Privacy Policy | Invenire

Invenire ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our platform.

Information We Collect

We collect the following personal information when you register for and use Invenire:

Account information: Your name and email address, provided during registration.
Weekly email sign-up: If you sign up for the weekly email without an account, your email address and the dates you asked for, confirmed and (if you do) cancelled it. Nothing is sent to the address, apart from one confirmation email, until you confirm it.
Profile information: Any additional details you choose to add to your profile.
Usage data: Information about how you interact with the platform, such as which exhibition spaces you follow, open calls you collect, and pages you visit.
Technical data: Browser type, device information, and IP address, collected automatically for security, service operation, and — if you have consented to analytics cookies — aggregated usage analytics.

How We Use Your Information

We use your personal information to:

Provide, maintain, and improve the Invenire platform.
Track exhibition spaces and open calls on your behalf.
Send you relevant notifications about opportunities you follow.
Send the weekly email of open calls, if you turned it on or signed up for it. Every weekly email has a one-click unsubscribe link, and account holders can also switch it off in their profile.
Respond to your requests and provide customer support.
Ensure the security and integrity of our platform.

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties. Your data is used solely to provide and improve the Invenire service.

We may share your information only in the following limited circumstances:

Service providers: We use trusted third-party services that process data on our behalf, subject to contractual confidentiality and data-protection obligations. These include:
- Hosting and infrastructure (Laravel Forge / DigitalOcean) — stores the application database and server logs.
- Email delivery (Resend) — sends transactional emails such as verification and password resets.
- Payments (Stripe) — processes subscription payments; card details are handled directly by Stripe and never stored on our servers.
- Analytics (Google Analytics, provided by Google LLC / Google Ireland Ltd.) — measures aggregated usage of the website so we can improve it. Google Analytics is only loaded if you opt in via the cookie banner. See the Cookies section below.
- Push notifications (Firebase Cloud Messaging, provided by Google LLC) — delivers notifications to the mobile app, when enabled.
- AI-assisted search providers (OpenAI, Google Gemini) — queries about exhibition spaces, open calls, and residencies may be sent to these providers; we do not send personally identifying account data to them.
Legal requirements: We may disclose your information if required to do so by law or in response to valid legal requests by public authorities.

Some of these providers are based in the United States. Where personal data is transferred outside the EEA, we rely on the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses as the legal transfer mechanism.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. A weekly email sign-up without an account is kept while you receive the email: an unconfirmed sign-up is deleted after 30 days, a cancelled one 30 days after you unsubscribe, and if you create an account with the same address the sign-up is moved to the account and removed.

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct any inaccurate or incomplete data.
Right to erasure: You can request that we delete your personal data ("right to be forgotten").
Right to data portability: You can request a copy of your data in a structured, commonly used, machine-readable format.
Right to restrict processing: You can ask us to limit how we use your data.
Right to object: You can object to the processing of your personal data for certain purposes.
Right to withdraw consent: Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us at the email address provided below.

Cookies

Invenire uses two categories of cookies:

Essential cookies are required for the platform to function and are set whenever you visit the site. These include:
- invenire-session — identifies your browsing session (2 hours).
- XSRF-TOKEN — protects against cross-site request forgery (2 hours).
- invenire_cookie_consent — remembers your cookie preferences (1 year).
Analytics cookies are set by Google Analytics and are only loaded if you actively consent via the cookie banner. They help us understand aggregated usage patterns so we can improve the platform. If you do not consent, these cookies are not set. The cookies used are:
- _ga, _ga_ZZ4ETWLL14 — distinguish unique visitors and persist session state (up to 1 year).
- _gid — identifies the visitor (1 day).
- _gat — throttles the request rate (1 minute).

We do not use advertising or cross-site tracking cookies, and we do not sell the data collected by Google Analytics to any third party.

You can change or withdraw your cookie consent at any time by clearing the invenire_cookie_consent cookie in your browser or by using your browser's cookie settings. On your next visit the banner will appear again.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on the platform or by email. Your continued use of Invenire after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: privacy@invenire.se