← Back to INVEDEX ONE

Privacy

Last updated 23 September 2026

What changed: how the app checks your subscription and looks for updates, changing plan and cancelling from inside the app, and recording when a subscription ended.

The short version: your inventory never reaches us. What we hold is the small amount needed to email you, bill you, and read the photographs you send — and this page says exactly what that is.

1. Who this is about

INVEDEX ONE is inventory software published by JNTH Media, LLC (“we”, “us”). This page covers two separate things: the website at invedexone.com, and the reading service the app talks to at read.invedexone.com. It also says plainly what the app on your own device does not send us.

2. What never leaves your own device

The app runs on your own device and keeps your records in your own account folder. The following are never transmitted to us, under any plan, at any time:

• Your ledger — products, packages, weights, prices, quantities, history.
• Your photographs, once read. They are kept in your own folder.
• Your store API keys for Wix, Square, Shopify, Squarespace, WooCommerce, Ecwid or BigCommerce. These stay on the device you typed them into and are not even synced between your own devices.
• Your customers and their orders.
• Your backups. They go to a folder you choose, on hardware you choose.

Your customers' details, if you make invoices. An order sheet holds the name, address, phone number and email you put on it. Like everything else in your ledger, it stays on your own devices: it syncs to the others you have set up, it is in every backup you take, and it comes out in an export. It is never sent to us, and we never see it. Deleting the sheet deletes it; voiding one keeps it, because a voided invoice is still a record of what that number was spent on.

3. What the website collects

The beta form

If you fill in the form on the front page we store what you typed: your email address and, where you gave them, your business name, what you sell, where you sell it, and whether your units vary in weight. We use it to contact you about the beta and to assemble a mix of businesses. It is not a mailing list, it is not sold, rented or shared, and nobody else is given it.

We then email the address a link, to check it is yours, and record the date if the link is used. So that the form cannot be used to flood somebody's inbox, we also keep a short record of the times it is sent: the address, when, whether we emailed it, and one-way codes made from the inbox it lands in, from its domain and from the link — never the link itself. Those records are deleted after 30 days. We are also emailed a copy of signups and confirmations (not all of them: past daily and short-term limits they are only in the database), so that we see them without opening the database.

The record is kept in a Cloudflare D1 database we control. Ask us to remove it and we will, without asking why, and we delete the copies of it in our own mailbox too. Resend, which sends those emails, keeps its own record of them for a limited time under its retention policy. The address comes out of those short records too; the one-way codes, the times and whether we emailed stay until their 30 days are up, so the limits on how often an inbox is emailed still apply.

Cookies and analytics

This website sets no cookies, runs no analytics and loads nothing from a third party — no fonts, no scripts, no tags, no embedded video. There is nothing here to opt out of, which is why you were not shown a banner.

Our host, Cloudflare, logs requests as part of serving and protecting the site. Those logs are Cloudflare's and are described in their own privacy documentation.

4. What the reading service collects

The app talks to read.invedexone.com when you ask it to read a photograph, sign in, check your subscription, or use the subscription panel in Setup — changing plan, asking what a change would cost, switching extra scans on or off, setting a spending cap, cancelling or keeping a subscription, subscribing again, or signing this device out.

A signed-in device also checks your subscription by itself when the app starts, about once a week while it is in use, around each renewal, and before it pauses anything. That check sends only that device’s sign-in token. Nothing about your inventory goes with it, and no record of who checked or when is kept against your account. At most a check makes us re-read your subscription from Stripe, no more than once a week, and we note when we last did that.

That service holds:

• Your email address, as the account.
• Your plan, billing period and status, when it renews and, if the subscription has ended, when it ended; any plan change or cancellation you have set and its date; whether extra scans are on, with when and at what rate you turned them on; and a Stripe customer and subscription reference.
• A count of INVEDEX Scans this period, how many were extra scans and what they came to, and the date of the last one. A count, not the pictures.
• One row per device you signed in from, holding a hash of that device's token, a label, the day it signed in, and when it was last used with the service. The token itself is never stored — only a one-way hash of it, so a copy of our database is not a set of working keys.
• A short-lived sign-in code, again as a hash, which expires.
• Any spending cap you set, the business name given at checkout, and any note we keep about the account.

Cloudflare, which runs the service, keeps short-lived request logs (up to 7 days).

The app also asks invedexone.com whether a newer version exists — when it starts, and at most once a day after that. Nothing about you or your inventory goes with the question.

Photographs sent to be read

A photograph you ask the app to read is sent to our service, passed to Anthropic's API to be interpreted, and the answer is returned to your own device. We do not store the photograph. It is held only in memory for the seconds the request takes. What we keep afterwards is that the count went up by one.

Anthropic processes the image as our sub-processor under their commercial terms. We do not send them your name, your business, or anything about your ledger — only the picture, the instruction to read it, and anything you type into the “Anything it should know” box on the Read screen, which is passed on word for word.

5. Payment

Payments are handled by Stripe. Card numbers are entered on Stripe's pages and never touch our service. We receive a customer reference, a subscription reference, its status and renewal date, when it ended if it has, and the details of plan changes you make in the app. Stripe's own privacy terms apply to what they hold.

6. Email

Sign-in codes and beta correspondence are sent through Resend, which handles delivery on our behalf and processes the address in order to deliver.

7. Who else touches your data

• Cloudflare — hosting, the database, and serving this site.
• Anthropic — reading photographs, in the moment, without retention by us.
• Stripe — payments and subscription status.
• Resend — sending email.
• Google Workspace — our own mailbox, which receives copies of beta signups and confirmations.

That is the whole list. There is no advertising network, no data broker and no analytics vendor in it.

8. How long we keep things

• Beta form entries — until the beta programme ends, or until you ask us to delete them; the copies in our mailbox go at the same time, and Resend's own record of those emails expires under its policy. The short record of each time the form was sent, 30 days.
• Account records — while the account exists, and afterwards only as long as tax and accounting rules require.
• Sign-in codes — minutes. They expire and are swept.
• Photographs — not kept at all.

9. What you can ask for

Write to [email protected] and ask for a copy of what we hold about you, a correction, or deletion. We will act on it. If you are in a place that gives you statutory rights over your personal data — the UK, the EEA, California and others — those rights apply and this is how to use them.

Deleting your account with us does not touch your ledger, because we never had it. It stays on your own device whatever happens here.

10. Children

This is business software. It is not directed at children and we do not knowingly collect anything from them.

11. Changes

If this page changes materially we will say so on the site and, for account holders, by email. The date at the top always reflects the current version.

12. Contact

[email protected]
1595 Orchard Rd
Bowie, TX 76230