates. Signed-in members may also add private notes and photographs.

Hosting and security systems may process request information such as IP addresses, browser details, request times and errors. Session and security cookies support sign-in, form security and service operation. We use information you provide in support conversations to answer your request.

2. Why information is used

We use this information to confirm signup, provide access, create company workspaces, deliver guides, manage invitations and corrections, send service emails, administer trials and manual billing, respond to support requests, investigate misuse and meet applicable obligations.

Signup acceptance covers the account and service purposes described here. It does not enroll you in a separate promotional mailing list. Any optional marketing communications require a separate choice.

3. Who can see information

Company access depends on current membership and role. Company administrators manage their team, and authorized reviewers can review suggested guide updates. Information published in a shared guide is accessible to anyone with that link, including a person to whom the link is forwarded.

Private member notes and photographs are not published into the company guide or made available to other company members through the normal guide interface. Owner account notes and billing administration are kept in the owner area. Authorized service personnel may handle information where needed for support, security or administration.

Choose carefully what you publish in a guide. Obtain the necessary authority before adding another person's details or photographs. Your company remains responsible for its own collection and disclosure of employee, customer and site information.

4. Service providers and external maps

We use providers for website hosting and email delivery to operate Invelya. The current website host is Web Hosting Canada. Providers receive information needed for their service and may also process operational logs or backups. Email may be processed by the recipient's own email provider.

Depending on the provider and recipient, information may be processed in Canada or another country and may be subject to the laws of that country. Contact the Privacy Contact at hello@invelya.ca for current information about our providers, locations and practices.

When you open an external map link, the saved site location or address is passed to that map provider. The provider handles your use of its service under its own terms and privacy policy. Opening the map is your choice; reviewing an Invelya guide does not require it.

We may disclose information where required or permitted by applicable law, or where necessary to address a legitimate security or legal matter.

5. Retention and security

A signup confirmation link expires after 24 hours. We retain information for service operation, account administration, acceptance records, billing, security and applicable legal requirements. Expiration of a link does not itself delete every related record.

We use access controls and hashed account passwords. No online system or shared link can be guaranteed secure. Keep credentials private, limit guide-link sharing and notify us promptly if you suspect misuse.

Contact us to request deletion or discuss retention of account information. Some records may need to be retained for legal, billing, security or dispute purposes, and backup copies may remain until their normal replacement cycle.

6. Access, correction and withdrawal

You may contact hello@invelya.ca to ask about your information, request access or correction, request deletion or withdraw consent, subject to applicable limits. We may verify your identity and authority before acting. If a request concerns information controlled by your company, we may direct you to the company administrator or work with them.

If you withdraw consent needed for an account or the service, we will explain the likely effect, which may include being unable to continue providing that access. You may ask the Privacy Contact about our handling practices or raise a privacy concern.

7. Updates to this Policy

We identify this Policy by version and effective date and will communicate material changes. Acceptance records include the document version and date. Please contact the Privacy Contact if you have questions about an earlier version or a change.