Privacy Policy for Invoko

Last Updated: March 27, 2026

1. Introduction

Invoko ("Invoko", "we", "us", or "our") is a voice-first, screen-aware desktop assistant. This Privacy Policy describes how we collect, use, store, and protect personal information when you use the Invoko desktop application and website (collectively, the "Service").

By downloading, installing, or using Invoko, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

Our core principles: transparency, user control, and minimal data collection. Invoko is designed to support your work quietly — and our data practices reflect the same philosophy.

2. Information We Collect

2.1 Account & Identity Information

When you create an Invoko account, we collect:

• Email address
• Name (if provided via Google or Apple Sign-In)
• Authentication tokens and session identifiers
• Account preferences and settings

You may sign up using your email address or Google account. When you use a third-party sign-in method, we receive only the information that provider shares with us based on your authorization.

2.2 Voice Input & Transcription

Invoko is a voice-first assistant. When you activate Invoko via push-to-talk, hotkey, or another explicit trigger, your voice input is captured and processed.

• Voice recordings are not retained. Audio is streamed in real time solely to generate transcriptions or perform your requested actions.
• Transcribed text may be processed transiently to fulfill a request and may be stored as part of user-visible outputs (such as assistant responses, drafts, or task history) if you choose to save them.
• Invoko doesn't listen passively. It activates only on your explicit command — push-to-talk, hotkey, or other explicit options you configure.

2.3 Screen Awareness Data

When you enable screen awareness, Invoko may temporarily read or capture screen content to understand context and assist you more effectively.

• Screen data is processed only in memory and is not stored on our servers.
• Screenshots or screen captures are discarded immediately after use.
• Screen awareness is never active without your explicit permission.
• You can disable screen awareness at any time; Invoko continues to work in voice-only mode.
• Screen data is never used to train AI models.

You can always see what Invoko is using and what it is doing: listening, reading, working, or done. You can change what is in scope at any time.

2.4 Task History & Assistant Content

When you use Invoko's assistant features, we may store user-visible content generated within the app, including:

• Assistant responses and generated text
• Task results, summaries, and conversation threads
• Files or snippets you drag into Invoko for processing

You decide what gets saved, exported, or kept as history. Content is retained until you delete it or close your account.

2.5 Payment Information

Invoko uses Stripe to process payments for paid subscription plans. We do not store your credit card number, CVV, or full payment details on our servers. Stripe handles all payment data in accordance with PCI-DSS standards. We receive only limited billing metadata (e.g., last four digits of card, billing country, subscription status) necessary to manage your account.

2.6 Usage & Diagnostic Data

We collect limited operational data to maintain and improve the Service. On the desktop app, this data is collected in two layers:

• Core diagnostics: crash reports, limited error diagnostics, low-sample performance telemetry, app hang data, and device/application metadata such as OS version, app version, release channel, and environment
• Optional diagnostics and usage data: sanitized runtime diagnostics and coarse feature outcome analytics that help us investigate failures and understand whether key features are working reliably

Optional diagnostics and usage data may include:

• Sanitized feature outcome events, such as whether an agent task or voice turn completed successfully
• Coarse operational measurements, such as task duration, first-token latency, tool-call counts, artifact counts, or similar reliability metrics
• Sanitized error codes, error stages, execution modes, and related runtime context

Our diagnostics systems are designed not to include the contents of your voice inputs, screenshots, screen captures, full task transcripts, raw prompts, or default personal identifiers. We also disable screenshot and view-hierarchy capture in our desktop error-monitoring setup.

3. How We Use Information

We use the information we collect only for the following purposes:

Invoko does not use your data for advertising, behavioral profiling, or any purpose beyond what is described above.

4. Data Processing and Storage

4.1 AI Processing

Invoko uses AI models provided by OpenAI, Anthropic, or similar providers to power its voice understanding, task execution, and assistant capabilities. When you interact with Invoko, relevant portions of your input (such as transcribed voice text or task context) may be sent to these providers' APIs for processing.

• AI providers process your input solely to generate a response and do not use it to train their models under our agreements.
• We do not use your data to train AI models.
• Inputs sent to AI providers are subject to their respective privacy policies and data processing agreements.
• We select AI providers that maintain strong data protection standards and enterprise-grade data handling commitments.

4.2 Data Retention

4.3 Data Security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS) and access controls to protect your information from unauthorized access, alteration, or destruction.

5. Data Sharing & Disclosure

We never sell your personal data to third parties. We share information only in the following limited circumstances:

5.1 Service Providers

We work with trusted third-party service providers who process data on our behalf under strict data processing agreements:

• AI Service Providers: To process voice and task processing (e.g., OpenAI, Anthropic, or similar)
• Cloud Infrastructure: For hosting and data processing (e.g., AWS, Google Cloud)
• Diagnostics and Analytics Providers: For crash reporting, performance monitoring, and optional sanitized diagnostics and usage telemetry

5.2 Legal Requirements

We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Invoko, our users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website prior to your data being transferred and becoming subject to a different privacy policy.

6. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

6.1 Universal Rights

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data and account
• Portability: Request your data in a structured, machine-readable format
• Restriction: Request that we limit how we process your data
• Objection: Object to processing based on legitimate interests

6.2 In-App Controls

• Toggle screen awareness on or off at any time
• Choose your activation method (push-to-talk, hotkey, or other)
• Turn optional diagnostic and usage sharing on or off in desktop app settings
• Delete individual task history items or all history
• Export your data before account deletion
• Close your account and request full data deletion

Core crash diagnostics and limited reliability-oriented performance telemetry are collected by default to help us keep the desktop app stable. Optional diagnostic and usage sharing can be disabled in Settings.

7. Children's Privacy

Invoko is not intended for use by children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 16.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us at privacy@invoko.app. If we learn that we have collected personal data from a child under 16 without proper parental consent, we will take steps to delete that information promptly.

8. International Data Transfers

By using the Service, you acknowledge that your information may be transferred to and processed in countries other than your own, which may have different data protection laws. We ensure that any international transfer of personal data is subject to appropriate safeguards.

9. CCPA (California Residents)

If you are a California resident, you have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise your rights, contact us at the email below.

10. GDPR (EEA / UK Users)

If you are located in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority. Where we rely on legitimate interests as a legal basis, you have the right to object to that process.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Effective Date" at the top of this page
• Notify you via email (for material changes) or an in-app notice
• Provide a summary of what has changed

Your continued use of Invoko after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: legal@invoko.ai

Address: 60 Paya Lebar Road, #06-28, Paya Lebar Square, Singapore 409051

We aim to respond to all privacy-related inquiries within 30 days of receipt.