Privacy Policy

Who we are

Inviato is an AI-powered outbound sales agent operated by Polsia Inc. ("Polsia", "we", "our"). We are registered in the European Union and comply with GDPR (Regulation 2016/679).

Contact: privacy@inviato.ai

What data we collect

We collect only what is necessary to run your outbound campaigns:

• Account data: Name, email address, company name — collected at signup.
• Prospect data: Names, job titles, companies, and email addresses you upload for outreach campaigns. This data belongs to you; we process it only on your behalf.
• Usage data: Campaign performance, email open/click rates, and engagement metrics.
• Technical data: IP address, browser type, and session data for security and improvement.

How we use your data

We use your data exclusively to:

• Run outbound email campaigns on your behalf
• Enrich prospect profiles with public company data (via Apollo, Hunter)
• Generate personalized AI-powered email content
• Schedule and track follow-ups
• Send transactional emails (confirmations, notifications)
• Improve our service and generate anonymized usage statistics

We do not sell your data or your prospects' data. We do not use your outreach data to train AI models.

Legal basis for processing

Our processing is based on:

• Contract performance: Processing your data is necessary to deliver the service you've signed up for.
• Legitimate interest: Aggregated anonymized usage data helps us improve service quality.
• Consent: For marketing communications, we rely on your explicit opt-in.

Data retention

Your account data is retained as long as your account is active. You can request deletion at any time — see your rights below. Prospect data is deleted within 30 days of account closure unless you request otherwise. Outreach logs are retained for 24 months for compliance purposes.

Data sharing

We share your data with:

• Email delivery partners (Resend): To send outbound emails on your behalf.
• Data enrichment providers (Apollo, Hunter): To enrich prospect profiles with public company data.
• AI providers (OpenAI via AI Proxy): To generate personalized email content.
• Infrastructure providers (Render, Neon): To host and store your data.

All third parties are bound by data processing agreements that comply with GDPR.

International transfers

If data is processed outside the EU, we ensure adequate safeguards (EU Standard Contractual Clauses or equivalent) are in place.

Your rights (GDPR)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limited processing
• Portability: Receive your data in machine-readable format
• Objection: Opt out of processing based on legitimate interest

To exercise any of these rights, email privacy@inviato.ai. We respond within 30 days.

Security

We use industry-standard encryption (TLS 1.2+) for data in transit and AES-256 for data at rest. Access is restricted to authorized personnel on a need-to-know basis. We maintain a register of data processing activities as required by GDPR Article 30.

Cookies

We use essential session cookies to keep you logged in. No advertising or tracking cookies are used. You can manage cookie preferences in your browser settings.

Changes to this policy

We notify users of material changes to this policy via email at least 30 days before they take effect. Significant changes will also be announced on our website.

Complaints

If you believe your rights have been violated, you have the right to lodge a complaint with your national Data Protection Authority (DPA). In Italy: garanteprivacy.it.