Invytly

Privacy Notice for the Invytly Website

Last updated: October 26, 2026

This notice explains how personal data is processed when you browse the Invytly website, send a request through its forms or try the guest demo. The processing of data within the Invytly platform is described in the Privacy Notice for the Invytly Platform.

1. Data Controller

Damiano Carradori
Via Antonio Milani, 19 – 37124 Verona (Italy)
Email: privacy@invytly.com

2. Personal data processed

a) Contact requests

The contact forms on the website ask only for your email address and for confirmation, by ticking a box, that you have read this notice and request to be contacted. When you submit one, our team receives a notification containing your address and replies to you by email about your event.

b) Service requests

The request form on the service pages collects your name, your email address, the description of your event that you write in it and the service of the page from which you send it, together with the same confirmation box. Our team receives them in a notification and replies to you by email.

c) Guest demo

To try the guest demo, you enter your first name, last name and email address, tick the box confirming that you have read this notice and request access to the demo (required) and, if you wish, a separate box to receive promotional communications and news about Invytly (optional). The language of the page and the date and time of your choices are also recorded.

When you submit the form:

  • you are added as a guest to a demonstration event on the Invytly platform, so that you can log in with your name to the demo RSVP form on demo.invytly.com; the answers you give there are stored with your demo guest record;
  • a record of your choices is kept (your request for the demo, your marketing consent if given, date and time, and the version of this notice);
  • our team receives a notification with your name, your email address and your choices;
  • two automated emails about the demo are scheduled, signed by a member of our team, to which you can reply: the first, about 20 minutes later, sends you the demo link again and is cancelled if you open the demo with the button on the confirmation page; the second, about 48 hours later, invites you to try the RSVP part of the demo.

Your browser keeps a note that you have already requested the demo (your name and a technical reference to the first email), so that the confirmation page is shown when you come back. You can remove it by clearing this website's data in your browser.

d) Submissions held back as spam

Automatic checks on the contact and service request forms hold back submissions that look like spam. These submissions are not forwarded to our team: their content is kept so that we can check by hand whether a genuine request was held back by mistake. If you have not heard from us, write to hello@invytly.com.

e) Browsing and technical data

While browsing the website, certain technical data may be automatically processed, such as IP address, log data, browser type, and operating system information.

This data is processed solely to ensure the proper functioning and security of the website and is not used for profiling or behavioral tracking purposes.

For further information on the use of cookies and similar technologies, you may refer to the Cookie Policy.

f) Anonymous and aggregated statistics

The website uses an analytics service provided by Vercel Inc. (Vercel Web Analytics) to collect anonymous and aggregated information about website usage (for example, number of visits, pages viewed, device type, and approximate geographic location).

This service does not use cookies, does not rely on persistent identifiers, and does not allow users to be identified.

g) Whether providing data is required

Providing your data is optional. However, without your email address we cannot reply to your request, and without your name, your email address and the demo confirmation we cannot give you access to the guest demo. The consent to promotional communications is optional and does not affect your access to the demo.

3. Purpose of processing

Personal data is processed for the following purposes:

  • replying to contact and service requests and following up on them
  • giving you access to the guest demo and sending the two automated emails about it
  • sending promotional communications and news about Invytly, only if you have consented
  • detecting spam, holding it back, and reviewing held-back submissions by hand
  • ensuring the proper functioning, security, and stability of the website
  • collecting anonymous and aggregated statistics on website usage
  • complying with legal obligations
  • protecting the Data Controller’s rights in the event of misuse or unlawful activities

4. Legal basis for processing

The processing of personal data is based on:

  • steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR), for replying to contact and service requests, giving you access to the guest demo and sending the two automated emails about it
  • your consent (Article 6(1)(a) GDPR), for promotional communications and news; you can withdraw it at any time, without affecting the lawfulness of the processing carried out before the withdrawal, by replying to any of our emails or by writing to privacy@invytly.com
  • legitimate interest of the Data Controller (Article 6(1)(f) GDPR), for spam prevention and the review of held-back submissions, the operation and security of the website, the collection of anonymous and aggregated statistics, and the protection of the Data Controller’s rights
  • compliance with a legal obligation to which the Data Controller is subject (Article 6(1)(c) GDPR), where applicable

The required boxes in the contact, service request and guest demo forms only confirm that you have read this notice and that you are making the request; they are not a consent under Article 6(1)(a) GDPR. Consent is asked only for promotional communications, with the separate optional box in the guest demo form.

5. Processing methods

Personal data is processed using electronic and IT tools, in accordance with the principles of lawfulness, fairness, transparency, data minimization, and purpose limitation, and with appropriate technical and organizational measures in place to ensure data security and integrity.

The automatic spam checks described in Section 2(d) only decide whether a submission is forwarded to our team; they do not produce legal effects or similarly significant effects on you, and every held-back submission can be reviewed by a person. Your data is not used for profiling.

6. Data recipients

Personal data is processed by the following service providers, acting as Data Processors on behalf of the Data Controller:

  • Vercel Inc.: hosting and infrastructure of the website, including the handling of the forms, in its Frankfurt (European Union) and Washington (United States) regions; Vercel Web Analytics, which does not use cookies and provides only aggregated statistics
  • Google Cloud EMEA Limited (Firebase): the database in which requests, the emails to be sent, guest demo records, consent records and held-back submissions are stored (Cloud Firestore, multi-region eur3, in the European Union), and the Invytly platform on which the guest demo runs
  • Twilio Ireland Limited (SendGrid): delivery of the notification emails and of the guest demo emails, without open or click tracking
  • Google Cloud EMEA Limited (Google Workspace): the company mailboxes that receive the form notifications and from which we reply to you
  • Calendly, LLC: the booking calendar described in Section 9, for the data you enter when booking a call

Your data may also be accessed by the Data Controller’s collaborators who handle sales and customer support, who are bound by confidentiality.

Personal data is not sold, is not shared with third parties for their own marketing purposes, and is not disclosed to the public.

7. Transfers outside the European Union

Some of these providers process, or may process, personal data in the United States: in particular Vercel (Washington region), Twilio SendGrid, Google Workspace and Calendly.

Transfers to the United States rely on the European Commission’s adequacy decision for recipients certified under the EU-US Data Privacy Framework, within the limits of their certification, or on the Standard Contractual Clauses adopted by the European Commission together with any necessary supplementary measures. Information on the mechanism applicable to each provider, and copies of the safeguards, can be requested at privacy@invytly.com.

8. Data retention

  • Contact requests, service requests and call bookings, including the related notification emails, are kept for as long as needed to handle them and follow up on the conversation, and in any case no longer than 24 months from our last exchange.
  • Guest demo data (your demo guest record, the answers you give in the demo and the related notification) is kept for the time needed to run the demo and follow up, normally no longer than 12 months, unless you become a customer, in which case the Privacy Notice for the Invytly Platform applies.
  • If you have consented to promotional communications, your name and email address are retained for that purpose until you withdraw your consent, even after the demo data has been deleted.
  • The record of your consent choices is retained for as long as the data it refers to.
  • Submissions held back as spam are kept only for the time needed to check them for false positives, normally within 90 days.
  • Technical browsing data and anonymous statistics are retained for limited periods consistent with the purposes of website operation and security.

We review stored data periodically and delete what is no longer needed.

Data may be retained for longer only where required by law or for as long as needed to establish, exercise or defend a legal claim.

9. Third‑party content

The website may embed video content from YouTube.

Videos are integrated using the privacy‑enhanced mode (youtube-nocookie.com) and/or are loaded only after user interaction.

When video content is played, technical data (such as IP address) may be processed by Google in accordance with its own privacy policies.

Some pages include a booking calendar provided by Calendly, LLC (United States) for booking a call with our team. The calendar is loaded from Calendly’s servers when the page opens, so Calendly may process technical data (such as IP address) and use its own cookies, in accordance with its own privacy policies. If you book a call, the data you enter (such as your name, email address and the time you choose) is collected through Calendly on our behalf to organise the call.

10. User rights

You may exercise the rights provided under Articles 15–22 of the GDPR at any time, including the right of access, rectification, erasure, restriction, and data portability (where applicable), the right to object to processing based on legitimate interest, and the right to withdraw your consent at any time, by contacting privacy@invytly.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the EU Member State in which you live or work.

11. Changes to this Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy at any time. Any changes will be published on this page with an updated revision date.

The Cookie Policy describes the technologies used by this website and should be read together with this Privacy Policy.