Legal

Privacy Policy

How InnovaAI collects, uses, and protects your information

InnovaAI's Privacy Policy covers minimal data collection including consent-gated Google Analytics, contact form submissions, and browser-local preferences, with no personally identifiable information shared with affiliate partners.

Last updated: October 2026

Information We Collect

InnovaAI (innovaai.io) collects minimal information to provide and improve our platform. This includes:

  • Usage data: Pages visited, features used, and interaction patterns collected via Google Analytics (when consent is granted)
  • Contact information: Name, email, and message content when you submit our contact form
  • Newsletter subscriptions: Email address when you subscribe to our newsletter
  • Local preferences: Bookmarks, saved services, and consent choices stored in your browser's localStorage

How We Use Your Information

We use the information we collect to:

  • Provide and maintain our platform
  • Respond to your inquiries and support requests
  • Send newsletter updates (only with your explicit consent)
  • Analyze usage patterns to improve the platform experience
  • Track aggregate affiliate click analytics (non-personally identifiable)

Cookies & Analytics

InnovaAI asks your permission, through a cookie consent banner, before any analytics cookie is set. Two tools load on every visit before you answer, in a cookieless mode: Google Analytics (GA4) and Microsoft Clarity. Until you accept, neither sets a cookie or stores an identifier on your device: Google Analytics sends cookieless measurement pings, and Clarity, which records how pages are used for heatmaps and session replays, gives each page view its own identifier.

If you accept, Google Analytics and Clarity may set their cookies (_ga for Google Analytics; _clck and _clsk for Clarity) so a returning browser is recognised, and we also load Vercel Analytics and Vercel Speed Insights to measure page views and page-load performance and, where we have enabled them, Microsoft Advertising (Bing UET) or Yandex Metrica. The two Vercel products are cookieless and do not use any device identifier. If you reject cookies, Google Analytics and Clarity stay cookieless, the other tools are not loaded, and no tracking cookies are set.

Google Analytics runs with Google Signals enabled. Where you are signed in to a Google account with Ads Personalization turned on, Google may associate your visit with that account to give us aggregated demographics and interests reports and cross-device statistics; Google, not InnovaAI, holds that association, and you can review or delete it in your Google account's My Activity. We do not grant Google advertising storage or personalization signals for visitors in the European Economic Area, the UK or Switzerland, so this association does not take place there.

We also use browser localStorage to remember your preferences (bookmarks, saved services, consent choice). This data never leaves your device and is not transmitted to our servers.

Third-Party Services

InnovaAI integrates with the following third-party services:

  • Google Analytics / Google Tag Manager: usage analytics; cookieless until you accept, cookies only with your consent, with Google Signals for aggregated demographics outside the EEA, UK and Switzerland
  • Microsoft Clarity: heatmaps and session replays; cookieless until you accept, cookies only with your consent
  • Microsoft Advertising (Bing UET), Yandex Metrica: usage analytics, loaded only where we have enabled them and only after you accept
  • Affiliate partners: When you click affiliate links, the destination service may set tracking cookies. See our Affiliate Disclosure for details.
  • Brandfetch / DuckDuckGo Icons: For loading service logos and brand assets

Third-Party Processors

When you use InnovaAI, subsets of your data are processed by the following third-party providers. All processors are located in the United States. You may contact each processor directly to exercise parallel data-protection rights under their respective policies.

  • Anthropic (Sonnet, Haiku LLMs): processes scraped agency content and intake form data to generate audit analysis.
  • OpenAI (text-embedding-3-small): processes service-intelligence text for semantic search.
  • Firecrawl: processes target agency URLs to extract scrape content.
  • Apollo: processes target-agency domain for firmographic enrichment.
  • Resend: delivers transactional emails (audit verifications, magic links, audit notifications). 7-day retention of email body content.
  • Stripe: processes payment data for the $29.99 Full Audit Unlock and Operator Monitoring subscription. Card data never reaches InnovaAI servers (PCI scope: Stripe-hosted checkout).
  • Vercel: hosts the InnovaAI application and processes incoming HTTP requests; retains access logs per Vercel's privacy policy. With your consent, Vercel also provides our analytics and performance measurement (Vercel Analytics and Speed Insights), both cookieless.

Data Retention

Audit reports are retained for 90 days from generation, then automatically purged. Audit telemetry (workflow logs) is retained for 90 days. Verification codes and claim tokens are purged immediately after use or upon expiry. Contact form submissions and newsletter subscriptions are retained as long as necessary to fulfill their purpose. Analytics data follows Google Analytics default retention (14 months). Account records are retained until you exercise the right to erasure described below.

Your Rights

You have the right to:

  • Reject analytics cookies via our consent banner
  • Clear localStorage data through your browser settings
  • Article 15 (access): download a complete JSON export of your personal data from Account Security (requires sign-in).
  • Article 17 (erasure): permanently delete your account and all associated data via a confirmation email flow. Initiate it from Account Security.
  • Unsubscribe from newsletter communications at any time

Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us.

Questions about your privacy

What data does InnovaAI collect?
Usage data (pages visited, features used and interaction patterns via Google Analytics, when consent is granted); name, email and message content when you submit the contact form; your email address when you subscribe to the newsletter; and bookmarks, saved services and consent choices stored in your browser's localStorage.
Are analytics loaded without consent?
No. If you reject cookies, none of these scripts are loaded and no tracking cookies are set.
How long are audit reports kept?
Audit reports are retained for 90 days from generation, then automatically purged.
How do I export or delete my data?
Download a complete JSON export of your personal data from Account Security (requires sign-in), or permanently delete your account and all associated data via a confirmation email flow.