Last updated: 9 May 2026
1. Who we are
Invento AI Ltd is a company registered in England and Wales. We are the data controller for personal data collected through our website and our inventory product. You can reach our team at ops@heybruno.ai.
2. Personal data we collect
- Account data - name, work email, company, professional role, number of properties managed.
- Inventory data - voice transcripts, photos, video frames, GPS coordinates, timestamps, and tenant signatures captured during a check-in, check-out, or interim inspection.
- Tenancy metadata - property addresses, tenancy dates, parties to the tenancy.
- Usage data - IP address, device, browser, pages viewed, errors, and feature interactions.
3. How we use it
- To provide and improve the inventory product and reports.
- To produce court-ready evidence for deposit adjudication at TDS, DPS and MyDeposits.
- To communicate about your account, security, and product updates.
- To meet our legal, accounting, and compliance obligations.
4. Lawful bases
We rely on (i) contract to deliver the service you sign up for, (ii) legitimate interests to operate and improve the product and prevent fraud, and (iii) legal obligation for tax, accounting, and statutory records.
5. Storage and security
Inventory data and account data are stored on UK and EEA servers with AES-256 at rest and TLS 1.2+ in transit. Access is role-based, audit logged, and limited to staff with a business need. We never sell personal data and do not use inventory content for advertising.
6. Sharing
We share data only with the parties to a tenancy (the landlord, agent, and tenant), with adjudication providers when a report is submitted to them, and with vetted sub-processors that help us run the service (cloud hosting, email delivery, analytics). A current list is available on request.
7. Retention
Inventory reports are retained for the duration of the tenancy plus seven years, in line with HMRC and adjudication-evidence guidance. Account data is kept for as long as you have an account; usage logs for 13 months.
8. Your rights
You can request access, correction, deletion, restriction, portability, or to object to processing. Email ops@heybruno.aiwith your request. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.
9. Changes
We may update this policy from time to time. Material changes will be announced by email or in-product notice at least 14 days before they take effect.