INURO LEGAL
Privacy Policy
1. Who we are
Inuro is owned and operated by RV Ventures AS, Org. no. 938 218 641, Norway, support@inuro.app. RV Ventures AS is the data controller for the personal data described in this Policy. A non-residential public business address will be inserted before final publication.
2. The short version
Inuro is designed to require relatively little personal data. Projects created using Inuro Free are stored locally by default and are not automatically uploaded merely because they are created or edited. RV Ventures AS does not analyze private projects to study how users create, does not use creative work to build advertising profiles, does not sell personal data, and does not use projects or creative content to train AI models without a separate appropriate legal basis. Inuro currently does not use third-party behavioral analytics such as Google Analytics or Meta Pixel.
3. Account information
Account processing may include email address, display name, unique account identifier, account timestamps, verification status, authentication information, current plan/entitlement and security events. Purpose: creating, maintaining and securing accounts. Legal basis: GDPR Article 6(1)(b) where necessary to provide the requested service and Article 6(1)(f) for security and administration where applicable.
4. Projects and creative content
Ordinary Free projects, project-library information, snapshots, Assets and Brand Profiles may be stored locally in the browser/device. RV Ventures AS generally cannot access or recover such local information. Try Inuro (Guest)-to-account transfer is an exception: the current Try Inuro project may be temporarily transferred to the backend solely to preserve it during account creation. After successful restoration locally, the server copy is deleted. If transfer is not completed, the temporary copy is automatically deleted after its 24-hour transfer period. Legal basis: Article 6(1)(b) GDPR.
5. Authentication and security
Inuro uses Supabase for authentication and related backend services. Processing may include login/logout/signup/verification/password-reset/email-change/session events, request information, timestamps, account identifiers, IP/network information, security and error information. The primary Inuro Supabase project is hosted in Ireland, AWS eu-west-1. Purpose: authentication, account operation, security, abuse prevention and troubleshooting.
6. Transactional email
Inuro uses Resend for transactional account email, including verification, password resets, email changes and security notifications. Resend stores relevant customer data in the United States. Processing may include email address, message content and technical delivery information. Transactional messages are service communications rather than optional marketing. International transfers and safeguards are described in Section 13.
7. Cloudflare
Inuro uses Cloudflare to deliver and protect its websites and web application. Cloudflare may process IP addresses, routing information, browser/device information, request information, security information and timestamps. Cloudflare Web Analytics / RUM is disabled for Inuro, and RV Ventures AS does not currently have Cloudflare Log Explorer, Logpush or Turnstile configured for Inuro. Cloudflare nevertheless processes technical information necessary to operate its global infrastructure.
8. Browser storage and public-site session state
Inuro uses browser-side storage such as localStorage, sessionStorage, IndexedDB, browser file-system functionality where supported, cookies and other storage necessary to provide requested application functionality. This may store local projects, snapshots, Project Manager information, Assets, Brand Profiles, interface preferences, authentication-session persistence, Stay logged in state, temporary signup/account-recovery state and Try Inuro (Guest)-transfer information. Inuro may also use limited first-party session and plan indicators across its own inuro.app subdomains so the public website can present appropriate account controls and plan-relevant content to a signed-in user. These indicators are used for interface presentation and do not themselves grant access to paid functionality; authoritative authentication and entitlement checks remain within Inuro’s account/backend systems. These technologies are primarily used for requested functionality rather than cross-site tracking. Inuro does not currently use advertising or behavioral-analytics cookies.
9–11. Product development, AI and advertising
RV Ventures AS does not currently use behavioral analytics to monitor how users create inside Inuro. Product development may instead use voluntary feedback, support conversations, surveys, polls, community discussions and feature requests. Inuro Free v1.0 does not use locally stored creative work to train AI models. Future AI functionality that transmits user-selected content will require updated transparency. Advertising may be introduced in the future, but any consent, tracking, profiling or disclosure requirements will be assessed before deployment. Advertising does not authorize inspection of private projects.
12. Service providers
Principal current providers include Supabase for authentication/backend and temporary Try Inuro (Guest) transfer, Cloudflare for delivery/infrastructure/security, and Resend for transactional email. Providers may use authorized subprocessors. RV Ventures AS does not sell personal data. Information may be disclosed where required by law, necessary to establish or defend legal claims, or necessary to protect users, RV Ventures AS or Inuro security.
13. International processing and transfers
The primary Inuro Supabase project is hosted in Ireland (AWS eu-west-1). Cloudflare operates a global network and may process technical network and security information outside Norway or the EEA. Resend stores relevant customer data in the United States and may use subprocessors. Where GDPR requires safeguards for transfers outside the EEA, RV Ventures AS uses or relies upon an appropriate mechanism such as an adequacy decision, European Commission Standard Contractual Clauses, or another permitted mechanism. Supabase, Cloudflare and Resend provide contractual arrangements addressing applicable international transfer requirements, including SCCs where relevant.
14–15. Retention and account deletion
Personal data is retained only as long as reasonably necessary, subject to legal requirements. Account information is generally retained while the account exists. Temporary Try Inuro (Guest) transfers are deleted after successful transfer or automatically after the 24-hour period if incomplete. Transactional email and infrastructure/security information may be retained according to provider configurations and operational needs. Locally stored projects are controlled by browser/device storage. Account deletion does not automatically delete local projects, and clearing local browser data does not necessarily delete an account.
16. Licensing and entitlement information
Inuro may process account ID, current plan, resource IDs, dependencies, required entitlement, timestamps, cryptographic signatures/hashes and technical licence records to provide licensed functionality, enforce entitlements, prevent abuse and establish export licensing status. Entitlement verification is designed not to require inspection of the visual content of private projects. Provenance information may also be associated with User Assets, Brand Profiles and other reusable resources.
17–23. Rights, complaints, younger users, automation, security and changes
Users may have GDPR rights of access, correction, deletion, restriction, objection, portability and withdrawal of consent where applicable, and may complain to a competent authority including Datatilsynet in Norway. Inuro accounts are intended for users aged 13 or older and ordinary registration does not require date of birth. RV Ventures AS does not currently use personal data for solely automated decisions producing legal or similarly significant effects. Reasonable technical and organizational security measures are used, although no internet service can guarantee absolute security. The Policy may be updated as services, providers, processing or law change, with additional notice or consent where legally required. Contact: support@inuro.app.