Privacy Policy
Last updated: February 28, 2026
Invoks ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform at myinvoks.com.
1. Information We Collect
- Account Information: When you sign in with Google, we receive your name, email address, and profile picture from Google's OAuth service.
- Project Data: Project names, configuration settings (CORS domains, webhook URLs, spam keywords, auto-responder content), and project logos you provide.
- Form Submission Data: Data collected through your connected HTML forms. This data belongs to you and is stored on your behalf.
- Usage Data: Standard server logs including IP addresses, browser types, pages visited, and timestamps for security and performance purposes.
2. How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Invoks platform
- Send transactional emails (auto-responders, admin notifications) on your behalf
- Enforce our Terms of Service and prevent abuse
- Improve and develop new features for the Service
- Respond to your support requests and communications
3. Data Storage and Security
Your data is stored in a secure PostgreSQL database hosted on Neon (neon.tech). We implement industry-standard security measures including encrypted connections (TLS), input sanitization to prevent XSS attacks, rate limiting, and access controls. However, no method of electronic storage is 100% secure.
4. Third-Party Services
We use the following third-party services that may process your data:
- Google OAuth: For user authentication. Subject to Google's Privacy Policy.
- Resend: For transactional email delivery. Subject to Resend's Privacy Policy.
- Vercel: For hosting and deployment. Subject to Vercel's Privacy Policy.
- Neon: For database hosting. Subject to Neon's Privacy Policy.
5. Data Sharing
We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share data only in the following circumstances:
- With your explicit consent
- To comply with legal obligations or government requests
- To protect the rights and safety of Invoks or its users
- With service providers who help us operate the platform (listed above)
6. Your Rights
As a user, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate data
- Deletion: Request deletion of your account and associated data
- Portability: Export your form submission data via CSV from the dashboard
7. Cookies
Invoks uses cookies strictly for authentication session management (via NextAuth.js). We do not use tracking or advertising cookies. No third-party analytics cookies are set.
8. Data Retention
We retain your account data for as long as your account is active. Form submission data is retained until you manually delete it from your dashboard or request account deletion. Upon deletion, your data is permanently removed from our systems within 30 days.
9. Children's Privacy
Invoks is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date. Continued use of the Service after updates constitutes acceptance.
11. Contact Us
For any privacy concerns or data requests, please contact: