Privacy Policy

Last updated: July 22, 2026

This Privacy Policy explains how NVLND Entertainment, LLC (“NVLND Entertainment,” “we,” “us,” or “our”) collects, uses, and shares information in connection with Invisible (the “Service”), an application that helps you find opportunities within your existing professional and personal network. By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

Account information

Your name, email address, and password (managed by our authentication provider, Supabase — we never see your password in plain text), and any profile details you provide.

Google Account data (Gmail)

When you connect a Gmail account, we request the following Google API scopes:

• gmail.readonly— to read your email metadata and content. We use this solely to (a) identify people you have exchanged email with, in order to build your contact list, (b) analyze a sample of your past sent messages to learn your writing style, (c) display message history on a contact's page inside the Service, and (d) generate AI-written relationship summaries and outreach drafts.
• gmail.send and gmail.compose— used only when you explicitly click “Send” or save a draft inside Invisible, to send or draft an email from your own address, containing content you have reviewed.

We do not use Gmail data for advertising, and we do not sell it.

Microsoft Account data (Outlook)

When you connect an Outlook or Microsoft 365 account, we request the Microsoft Graph Mail.Read, Mail.Send, and User.Read scopes, used for the same purposes described above for Gmail.

Contact and relationship data

Names, email addresses, companies, roles, how you met, relationship strength, notes, and any “contexts” you define — derived automatically from your connected mailboxes or entered by you directly, including via voice dictation. Voice dictation is transcribed by your browser's built-in speech recognition; we receive only the resulting text, never an audio recording.

Goals

Free-text descriptions of what you're looking for (an introduction, a client, a collaborator, etc.), used to generate matching opportunities.

Payment information

Billing is handled entirely by Stripe. We receive a customer/subscription identifier and status, never your full card number.

Usage data

Feature usage, credit consumption, log data, and basic device/browser information, collected automatically to operate and secure the Service.

2. How We Use Information

• To provide the core Service: importing and deduplicating contacts, generating opportunities, drafting outreach emails, generating relationship notes, and mirroring your writing style.
• To operate your account: authentication, billing, and customer support.
• To maintain, secure, and improve the Service.
• To communicate with you about your account or the Service.

3. AI Processing (Anthropic)

Invisible uses Anthropic's Claude API to power its AI features. When you use a feature such as opportunity generation, draft-email writing, contact enrichment, or writing-style analysis, relevant data — which may include contact notes, snippets of past email content, and your stated goals — is sent to Anthropic's API for processing, and a response is returned to you. Anthropic processes this data as our service provider, solely to generate the output you requested, and, per Anthropic's API terms, does not use data submitted through its API to train its models. We do not send your Google or Microsoft data to Anthropic for any purpose other than generating the specific output you requested inside the Service.

4. Other Service Providers

We share information with the following service providers, solely to operate the Service on our behalf:

• Supabase — database hosting and authentication.
• Vercel — application hosting.
• Stripe — payment processing.
• Anthropic — AI processing, as described above.
• Google / Microsoft — OAuth authentication and the mail data described above, only for accounts you explicitly connect.

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.

5. Google API Services User Data Policy

Invisible's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail data to serve advertisements. We do not permit humans to read Gmail data except: (a) with your affirmative consent, for a specific issue such as a support request; (b) where necessary for security purposes, such as investigating abuse; (c) to comply with applicable law; or (d) where the data has been aggregated and anonymized.

6. Data Retention

• We retain your account and contact data for as long as your account is active.
• Disconnecting a Gmail or Outlook account from Settings immediately deletes the stored access and refresh tokens for that account and stops any further access to it. Contacts and notes already imported are not automatically deleted when you disconnect — contact us if you'd like them removed.
• File attachments you send through the composer are never stored by us — they are held in your browser only long enough to hand off to Gmail or Outlook's API, then discarded.
• We do not currently offer self-service account deletion. To delete your account and associated data, email us at the address below.

7. Your Rights and Choices

• Disconnect any Gmail or Outlook account at any time from Settings.
• Independently revoke Invisible's access directly from your Google Account (myaccount.google.com/permissions) or your Microsoft account's app permissions — this works even if you don't use Invisible's own disconnect button.
• Request access to, correction of, export of, or deletion of your data by contacting us.

If you are located in the European Economic Area, United Kingdom, or California, you may have additional rights under applicable law (such as the GDPR or CCPA), including the right to request a copy of your data or object to certain processing. Contact us to exercise these rights.

8. Security

We use reasonable technical and organizational measures to protect your information, including encryption of data in transit and access controls on our systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

10. International Users

Our service providers may store and process information in the United States and other countries. By using the Service, you consent to this transfer, storage, and processing.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above, and for material changes we will provide additional notice (such as an in-app notice or an email).

12. Contact Us

Questions about this Privacy Policy, or requests regarding your data, can be sent to team@nvrlnd.us.