Privacy Policy

Invico is operated by Petr Koukal, an individual based in the Czech Republic, who is the data controller responsible for your personal data. For any privacy questions or to exercise your rights, contact us at support@invico.net.

• Account data: your email address, display name, and either a hashed password or the profile data provided by your sign-in provider when you log in with a third-party account. If you set up a passkey, we store its public credential.
• Content you create: the prompts you write, images you generate, reference images you upload, and any feedback you submit.
• Billing data:records of your purchases, subscriptions, and credit history. We never receive or store your card numbers — payments are handled by our payment provider.
• Technical and security data: session information, including your IP address and browser user-agent, used to keep your account secure.

• To provide the service and maintain your account — this is necessary for the performance of our contract with you.
• To process payments, prevent fraud, and keep accounts secure — based on our legitimate interests and the performance of our contract.
• To comply with the law where required — based on our legal obligations.

We do not use your prompts or generated images to train or fine-tune AI models.

We share data only with the service providers we need to operate Invico:

• a third-party payment provider, to process payments and billing;
• third-party AI providers, which generate images from your prompts and refine your prompt text;
• a cloud storage and hosting provider, which stores your data.

These providers process your data only to perform their services for us. We never sell your personal data. You may request the specific list of providers we use by contacting us.

Some of our providers may process data outside the European Economic Area. Where they do, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to protect your data.

Your generated images are private by default. They become viewable by others only if you choose to create a share link, which produces a public URL. You can revoke any share link at any time, after which the image is no longer publicly accessible.

We keep your data for as long as your account is active. When you delete your account, we erase your personal data and generated images within 30 days. Residual copies in routine backups are removed on their normal rotation cycle.

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw any consent you have given.

You can delete your account at any time from your account page. To exercise any other right, contact support@invico.net. You also have the right to lodge a complaint with your local data protection authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

We use only a single essential cookie to keep you signed in. We do not use analytics, advertising, or tracking cookies, so no cookie consent banner is required.

We protect your data with industry-standard measures, including hashed passwords, support for passkeys, and encrypted connections (HTTPS). No system is perfectly secure, but we work to keep your data safe.

Invico is not intended for anyone under the age of 16, and we do not knowingly collect data from children under 16.

We may update this policy from time to time. We will post any material changes on this page and update the date above. For any questions about this policy or your data, contact us at support@invico.net.