Nventr AI, LLC. The version you agree to is the one recorded with your acceptance.
This Privacy Policy is a notice describing how Nventr AI, LLC collects, uses, discloses, and retains information in connection with nventr.io. It is incorporated by the Terms and Conditions of Nventr AI, LLC (the Terms). It is not a data-processing addendum and is not a contract for data-processing services. A signed data-processing addendum is available for enterprise orders and is not part of the self-serve clickwrap.
This notice applies when an organization creates an account, uses the Platform or the App Kit, or contacts us about an account. It is presented for acceptance with the Terms before an account is created and again before a self-serve checkout on behalf of an organization. Capitalized terms not defined in this notice have the meaning given in the Terms.
The operator of nventr.io, and the party giving this notice, is Nventr AI, LLC, a Nevada limited liability company (Nventr, we, us, or our). Nevada Entity ID E36712052023-9. Principal office and notice address: 8550 West Desert Inn Road #102-452, Las Vegas, NV 89117. Registered agent for service of process: Pass Management, Inc., at the same address.
Customers contract only with Nventr AI, LLC. Nventr AI, LLC and its licensors (including Nventr IP, LLC) retain all right, title, and interest in the software. The organization that opens the account is the customer and is responsible for its users.
This notice covers information processed in connection with nventr.io for the products identified in Section 3.1. It does not cover websites, products, or services that we do not operate. It does not cover GridOS, which is a separate product.
nventr.io offers two products, sold separately. Buying one does not include the other.
Platform is a shared workflow runtime (nQube, seats, agentOS) that writes into systems the customer already has. Platform does not include a dedicated URL, database, layer repository, or Dev Console.
App Kit is a dedicated application instance (URL, database, layer repository, and Dev Console on the paid Kit plans). The Build plan uses a shared host and public site and is not a dedicated database.
This notice applies to both products when ordered on nventr.io. GridOS is not covered.
The self-serve set, in this order, is: (1) the Terms, which are the master contract with the customer organization; (2) this Privacy Policy, which is the data notice incorporated by the Terms; and (3) the End User Agreement, which is the individual's license and is subject to the Terms.
A signed order or enterprise agreement, if later executed, controls over the clickwrap terms for that organization. Any signed data-processing addendum is available only for enterprise orders and is not part of this notice or the self-serve clickwrap.
We collect the categories of information described in this Section 4. We collect additional information only if you or the customer organization submit it through the service or the contact form.
| Category | What we hold | What we do not hold |
|---|---|---|
| Account information | Email address and authentication data used to register and sign in | |
| Organization Content | Documents, files, prompts, database records, and configuration the customer organization submits | |
| Usage counts | Counts of runs, hours, storage, and tokens | Document contents, file bytes, or prompts |
| Payment information | Billing identity, plan, and transaction records received from Stripe | Card numbers (stored by Stripe, not by Nventr) |
| Session technologies | Cookies and similar technologies used only as needed to keep the session | Technologies used to sell personal information or for cross-context behavioral advertising |
When an account is created, we collect the email address used to register and the authentication data needed to sign in and keep the session. We use this information to operate the account, authenticate users, provide support, and send transactional messages about the account and the service.
The customer organization submits content in the course of using the service, including documents, files, prompts, database records, and configuration (Organization Content). Organization Content belongs to the customer organization. We process Organization Content to provide the products the organization has ordered, including running workflows, hosting an App Kit instance where applicable, and writing into systems the customer already has when the customer so configures.
We store usage meters as counts, including runs, hours, storage, and tokens. Usage meters do not include document contents, file bytes, or prompts. We use these counts to operate the service, apply published metered rates, and administer the account.
Payment processing is performed by Stripe. Card numbers are stored by Stripe and not by Nventr. We receive billing identity, plan, and transaction records needed to recognize payment, apply the order, and administer the account. We do not store card numbers on our systems.
We use cookies and similar technologies only as needed to keep the session. We do not use cookies or similar technologies to sell personal information. We do not use them for cross-context behavioral advertising.
We use the information described in Section 4 to: (a) provide, operate, maintain, and support the Platform and the App Kit; (b) authenticate users and keep the session; (c) process payments through Stripe; (d) apply usage counts to metered billing; (e) communicate about the account, security, and service-related matters; (f) protect the security and integrity of the service; (g) comply with law and enforce the Terms; and (h) respond to questions and to requests for access or deletion of account personal information as described in Section 12.
We do not use the information described in this notice for cross-context behavioral advertising.
We disclose information only as described in this Section 6. The providers named below are the providers we specify for these functions. This notice does not list other subprocessors.
| Function | Provider | What is disclosed |
|---|---|---|
| Control plane hosting | Amazon Web Services | Information needed to host and operate the control plane |
| Control plane hosting | Google Firebase | Information needed to host and operate the control plane |
| Hosted model inference | OpenAI or xAI, as configured | What is required to perform the requested operation, when the customer has not brought their own keys |
| Payment processing | Stripe | Payment details needed to process the transaction. Card numbers are stored by Stripe and not by Nventr |
The control plane runs on Amazon Web Services and Google Firebase. Those providers process information as needed to host and operate the control plane.
Hosted model calls, when the customer has not brought their own keys, are sent to the configured model provider (OpenAI or xAI) to perform the requested operation. Bring-your-own keys stay the customer's.
#### 6.2.1 Hosted Model Calls
When the customer uses hosted model calls and has not brought their own keys, the configured provider (OpenAI or xAI) receives what is required to perform the requested operation. Credentials for the customer's systems are not placed in the model context.
#### 6.2.2 Bring-Your-Own Keys
Bring-your-own keys stay the customer's. When the customer supplies its own keys, model calls using those keys are made with the customer's credentials. Those keys are not Nventr's.
Stripe processes payments for nventr.io. Card numbers are stored by Stripe and not by Nventr. We receive from Stripe only the billing identity, plan, and transaction records needed to recognize payment and administer the account.
Nventr AI, LLC does not sell personal information. Nventr AI, LLC does not share personal information for cross-context behavioral advertising. We do not disclose personal information to third parties in exchange for monetary or other valuable consideration, and we do not disclose personal information to third parties for cross-context behavioral advertising.
We may disclose information if we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or is reasonably necessary to protect the rights, property, or safety of Nventr, our customers, our users, or the public, or to enforce the Terms.
Customer data (documents, files, prompts, database, and configuration) belongs to the customer organization. Usage meters store counts (runs, hours, storage, tokens), not document contents, file bytes, or prompts. Credentials for the customer's systems are not placed in the model context. Bring-your-own keys stay the customer's.
We keep account information and Organization Content while the organization has an account. Usage counts are kept as needed to bill and administer the account.
Organization Content belongs to the organization, and the organization decides when it goes. An organization admin can delete content, or close the account, at any time, from the console or by asking us. Deleted content is removed from production systems within 7 days and from backups within 30 days.
When an account closes, the organization has 30 days to export its content. After that we delete it on the same schedule. What we keep after that is the minimum: a record that the account existed, who opened it, and the billing and usage records that tax and accounting law require us to keep. We keep anything else only while a court order, legal hold, or a law that applies to us requires it.
We apply commercially reasonable administrative, technical, and operational measures designed to protect information we hold, including access controls, encryption in transit, and restriction of staff access to what is needed to operate the service. This notice does not claim a security certification. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We operate from the United States. If you access nventr.io from outside the United States, your information is processed in the United States, which may have data-protection rules different from those in your country. Use of the service includes transfer of that information to the United States for the purposes described in this notice.
The service is not for anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected personal information from someone under 18, contact us through the contact form identified in Section 12.1. If we learn that we have collected personal information from someone under 18, we will delete it.
You may ask a question about this notice, or request access to or deletion of account personal information, as described in this Section 12. The organization that owns the account remains responsible for Organization Content and for its users.
Send privacy and account questions, and requests for access or deletion of account personal information, through the contact form at https://nventr.io/contact. Written notice to Nventr AI, LLC may also be sent to the principal office at 8550 West Desert Inn Road #102-452, Las Vegas, NV 89117.
We will respond in a manner consistent with applicable law. We may need to verify the requester's identity and authority, including that the requester is authorized by the customer organization when the request concerns an organization account.
Organization Content is the organization's. Its admins delete it, or close the account, and we remove it on the schedule in Section 8. If an individual user asks us to delete the organization's content, we pass the request to the organization's admins rather than act on it ourselves.
Your own account personal information (name, email, sign-in records) is deleted on your request. What stays is the record that the account existed and the billing and usage records described in Section 8.
We may update this Privacy Policy by posting a new version. As provided in the Terms, continued use after a new version is posted is not a substitute for acceptance. A new version requires a new acceptance before the next checkout. Acceptance is by scrolling through the document and pressing Agree, before creating an account and again before a self-serve checkout on behalf of an organization.
Written notice to Nventr AI, LLC must be sent to the principal office at 8550 West Desert Inn Road #102-452, Las Vegas, NV 89117. Privacy and account questions may also be sent through the contact form at https://nventr.io/contact.
This notice is governed by the laws of the State of Nevada, excluding conflict-of-laws rules. Exclusive venue for disputes arising out of this notice is the state and federal courts located in Clark County, Nevada.