Privacy Policy

1. Who is responsible

Invoxa is a trading name of ATLAS MA LLC, a New Mexico limited liability company (entity ID 0008128069). We are the controller of personal data collected through this website and in the course of selling and supporting the Service. For personal data contained in Customer Data (for example, supplier contact details inside an invoice), our customer is the controller and we act as its processor under our agreement with it.

Contact for privacy matters: privacy@invoxa.agency · 304 S. Jones Blvd #2697, Las Vegas, NV 89107, United States.

2. What we collect

Contact and demo requests: your name, work email, company, role, and anything you write to us. Account data: administrator and User names, work emails, roles and authentication details. Billing data: billing contact, company address, tax identifiers, and payment records. Card numbers are entered on and stored by our payment processor, Stripe; we receive only a token, the card brand, the last four digits and the outcome of a payment.

Usage data: log records of how the Service is used (pages, actions, timestamps, IP address, browser and device type) needed to operate, secure and improve it. Customer Data: the invoices, supplier records and workflow content our customers submit, which we process only on their instructions.

Website analytics: this site uses Vercel Web Analytics, which counts visits and page views without cookies and without identifying individual visitors. We do not run advertising trackers.

3. How we use personal data, and on what basis

To respond to enquiries and demo requests and to run a demo (legitimate interests, or steps taken at your request before a contract). To provide, secure, support and bill the Service (performance of a contract). To send service and account notices (contract) and, where you have not objected, occasional product updates (legitimate interests; you can opt out at any time). To comply with legal obligations such as tax and accounting rules. To protect our rights and prevent fraud and abuse (legitimate interests).

4. Who we share it with

Service providers acting on our instructions: Stripe (payments), Vercel (hosting and analytics), our email and support tooling, and the ERP and other systems our customers connect at their own instruction. Professional advisers, and authorities where the law requires. A buyer or successor in a merger, acquisition or reorganisation, under the same protections. We do not sell personal data.

5. International transfers

We are based in the United States and our providers may process data in the United States and other countries. Where data protected by the laws of the European Economic Area, the United Kingdom or Switzerland is transferred outside those areas, we rely on appropriate safeguards such as the Standard Contractual Clauses or an adequacy decision, and we will provide details on request.

6. Retention

We keep enquiry data for up to 24 months after our last contact, account and billing records for as long as the account is active and then for the period required by tax and accounting law (typically 7 years), and Customer Data for the duration of the subscription plus the 30-day export window described in our Terms. Usage logs are retained for up to 13 months.

7. Security

We use encryption in transit and at rest, role-based access, audit logging, and regular review of our providers' certifications. No system is perfectly secure; if we become aware of a breach affecting your personal data we will notify you and, where required, the relevant authority without undue delay.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to its processing, to withdraw consent, and to complain to a supervisory authority. Residents of California and other US states with comprehensive privacy laws may also have the right to know what data is collected and to opt out of its sale or sharing; we do not sell or share personal data for cross-context behavioural advertising. To exercise a right, email privacy@invoxa.agency. If your request concerns Customer Data, we may refer you to the customer that controls it.

9. Cookies

This website sets only strictly necessary cookies, if any, required for it to function. The Service uses session cookies to keep Users signed in. Because we do not use cookies for tracking or advertising, no cookie consent banner is shown.

10. Children

The website and Service are for business use and are not directed at children under 16. We do not knowingly collect their personal data.

11. Changes and contact

We will post updates to this policy at https://invoxa.agency/privacy and, for material changes affecting customers, notify account administrators by email.

Questions or requests: privacy@invoxa.agency. Invoxa is a trading name of ATLAS MA LLC, a New Mexico limited liability company (entity ID 0008128069).