1. Introduction
INVOKAP LIMITED, publisher of the Invokap platform, is committed to protecting the privacy of its users. This policy describes how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
2. Data controller
INVOKAP LIMITED
Venture Hub, 136 Capel Street, Dublin, D01 T2C9, Ireland
Register number : 820269
Email: contact@invokap.com
3. Data collected
We collect the following categories of data:
3.1 Identification data
- First and last name
- Email address
- Phone number
- Postal address
3.2 Professional data
- Company name
- SIREN/SIRET number
- KYC documents (ID, company registration, bank details)
- Invoices and commercial documents
3.3 Browsing data
- IP address
- Browser type
- Pages visited
- Cookies (see our cookie policy)
4. Purposes of processing
Your data is processed to:
- Manage your account and authentication
- Verify your identity and that of your company (KYC)
- Process your invoice assignment requests
- Communicate with you about your transactions
- Comply with our legal and regulatory obligations
- Improve our services
5. Legal basis
Processing is based on:
- Contract performance: account management and assignments
- Legal obligations: anti-money laundering, accounting retention
- Legitimate interest: service improvement, security
- Consent: newsletter, non-essential cookies
6. Data recipients
Your data may be shared with:
- Our KYC verification partners
- Our regulated payment partners
- Our technical providers (hosting, security)
- Competent authorities when required by law
7. Transfers outside the EU
We prioritise European providers. Where data is transferred outside the EU, we ensure appropriate safeguards are in place (standard contractual clauses, adequacy decisions).
8. Retention periods
- Account data: duration of the relationship + 5 years
- KYC/KYB documents: 5 years after the end of the relationship (AML obligations)
- Assignment contracts and contractual documents: 10 years
- Invoices and accounting records: 10 years
- Electronic signatures and related evidence: 10 years
- Browsing data: 13 months maximum
- Security logs: 365 days
9. Your rights
Under the GDPR, you have the following rights:
- Access: obtain a copy of your data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data
- Restriction: limit processing
- Portability: receive your data in a structured format
- Objection: object to processing
To exercise your rights: log in to your account (export / deletion request) or contact contact@invokap.com
10. Security
We implement appropriate technical and organisational measures to protect your data: SSL/TLS encryption, access control, backups and system monitoring.
11. Cookies
Invokap uses strictly necessary cookies (session, security) and, where applicable, language preference cookies. No third-party advertising or analytics cookies are deployed on the current version. See our cookie policy for details.
12. Changes
This policy may be updated. We will notify you of any material change by email or via the platform.
13. Complaint
You may lodge a complaint with the Data Protection Commission (DPC), Ireland's data protection authority: www.dataprotection.ie
If you are resident in another European Union or European Economic Area member state, you may also contact the data protection authority in your country of residence.
14. Contact
For any question about the protection of your data:
Email: contact@invokap.com
Address: INVOKAP LIMITED - DPO, Venture Hub, 136 Capel Street, Dublin, D01 T2C9, Ireland
Register number : 820269