Invoxus — Privacy & Data Use Notice

Your privacy matters. This policy explains how Invoxus accesses, uses, stores, shares, and deletes data, including Google Gmail and Microsoft Outlook user data, to deliver the product experience.

1. Data Access & Scope

• Gmail Integration: With your consent, Invoxus accesses Gmail to list messages, read metadata and content for features like summaries, draft and send emails you approve, and help with unsubscribe or cleanup.
• Outlook Integration: With your consent, Invoxus accesses Microsoft Outlook via Microsoft Graph API to read, send, and manage emails, providing the same features available for Gmail users. We only access data necessary for the features you use.
• We request the minimum scopes required and use them only for the stated, user‑visible features.
• We do not sell user data from any email provider or use it for advertising purposes.

2. Storage

• Authentication: Session credentials (OAuth tokens) are stored in secure cookies to keep you signed in. For Gmail, tokens may be stored in our database when you enable background actions. For Outlook, tokens are refreshed as needed to maintain access.
• Email Content: Email content is not stored permanently by default. Drafts, categories, or chat history you explicitly save are stored to provide those features.
• User Preferences: We store your account preferences, usage statistics, and AI chat history to improve your experience.

3. Payment & Transactions

• Cold Email Generation: Users receive 5 free AI-generated cold emails. Additional generations require a payment of ₹1 per email.
• Payment Processing: All payments are processed securely through Razorpay. We do not store your complete credit card or banking details.
• Transaction Records: We maintain records of payment transactions (payment ID, amount, status, timestamp) for service delivery, customer support, and legal compliance purposes.
• Usage Tracking: We track usage of paid features (cold email generations) linked to your email address or session to enforce limits and prevent abuse.
• Refunds: Payment transactions are generally non-refundable. For questions about charges, contact us at contact@invoxus.email.

4. Sharing

• We do not share user data (Gmail or Outlook) with third parties, except:
  • Service Providers: Infrastructure providers, payment processors (Razorpay), and background job processors bound by confidentiality.
  • Legal Requirements: When required by law or to protect our rights and safety.
• AI processing is performed using Groq API and OpenAI API, which process email content temporarily to generate responses but do not store it.

5. Deletion & Revocation

• Gmail: You can revoke Invoxus access at any time from your Google Account security settings.
• Outlook: You can revoke Invoxus access from your Microsoft Account permissions page.
• Data Deletion: You may request deletion of stored tokens, chat history, payment records, and app data by emailing contact@invoxus.email. We will delete your data within 30 days unless required to retain it for legal compliance.
• Note: Payment transaction records may be retained for up to 7 years for tax and legal compliance purposes.

6. Security & Logs

• We apply industry‑standard security safeguards including encryption in transit (HTTPS) and secure token storage.
• Diagnostic logs, if used, exclude message content and personally identifiable information (PII).
• Payment data is handled securely through PCI-DSS compliant payment processors.

7. Third-Party Services

• Google OAuth: For Gmail authentication and access.
• Microsoft OAuth: For Outlook authentication and access via Microsoft Graph API.
• Razorpay: For secure payment processing (subject to Razorpay's privacy policy).
• Groq & OpenAI: For AI-powered email features (subject to their respective privacy policies).

8. Changes to this Policy

• We will update this page if our data practices change and will notify users in‑product when material changes occur.
• Check the "Last updated" date at the top of this page to see when changes were made.

9. Contact

Questions, concerns, or data deletion requests? Contact contact@invoxus.email.