Privacy Policy
Last updated: April 2026 · Effective immediately
A quick note before you read: We're an AI company. That means data — how it moves, how it's used, how it's protected — is something we think about deeply, not just legally. We collect data to build better products and understand how people use our website. We do not sell it, share it with third parties for their gain, or use it in ways we haven't told you about. Your data stays with us.
Who we are
Inventokit is a digital engineering and AI consulting firm based in Karachi, Pakistan. We build AI-powered products and systems for clients across Pakistan, the GCC, UK, and US.
When this policy says "we," "us," or "Inventokit," that's who we mean. Questions? Email us at hello@inventokit.com.
What we collect
As an AI company, we use data to improve how our website works, understand what potential clients are looking for, and build better services. Here's everything we collect — nothing hidden.
What you give us directly:
When you use our contact form, we receive your first name, last name, email address, phone number, company name, country, and your message. We use this only to respond to you. If a project follows, that information becomes part of the project record.
Website usage data:
We collect anonymous data about how people use our website — which pages were visited, how long visitors stayed, what device and browser they used, and which country the visit came from. None of this identifies you as an individual. We use it to understand what's working and what needs to improve.
Third-party tools
We use one analytics tool to understand and improve our website:
Google Analytics 4:
Tracks anonymous website usage — page views, session duration, country of visit, device type, and traffic sources. Data is processed under Google's privacy policy. No personal information is shared for marketing purposes.
Opt out: tools.google.com/dlpage/gaoptout
What we do not do
We want to be direct about this, especially as an AI company where trust matters:
• We do not sell your data — ever, to anyone
• We do not share your personal information with third parties for their marketing
• We do not use your data to train AI models without your explicit knowledge and consent
• We do not build individual profiles on website visitors
• We do not send unsolicited emails or newsletters unless you opted in
• We do not use session recording tools that capture your screen or keystrokes
Who sees your data
Only the Inventokit team. We do not share, sell, or otherwise distribute your personal information to third parties except where required by law or with your explicit consent.
If you've submitted information through our contact form, it's stored securely and accessed only by team members who need it to respond to your enquiry or work on your project.
Your rights
You have the right to:
• Request access to the personal data we hold about you
• Request correction of any inaccurate data
• Request deletion of your data
• Withdraw consent for analytics tracking at any time
To exercise any of these rights, email us at hello@inventokit.com. We'll respond within 30 days.
Regional compliance (EU, UK, UAE)
We work with clients across the EU, UK, GCC, and US, so we apply the strictest reasonable standard regardless of where you visit from.
GDPR (EU) and UK GDPR:
If you're in the European Economic Area or the United Kingdom, you have additional rights including data portability and the right to lodge a complaint with your local supervisory authority. We do not place non-essential cookies until you grant explicit consent via our cookie banner.
UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021):
If you're a UAE resident, this notice serves as our privacy notice under the PDPL. Our lawful basis for processing analytics data is your consent. For contact form submissions, our basis is performance of a contract or our legitimate interest in responding to your enquiry.
Pakistan (PDPA — draft):
We operate from Pakistan and apply the practices above as our default standard pending finalisation of Pakistan's Personal Data Protection Act.
Data transfers:
Google Analytics 4 may process data in the United States and the EU. Google relies on Standard Contractual Clauses (SCCs) for international transfers. No personal contact data is transferred outside Pakistan without contractual safeguards.
Changes to this policy
We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. For significant changes, we'll make reasonable efforts to notify you.
Last updated: April 2026
Who we are
Inventokit is a digital engineering and AI consulting firm based in Karachi, Pakistan. We build AI-powered products and systems for clients across Pakistan, the GCC, UK, and US.
When this policy says "we," "us," or "Inventokit," that's who we mean. Questions? Email us at hello@inventokit.com.
What we collect
As an AI company, we use data to improve how our website works, understand what potential clients are looking for, and build better services. Here's everything we collect — nothing hidden.
What you give us directly:
When you use our contact form, we receive your first name, last name, email address, phone number, company name, country, and your message. We use this only to respond to you. If a project follows, that information becomes part of the project record.
Website usage data:
We collect anonymous data about how people use our website — which pages were visited, how long visitors stayed, what device and browser they used, and which country the visit came from. None of this identifies you as an individual. We use it to understand what's working and what needs to improve.
Third-party tools
We use one analytics tool to understand and improve our website:
Google Analytics 4:
Tracks anonymous website usage — page views, session duration, country of visit, device type, and traffic sources. Data is processed under Google's privacy policy. No personal information is shared for marketing purposes.
Opt out: tools.google.com/dlpage/gaoptout
What we do not do
We want to be direct about this, especially as an AI company where trust matters:
• We do not sell your data — ever, to anyone
• We do not share your personal information with third parties for their marketing
• We do not use your data to train AI models without your explicit knowledge and consent
• We do not build individual profiles on website visitors
• We do not send unsolicited emails or newsletters unless you opted in
• We do not use session recording tools that capture your screen or keystrokes
Who sees your data
Only the Inventokit team. We do not share, sell, or otherwise distribute your personal information to third parties except where required by law or with your explicit consent.
If you've submitted information through our contact form, it's stored securely and accessed only by team members who need it to respond to your enquiry or work on your project.
Your rights
You have the right to:
• Request access to the personal data we hold about you
• Request correction of any inaccurate data
• Request deletion of your data
• Withdraw consent for analytics tracking at any time
To exercise any of these rights, email us at hello@inventokit.com. We'll respond within 30 days.
Regional compliance (EU, UK, UAE)
We work with clients across the EU, UK, GCC, and US, so we apply the strictest reasonable standard regardless of where you visit from.
GDPR (EU) and UK GDPR:
If you're in the European Economic Area or the United Kingdom, you have additional rights including data portability and the right to lodge a complaint with your local supervisory authority. We do not place non-essential cookies until you grant explicit consent via our cookie banner.
UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021):
If you're a UAE resident, this notice serves as our privacy notice under the PDPL. Our lawful basis for processing analytics data is your consent. For contact form submissions, our basis is performance of a contract or our legitimate interest in responding to your enquiry.
Pakistan (PDPA — draft):
We operate from Pakistan and apply the practices above as our default standard pending finalisation of Pakistan's Personal Data Protection Act.
Data transfers:
Google Analytics 4 may process data in the United States and the EU. Google relies on Standard Contractual Clauses (SCCs) for international transfers. No personal contact data is transferred outside Pakistan without contractual safeguards.
Changes to this policy
We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. For significant changes, we'll make reasonable efforts to notify you.
Last updated: April 2026