Privacy Policy
Last updated: 23rd July 2026
1.Who we are
This website, invorep.com (the “Site”), is operated by:
Avapa, UAB; Company code: 305655938; Registered address: V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania; Email: info@invorep.com.
We are the data controller responsible for the personal data described in this policy, within the meaning of the EU General Data Protection Regulation (GDPR).
2.What this policy covers
This policy explains how we collect and use personal data when you visit the Site, request a demo, or contact us. It does not cover the Invorep platform itself — data processed inside the platform on behalf of our customers (such as debtor data) is governed by our agreements with those customers.
3.Personal data we collect
3.1Data you give us
When you submit our demo request form or contact us by email, we collect:
- Full name
- Company name
- Job title
- Phone number
- Business email address
- Anything you include in your message to us
Only your email address is required; the other form fields are optional.
3.2Data collected automatically
Analytics. We use Google Analytics 4 (Google LLC) to understand how the Site is used. Analytics scripts load only after you accept them via cookie banner. The data collected includes pages visited, referrer, browser and device type, approximate (country/city-level) location, and usage events.
Server logs. Our hosting provider automatically records technical data such as IP address, browser type, and time of access for security and reliability purposes.
4.Why we process your data and on what legal basis
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Responding to your demo request and scheduling a demo call | Form data (name, company, title, phone, email) | Art. 6(1)(b) — steps at your request prior to entering a contract |
| Responding to email enquiries | Your email and message contents | Art. 6(1)(b) or 6(1)(f) — our legitimate interest in responding to enquiries |
| Sending follow-up communications about Invorep after a demo request | Email address | Art. 6(1)(f) — legitimate interest in following up on your expressed interest |
| Website analytics | Usage data (see 3.2) | Art. 6(1)(a) — your consent via the cookie banner |
| Site security, spam prevention, and debugging | Server logs | Art. 6(1)(f) — legitimate interest in keeping the Site secure |
5.How long we keep your data
- Demo requests and enquiries: kept for 36 months after our last contact with you, unless you become a customer (in which case data is kept for the duration of our relationship and any legally required period afterwards).
- Analytics data: up to 14 months; aggregated statistics may be retained longer.
- Server logs: retained by GitHub (GitHub, Inc., USA) in accordance with the GitHub Privacy Statement.
Data is deleted or anonymised once it is no longer needed for the purposes above.
6.International transfers
Some of our service providers are located outside the EEA, including the United States. Where data is transferred outside the EEA, we rely on safeguards such as the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
7.Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you (Art. 15)
- Rectify inaccurate or incomplete data (Art. 16)
- Erase your data (“right to be forgotten”) (Art. 17)
- Restrict processing (Art. 18)
- Data portability — receive your data in a machine-readable format (Art. 20)
- Object to processing based on legitimate interests, including direct marketing (Art. 21)
- Withdraw consent at any time where processing is based on consent (e.g. analytics), without affecting processing carried out before withdrawal
To exercise any of these rights, email us at info@invorep.com. We will respond within one month.
You also have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), vdai.lrv.lt, but you may also complain to the authority in your own EU member state.
8.Cookies and similar technologies
The Site uses a consent banner. No analytics or non-essential scripts load until you make a choice.
| Cookie / storage item | Purpose | Duration | Type |
|---|---|---|---|
| invorep_consent (browser localStorage) | Remembers your cookie banner choice (accept or decline) | Until you clear your browser data for this site | Strictly necessary |
| invorep_waitlist (browser localStorage) | When you submit the demo request form, a copy of your submission is kept in your own browser as a backup in case delivery fails. This data stays on your device and is not read back by us. | Until you clear your browser data for this site | Strictly necessary |
| _ga (cookie, Google Analytics) | Distinguishes visitors for analytics | 14 months | Consent-based — set only if you accept |
| _ga_* (cookie, Google Analytics) | Maintains the analytics session state | 14 months | Consent-based — set only if you accept |
You can withdraw or change your consent at any time by clearing your browser’s stored data for this site (in most browsers: site settings → “Clear data”), after which the banner will appear again on your next visit. Declining or withdrawing consent does not affect your use of the Site.
9.Security
We take appropriate technical and organisational measures to protect your data. The Site is a static website with no database or backend of its own, so we do not store your personal data on our own servers. All connections to the Site are encrypted in transit (HTTPS/TLS). When you submit the demo request form, your data is transmitted over an encrypted connection directly to our CRM provider, where access is restricted to authorised personnel. Our service providers operate certified security programmes (including ISO 27001 and SOC 2 certifications). No method of transmission or storage is completely secure, but we work to protect your data in line with industry standards.
10.Automated decision-making
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
11.Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top reflects the latest version. Material changes will be highlighted on the Site.