Privacy Policy

Last updated September 26, 2026

Inventable (“Inventable”, “we”, “us”) is a workspace at inventable.ai that turns an idea into a working product and helps you launch it. This policy explains what we collect when you use inventable.ai and the Inventable app, why we collect it, who we share it with, and the choices you have.

What we collect

Your account

• Email and password. Your password is stored hashed by our authentication provider; we never see it.
• Google sign-in. If you sign in with Google, Google shares your name, email address and profile picture with us.
• Guest sessions. When you first open the app we create an anonymous account ID, so your work is saved before you sign up.

What you make

• Your prompts and messages, and what Inventable produces for you — plans, code, designs, images, posts and slideshows.
• Repositories you choose to bring in from GitHub.
• Sites you choose to deploy.

Payments

• Payments are handled by Stripe. We don’t see or store your full card number. We keep your Stripe customer ID, your plan and its status, your purchases, and how much of your plan you’ve used.

Apps and keys you connect

• Connected apps. If you connect an app such as GitHub, Gmail, Slack, LinkedIn, Instagram or Stripe, the connection is kept by us or by our integration provider, Composio. We only use it to do what you ask — for example opening a pull request, publishing a post you approved, or sending an email you approved. If you connect Gmail, we use it to send the emails you approve; we don’t read your inbox.
• API keys you add. They are encrypted (AES-256-GCM) before they are stored and are never shown back to anyone, including you. We check a key once with its provider when you add it.

Usage and technical information

• How much of your plan you’ve used, and whether each build compiled and ran — not what it contained.
• Standard logs kept by our hosting providers, such as IP address, browser type and the time of each request.
• Anything you send us when you contact us.

How we use it

• To run Inventable: sign you in, save your work, generate and run what you ask for, deploy what you publish, and act through the apps you connect.
• To bill you and apply your plan’s limits.
• To keep Inventable secure and prevent abuse, such as fraud and runaway usage.
• To make builds more reliable, using the build results described above.
• To send you a password-reset email when you ask for one, and to reply when you write to us.

We don’t sell your personal information, and we don’t use it for advertising.

AI processing

To answer a request, we send your prompt and the parts of your project it needs to an AI model provider — currently Anthropic (Claude) and Google (Gemini). They process it to return a result, under their own terms and privacy policies. If you add your own API key for a provider, requests you make with that key go to that provider.

AI output can be wrong or incomplete, so review it before you rely on it.

Who we share it with

We share information only with the service providers that run Inventable, and only as needed for them to do it:

• Supabase — accounts, sign-in and your project data
• Cloudflare — hosting for inventable.ai, our servers and databases, and the sites you deploy
• Anthropic and Google — AI models
• Stripe — payments and subscriptions
• Composio — connections to the apps you choose to connect
• Resend — password-reset emails
• GitHub — when you bring in a repository or open a pull request

We may also share information when the law requires it, to protect the rights and safety of our users or of Inventable, or as part of a merger or acquisition — in which case we’ll tell you before your information becomes subject to a different privacy policy.

What you publish is public

A site you deploy with Inventable goes live at a public address, and anyone with the link can see it. Posts you publish through connected apps are public on those services.

Google user data

If you sign in with Google, we request only your basic profile — name, email address and profile picture — and use it only to create your account and sign you in. We don’t use Google user data for advertising, we don’t sell it, and we don’t transfer it to anyone except as needed to provide Inventable or as required by law.

Inventable’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and browser storage

We use your browser’s storage to keep you signed in and to remember preferences such as your theme. We don’t use advertising cookies or third-party trackers. Stripe’s checkout pages set their own cookies, under Stripe’s policy.

How long we keep it

We keep your account and projects for as long as your account exists. When you ask us to delete your account, we delete it and your projects within 30 days, except records we must keep for legal, tax or accounting reasons, such as payment records. Copies in backups expire on their own schedule. Guest sessions that never become an account may be deleted after a period of inactivity.

Your choices and rights

• See, correct, export or delete your data: email support@inventable.ai from your account’s address.
• Disconnect apps any time in Connectors, and delete API keys in Keys.
• Cancel your plan any time from Plan & usage.

Depending on where you live — for example in the EU, the UK or California — you may have more rights over your information. We’ll honor requests as the law where you live requires.

Security

Everything travels over HTTPS, your projects are only accessible to your account, and API keys you store are encrypted. No system is perfectly secure, so if you think something is wrong, tell us right away.

Children

Inventable isn’t meant for children under 13, and we don’t knowingly collect their information. If you’re under 18, you need a parent’s or guardian’s permission to use Inventable and to buy a plan. If you believe a child under 13 has given us information, contact us and we’ll delete it.

Where information is processed

Our providers process information in the United States and other countries, which may have different data-protection laws from yours.

Changes to this policy

If we change this policy, we’ll post the new version here and update the date at the top. If a change is significant, we’ll also let account holders know.

Contact

Questions or requests: support@inventable.ai.