Privacy Policy

The controller under the GDPR is Invariance, an Italian sole trader (ditta individuale) owned by Philipp Gurndin, based in Bolzano, Italy.

Address: Via Max Valier 20 int. 012, 39100 Bolzano (BZ), Italy

Contact: support@invariance.co

This is the most important point in this document. Transcripts and dictation history are stored locally on your own computer, not on our servers. We cannot read them.

When you dictate, the audio is sent to a speech recognition provider for the moment it takes to transcribe it, and the resulting text may be sent to a language model for clean-up. We do not retain that audio or text.

Account data — your email address, your name if you give one, and account identifiers. Used to create and secure your account.

Billing data — handled by our payment provider. We never see or store your card details.

Usage metering — a weekly word count per user and your subscription status, stored in a PostgreSQL database on our own server in the EU. That, plus an account identifier, is the whole of what we hold server-side. It is deliberately minimal.

Support correspondence — if you email us, we keep the message so we can answer it.

Performance of a contract (Art. 6(1)(b)) — running your account, delivering the app, transcribing your dictation, and billing you.

Legal obligation (Art. 6(1)(c)) — retaining invoices and billing records as Italian tax law requires.

Legitimate interests (Art. 6(1)(f)) — metering usage against plan limits and preventing abuse of the service.

Consent (Art. 6(1)(a)) — where we ask for it, for anything optional. You can withdraw consent at any time.

Clerk — authentication. Receives your email address, name and account identifiers.

Paddle.com Market Ltd — merchant of record. Handles payment and billing data. We never see or store card details.

Groq, Deepgram, OpenAI and xAI — speech recognition and text post-processing. They receive dictated audio and/or the resulting text at the moment of use.

We do not sell your data and we do not share it with anyone not listed here.

Some of these providers process data outside the European Economic Area, chiefly in the United States. Where that happens, the transfer is covered by the European Commission’s Standard Contractual Clauses together with the provider’s own safeguards. Our own database is hosted in the EU.

Account data — for as long as your account exists, then deleted.

Billing records — ten years, as required by Italian law (art. 2220 Codice Civile).

Word counts — kept per week as an aggregate; no dictation content is attached.

Transcripts — we hold none, so there is nothing for us to delete. Removing them from your device is up to you.

You have the right to access your data, to have it corrected, to have it erased, to restrict how we process it, to receive it in a portable format, and to object to processing based on our legitimate interests.

To exercise any of these, email support@invariance.co. We answer within one month.

If you think we have handled your data wrongly, you can lodge a complaint with the Italian data protection authority: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy.

Necessary — Clerk sets cookies to keep you signed in, and the site itself stores your light/dark theme preference. These load on every page.

Paddle, and only if you accept — Paddle connects from your browser to show localized pricing and to process payment. It is not loaded until you accept the cookie banner. Decline, or simply do not answer, and Paddle is never contacted: the pricing page shows our EUR list prices, taken from our own server, instead of Paddle’s localized ones. Paying does require accepting, because Paddle is the payment processor and there is no checkout without it — the checkout page says so rather than failing silently.

Paddle Retain (ProfitWell) — Paddle bundles a feature called Retain (built on ProfitWell), aimed at reducing subscription cancellations, which runs automatically whenever Paddle loads. We do not configure or query it ourselves; it comes with Paddle. It is covered by the same choice: decline and it never loads. Beyond that, there is no advertising and no cross-site tracking either way.

The cookie banner on every page is where that choice is made, and the small control it leaves behind lets you reopen it and change your mind at any time.

If we change this policy we will update the date at the top. Significant changes will be announced to account holders by email.

Questions about privacy go to support@invariance.co. A person answers.