Privacy Notice
Last updated: July 7, 2026
This Privacy Notice explains how Invictus ("Invictus", "we", "us", or "our"), operator of the CommercialIQ service (the "Service"), collects, uses, shares, and protects personal data. Invictus is the data controller for personal data processed in connection with the Service. Contact us at privacy@commercialiq.lovable.app.
1. Personal data we collect
- Account data: name, email address, login credentials, and profile settings.
- Customer content: deals, portfolios, notes, and other information you submit.
- Support data: messages, attachments, and metadata from support requests.
- Usage and telemetry: pages viewed, features used, device identifiers, IP address, browser type, and diagnostic logs.
- Cookies: essential cookies for authentication and session management, plus limited analytics cookies (see Section 8).
2. Purposes and legal bases
- Providing the Service (contract): creating your account, delivering features, storing your content.
- Security and fraud prevention (legitimate interests / legal obligation): monitoring for abuse, protecting accounts.
- Product improvement (legitimate interests): understanding usage patterns to improve features.
- Customer support (contract / legitimate interests): responding to requests.
- Marketing (consent, where required): sending product updates you opt into.
- Legal compliance (legal obligation): meeting tax, accounting, and regulatory requirements.
3. Data sharing and recipients
We share personal data with:
- Service providers / subprocessors: cloud hosting, database, analytics, email delivery, and support tooling that operate on our behalf.
- Merchant of Record (Paddle): Paddle.com Market Ltd acts as our reseller and Merchant of Record for all purchases and handles payment processing, subscription management, invoicing, tax compliance, refunds, and related customer service.
- Professional advisers: legal, accounting, and audit professionals under duties of confidentiality.
- Authorities: where required by law, court order, or to protect rights, safety, or property.
We do not sell personal data.
4. International transfers
Where personal data is transferred outside your jurisdiction (including the UK/EEA), we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
5. Data retention
We retain personal data only as long as needed for the purposes described above, to comply with our legal obligations, resolve disputes, and enforce our agreements. When no longer needed, data is deleted or anonymised. You can request deletion at any time (see Section 7).
6. Security
We implement appropriate technical and organisational measures — including encryption in transit, access controls, and monitoring — to protect personal data. No system is perfectly secure, and we cannot guarantee absolute security.
7. Your rights
Depending on where you live, you may have the right to:
- Access, rectify, or erase your personal data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with your supervisory authority
To exercise these rights, email privacy@commercialiq.lovable.app. We aim to respond within one month.
8. Cookies
We use essential cookies for authentication and session management. We may also use limited analytics cookies to understand usage. You can control cookies through your browser settings; disabling essential cookies may impair the Service.
9. Changes
We may update this Privacy Notice from time to time. Material changes will be notified via the Service or by email.
10. Contact
Invictus — privacy@commercialiq.lovable.app