Last updated August 8, 2026
Controller and contact
Invarra operates this public website and is responsible for the personal information it processes through the site. For privacy requests, legal notices, or security reports, contact [email protected].
What the website processes
The public site does not create user accounts, sell personal information, configure advertising trackers, or intentionally set non-essential cookies.
If you email Invarra or use the contact form, we process the information you choose to send, including contact details, company, system context, timeline, and message. The form transmits the inquiry to Invarra through our security and email-delivery providers.
The site records four first-party funnel events: landing_view, pilot_cta_clicked, pilot_form_started, and pilot_form_submitted. Each record is limited to a random event and session reference, event name, normalized page route, language, fixed source and campaign labels, action or outcome class, and server time. It does not contain prompt text, form content, full URLs, arbitrary referral data, an advertising identifier, or a device fingerprint.
Links from invarra.ai to Phalanx vs the World include fixed source and campaign labels so the arena can identify the website handoff. Website and arena records use purpose-separated pseudonyms and are not joined to infer unique people. The arena is a separate service with its own privacy notice and operational records.
Hosting, DNS, security, and email providers may process standard technical data such as IP address, request time, requested URL, browser metadata, and security logs.
How information is used
Inquiry information is used to respond, evaluate engagement fit, schedule follow-up, maintain business records, and protect the site from misuse. Technical logs support security, debugging, availability, performance, and incident investigation.
Legal bases
Where EU or UK data protection law applies, Invarra relies on legitimate interests for website security and business inquiries, pre-contractual steps when services are requested, consent for optional information, and legal obligations where records must be preserved.
Sharing and processors
Invarra may use providers for hosting, DNS, security, email, business operations, and professional advice. Information may also be disclosed where required by law, legal process, security investigation, or protection of rights and users.
Retention
Inquiry emails and business records are retained only as long as needed for the relationship, legal obligations, dispute prevention, security, and ordinary administration. First-party funnel events are deleted after 90 days. Technical security logs follow their separately defined operational retention periods.
Cookies and analytics
The first-party funnel uses a random reference in browser session storage to deduplicate events. It does not intentionally set a non-essential cookie or use advertising pixels, cross-site behavioral tracking, device fingerprinting, or unique-person inference. Invarra will update this notice and add appropriate consent controls before activating non-essential tracking.
International processing
Hosting, DNS, security, and email providers may process data outside your country. Where required, Invarra relies on appropriate contractual, technical, and organizational safeguards.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, port, or object to processing of personal information, withdraw consent, and complain to a data protection authority. Contact [email protected] to make a request.
Sensitive information
Do not send credentials, regulated data, private corpora, sensitive model output, confidential client material, or business secrets through the public contact flow unless Invarra has agreed in writing to an approved channel.
Changes
Invarra may update this policy as the website, services, providers, or legal requirements change. The updated version will appear here with a revised date.