Invergent
Book a demo

Privacy Policy

Last updated 27 September 2026

This Privacy Policy explains how Invergent S.A. ("Invergent", "we", "our" or "us") collects, uses and shares personal data about you when you visit our website at https://invergent.ai (the "Site"), write to us, ask about our products, apply for a job, attend our events, or work with us as a customer, supplier or partner.

"Personal data" means any information about an identified or identifiable person.

This policy does not cover data that our customers process with our products. When a customer uses Surogate or another Invergent product, the customer decides what data it processes and why, and our agreement with that customer, including its data processing terms, governs that data. When our products run on a customer's own infrastructure, we do not receive that data at all.

1. Who we are

The controller responsible for your personal data is Invergent S.A., a company located in Romania.

For any question about this policy or your personal data, write to privacy@invergent.ai.

2. Personal data we collect

Data you give us

  • Messages. When you email us, for example at sales@invergent.ai, support@invergent.ai or privacy@invergent.ai, we receive your name, email address and anything else you include, such as your company, your role, your message and its attachments.
  • Demo and sales requests. When you ask for a demo or a quote, we collect the contact and company details you give us and what you tell us about your needs.
  • Job applications. When you apply for a job, by email to contact@invergent.ai, we collect your contact details and what you include in your CV and message, such as your education and work experience.
  • Events. When you register for an event we run, we collect the details you give us to register, such as your name, email address and company.
  • Customers, suppliers and partners. For the people we deal with at these organisations, we keep business contact details and the information we need to manage contracts, invoices and payments.

Data collected when you visit the Site

The Site is hosted on GitHub Pages. When your browser requests a page, GitHub receives your IP address and technical details such as your browser type, the page requested and the time, and keeps them in its server logs to deliver and secure the Site.

We do not use analytics, advertising or tracking tools on the Site, and the Site does not set cookies of its own.

Content from other services

  • Canva. Some pages about our Digital Automation products show designs embedded from Canva. When such a page loads, Canva receives your IP address and technical details, and may set its own cookies. Canva's privacy policy applies to that: https://www.canva.com/policies/privacy-policy/
  • Google Fonts. The film on our home page loads its typefaces from Google Fonts, which receives your IP address when it does. Google's privacy policy applies to that: https://policies.google.com/privacy

3. How we use it, and on what legal basis

We use personal data only for the purposes below, each with the legal basis the GDPR allows for it:

  • To answer your messages and requests, including demo and sales requests: to take steps you ask for before entering into a contract (Art. 6(1)(b) GDPR), or our legitimate interest in replying to people who contact us (Art. 6(1)(f)).
  • To provide our products and services and manage our business relationships: to perform our contracts (Art. 6(1)(b)), and our legitimate interest in managing our relationships with the organisations we work with (Art. 6(1)(f)).
  • To assess job applications: to take steps before a possible employment contract (Art. 6(1)(b)). If you agree, we keep your application for future openings (Art. 6(1)(a)).
  • To run our events: to perform the registration you asked for (Art. 6(1)(b)).
  • To send you news about our products: your consent (Art. 6(1)(a)), or, where the law allows it for existing customers, our legitimate interest in telling them about similar products (Art. 6(1)(f)). Every message lets you unsubscribe.
  • To keep the Site and our systems secure and prevent abuse: our legitimate interest in protecting them (Art. 6(1)(f)).
  • To meet our legal obligations, such as keeping accounting records: compliance with the law (Art. 6(1)(c)).
  • To establish, exercise or defend legal claims: our legitimate interest in doing so (Art. 6(1)(f)).

Where we rely on your consent, you can withdraw it at any time. That does not affect what we did before. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

4. Who we share it with

We do not sell personal data. We share it only with:

  • Service providers who help us run our business, such as website hosting, email and IT providers. They act on our instructions under contracts that protect your data.
  • Professional advisers, such as lawyers, accountants and auditors, where they need it to advise us.
  • Authorities, courts and law enforcement, where the law requires it, or where it is needed to protect the rights, property or safety of Invergent, our customers or others.
  • A buyer or successor, if we are involved in a merger, acquisition, reorganisation or sale of all or part of our business.
  • Anyone else you ask us to share it with, or agree to.

5. Transfers outside the European Economic Area

Some of the providers named in this policy, such as GitHub, Google and Canva, may process personal data outside the European Economic Area. When data leaves it, we rely on a decision of the European Commission that the destination protects personal data adequately, including the EU-US Data Privacy Framework for certified companies, or on the Standard Contractual Clauses approved by the Commission. You can ask us for a copy of the safeguards we use at privacy@invergent.ai.

6. How long we keep it

We keep personal data only as long as we need it for the purpose we collected it for, and then delete it or make it anonymous:

  • Messages and requests: as long as we need to deal with them and any follow-up.
  • Customer, supplier and partner records: for the length of the relationship, and afterwards for as long as the law requires us to keep accounting and tax records, or as needed for possible legal claims.
  • Job applications: until the recruitment process ends, unless you agree that we keep your application for future openings.
  • Newsletter subscriptions: until you unsubscribe.

7. Your rights

Under the GDPR you have the right to:

  • access your personal data and receive a copy of it;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict how we use your data;
  • receive the data you gave us in a structured, machine-readable format, and have it sent to another controller;
  • object to our use of your data when we rely on our legitimate interests, and at any time to its use for direct marketing; and
  • withdraw your consent at any time, where we rely on it.

To use any of these rights, write to privacy@invergent.ai. We will reply within one month, and may ask you to confirm your identity first.

You also have the right to complain to a data protection authority. In Romania, that is the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro. You can also complain to the authority in the country where you live or work.

8. Security

We use technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No transmission or storage of data is completely secure, so we cannot guarantee absolute security.

9. Children

The Site and our services are not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, write to privacy@invergent.ai and we will delete it.

10. Other websites

The Site links to websites and services we do not run, such as GitHub, Hugging Face, LinkedIn and X. This policy does not apply to them, and we encourage you to read their privacy policies.

11. Changes to this policy

We will post any changes on this page with a new "Last updated" date. If a change is significant, we will also tell the people it affects, for example by email where we have their address.

12. Contact

For any question, comment or concern about this policy or how we use personal data, write to privacy@invergent.ai.