Privacy Policy

1. Who we are

Inventara provides a warehouse inventory audit platform used by businesses to identify, verify and trace physical assets. This policy explains what data the platform handles and how it is used. If you use Inventara through your employer or a client organisation, that organisation controls the audit data and this policy describes how we process it on their behalf.

Trading name and legal entity. Inventara.co.uk is a trading name of Magenco Ltd (Company No. 09844013), registered in England and Wales. Registered office: 1096 Uxbridge Road, Hayes, England, UB4 8QH. Magenco Ltd is the data controller responsible for your personal data when you use the platform.

2. Data we collect

• Account data — name, email address, role and the projects you are assigned to.
• Audit data — Audit IDs, product and catalogue details, condition and completeness grades, locations, timestamps and the user who recorded each entry.
• Photo evidence — images captured during a scan, stored against the relevant audit record.
• Technical data — log and diagnostic information generated when you use the platform, such as sign-in events and sync activity.

3. How we use data

Data is used to operate the platform: authenticating users, generating and validating Audit IDs, recording inventory, producing reconciliation and inventory reports, resolving exceptions, and maintaining an audit trail of who changed what and when. We do not sell personal data and we do not use audit content for advertising.

4. Storage and access

Data is stored in managed cloud infrastructure. Access is restricted by role and project assignment, so users see only the projects they are assigned to. Client portal users receive read-only access to reports for their own projects.

5. Retention

We keep personal data only as long as needed for the purposes set out above:

• Account data — retained while the account is active, then deleted 90 days after deactivation.
• Audit and inventory records — retained for the active lifetime of the owning project, then for 7 years after the project is closed, after which they are deleted.
• Photo evidence — deleted 90 days after a project is reconciled and closed.
• Technical logs — retained for up to 12 months.

6. Sharing and subprocessors

We share data with service providers that host and operate the platform on our behalf, and where we are required to do so by law. Audit data is shared with the client organisation that owns the project. We use the following subprocessors:

• Lovable Cloud (Supabase) — hosting, authentication, database and file storage for account and audit data.
• Google — Vision OCR for product extraction from scanned images and Search Console for site indexing.
• jsPDF — client-side PDF generation for reconciliation and inventory reports (runs in your browser; no data leaves the platform).

7. Your rights

Depending on where you live, you may have rights to access, correct, export or delete personal data we hold about you, or to object to certain processing. If your account was created by an employer or client organisation, please contact them first; we will support their request. You can also contact us directly using the details below.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.

9. Contact

Questions about this policy or your data can be sent to privacy@inventara.co.uk, or by post to Magenco Ltd, 1096 Uxbridge Road, Hayes, England, UB4 8QH.