Privacy Policy

InventWork is a private preview service. This is a plain-language starting point describing what data InventWork actually collects and where it goes, based on how the service is built today. It has not been reviewed by a solicitor — check it before relying on it for a live, paying product, and update it if the service’s data handling changes.

1. What we collect

• Account details: if you sign in, your email address (and, if you use Google or Facebook sign-in, the basic profile details those providers share) via our authentication provider, Supabase.
• Journey choices: the location, travel distance, future-need areas, roles and pack design choices you make while using InventWork.
• Generated content: the local research, organisation shortlists, editable cover-letter drafts and PDF packs created from your choices.
• Payment confirmation: Stripe processes your card payment directly. InventWork receives confirmation that payment succeeded, not your card details.
• Anonymous usage and performance data: Vercel records aggregate page views, referrers, broad location, device/browser details and Core Web Vitals so we can see where the service is used and where it is slow. We do not attach this data to your InventWork account.

2. Where it’s stored

While you’re signed out, your progress is kept only in your browser’s local storage. If you sign in, your progress is also saved to our database (hosted by Supabase) so you can pick it up again later, scoped to your account.

3. Who we share it with

We don’t sell your data. To provide the service, the following processors are used:

• Supabase — authentication and storing your saved journey.
• Stripe — payment processing for pack purchases.
• OpenAI — generating role descriptions, local-evidence writing, optional media-pack cover suggestions and editable cover-letter drafts. Cover suggestions use only the pack location, topic, published signals and work directions; they do not include your name, account details, organisation shortlist or source links. If you add a name for your pack, that name and any positioning statement or proof points you provide may be included when you separately ask AI to write the cover letter. Your account email is not included for either purpose.
• Companies House (UK government) — we query the public company register using your chosen location and distance to find organisations to shortlist. This is a public-data lookup; it does not send your personal details to Companies House.
• Geoapify (map data from OpenStreetMap) — we send the map coordinates of your chosen location and distance to find nearby organisations. It does not receive your name or account details.
• Resend — if you ask us to email your finished media pack, we send your account email address and a private download link to Resend so it can deliver the message.
• Vercel — hosting, anonymous aggregate Web Analytics, performance measurements and operational logs. Vercel Web Analytics does not use third-party cookies or retain an IP address as an identifier.

Nothing is sent to an employer or made public unless you choose to send or share a generated pack yourself.

4. Why we collect it

To run and improve the core service: generating relevant role ideas, finding organisations near you, saving your progress between visits, processing payment for the packs you choose to purchase, understanding which public pages are useful, and finding slow or broken parts of the service.

5. How long we keep it

We keep account and journey data for as long as your account is active. Temporary media-pack rendering source files, validation screenshots and PDFs are deleted after 24 hours. If you’d like your account and saved data deleted, contact us and we will remove it, save for records we’re legally required to keep (such as payment records for tax purposes).

6. Your rights

Under UK GDPR you can ask to access, correct or delete the personal data we hold about you, or ask us to export it. Contact chrisjhowitt@gmail.com to make a request.

7. Cookies and local storage

InventWork uses your browser’s local storage to keep your journey progress and, if you sign in, an authentication session. We do not use advertising cookies. Vercel Web Analytics measures anonymous aggregate visits without third-party cookies.

8. Changes to this policy

If how InventWork handles data changes materially, we’ll update this page and change the date at the top.

9. Contact

Questions or requests about your data: chrisjhowitt@gmail.com, or write to us at 22 Cairo Street, Warrington WA1 1EH.

Registered business details (company name, number and address) will be added here before this leaves private preview.