Privacy Policy

INVIT Network ("INVIT", "we", "us", or "our") operates invitnetwork.com, a private members-only platform connecting founders, investors, and operators. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our platform, attend our events, or engage with our services.

By accessing or using INVIT Network, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our platform.

We collect the following categories of personal data:

• Account information — your name, email address, company name, job title, and professional role, provided during registration or profile setup.
• Profile data — biography, profile photo, social links, industry, location, and other details you choose to share on your member profile.
• Content — posts, comments, messages, and other content you create or share on the platform.
• Booking and event data — event registrations, coaching session bookings, attendance records, and related preferences.
• Payment information — billing details required for membership and services. Payment processing is handled by Stripe; we do not store your credit card numbers or full payment card details on our servers.
• Usage data — IP address, browser type, device information, pages visited, referring URLs, and interaction patterns collected automatically when you use our platform.

We use your personal data for the following purposes:

• Account management — creating and maintaining your account, authenticating your identity, and managing your membership.
• Platform features — enabling networking, event booking, coaching sessions, community features, and member introductions.
• Email notifications — sending transactional emails, event reminders, booking confirmations, and platform updates via Postmark.
• Payment processing — processing membership fees, event tickets, and coaching session payments through Stripe.
• Analytics — understanding how members use our platform to improve features, content, and user experience.
• Security — detecting and preventing fraud, abuse, and unauthorised access to our platform.

We work with trusted third-party service providers to operate our platform. These providers have access to your personal data only to perform specific tasks on our behalf and are obligated to protect it:

• Stripe — payment processing. Stripe's privacy policy governs how they handle your payment data.
• Postmark — transactional email delivery for notifications, booking confirmations, and account-related communications.
• Google Analytics — anonymised usage tracking to help us understand platform usage patterns and improve our services.
• Google reCAPTCHA v3 — bot protection and abuse prevention on forms and authentication flows.
• Google OAuth — optional authentication method allowing you to sign in with your Google account.
• LinkedIn OAuth — optional authentication method allowing you to sign in with your LinkedIn account.

We use the following types of cookies:

• Authentication cookies — JWT tokens stored as httpOnly cookies to keep you securely signed in.
• Analytics cookies — Google Analytics cookies to collect anonymised usage data.
• reCAPTCHA cookies — cookies set by Google reCAPTCHA v3 for bot detection and security purposes.

For a detailed breakdown of every cookie we use, please see our Cookie Policy.

We do not sell your personal data. We share your information only in the following limited circumstances:

• Payment processor — billing and payment data is shared with Stripe to process transactions.
• Email provider — your email address and name are shared with Postmark to deliver transactional emails.
• Legal obligations — we may disclose your data if required to do so by law, regulation, legal process, or enforceable governmental request.
• Protection of rights — we may share data when necessary to protect the rights, safety, or property of INVIT Network, our members, or the public.

We retain your personal data for as long as your membership is active and your account remains open. If you cancel your membership or request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as resolving disputes or enforcing our terms).

Anonymised and aggregated data that cannot be used to identify you may be retained indefinitely for analytics and service improvement purposes.

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data ("right to be forgotten").
• Right to data portability — request your data in a structured, commonly-used, machine-readable format.
• Right to object — object to the processing of your personal data for certain purposes, including direct marketing.
• Right to restrict processing — request that we limit how we use your data in certain circumstances.

To exercise any of these rights, please contact us at info@invitnetwork.com. We will respond to your request within 30 days.

We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:

• Passwords are hashed using industry-standard algorithms and never stored in plain text.
• Authentication tokens are stored in httpOnly cookies to prevent cross-site scripting attacks.
• All data is transmitted over HTTPS with TLS encryption.
• Rate limiting is applied to API endpoints to prevent abuse and brute-force attacks.
• Access to personal data is restricted to authorised personnel on a need-to-know basis.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via email or a prominent notice on our platform prior to the changes taking effect.

We encourage you to review this page periodically to stay informed about how we protect your data. Your continued use of INVIT Network after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: info@invitnetwork.com

INVIT Network Ltd
London, United Kingdom