What data does InnovaAI collect?

Usage data (pages visited, features used and interaction patterns via Google Analytics, when consent is granted); name, email and message content when you submit the contact form; your email address when you subscribe to the newsletter; and bookmarks, saved services and consent choices stored in your browser's localStorage.

How do I export or delete my data?

Download a complete JSON export of your personal data from Account Security (requires sign-in), or permanently delete your account and all associated data via a confirmation email flow.

Privacy Policy: How We Handle Your Data

Q: Are analytics loaded without consent?

No. If you reject cookies, none of these scripts are loaded and no tracking cookies are set.

Last updated: February 2026

Information We Collect

InnovaAI (innovaai.io) collects minimal information to provide and improve our platform. This includes:

Usage data: Pages visited, features used, and interaction patterns collected via Google Analytics (when consent is granted)
Contact information: Name, email, and message content when you submit our contact form
Newsletter subscriptions: Email address when you subscribe to our newsletter
Local preferences: Bookmarks, saved services, and consent choices stored in your browser's localStorage

How We Use Your Information

We use the information we collect to:

Provide and maintain our platform
Respond to your inquiries and support requests
Send newsletter updates (only with your explicit consent)
Analyze usage patterns to improve the platform experience
Track aggregate affiliate click analytics (non-personally identifiable)

Cookies & Analytics

InnovaAI uses a cookie consent banner to obtain your permission before loading any analytics scripts. If you accept cookies, we load Google Analytics (GA4) and/or Google Tag Manager to collect anonymized usage statistics, Vercel Analytics and Vercel Speed Insights to measure page views and page-load performance, and, where we have enabled them, Microsoft Clarity, Microsoft Advertising (Bing UET) or Yandex Metrica under the same consent. The two Vercel products are cookieless and do not use any device identifier. If you reject cookies, none of these scripts are loaded and no tracking cookies are set.

Google Analytics runs with Google Signals enabled. Where you are signed in to a Google account with Ads Personalization turned on, Google may associate your visit with that account to give us aggregated demographics and interests reports and cross-device statistics; Google, not InnovaAI, holds that association, and you can review or delete it in your Google account's My Activity. We do not grant Google advertising storage or personalization signals for visitors in the European Economic Area, the UK or Switzerland, so this association does not take place there.

We also use browser localStorage to remember your preferences (bookmarks, saved services, consent choice). This data never leaves your device and is not transmitted to our servers.

Third-Party Services

InnovaAI integrates with the following third-party services:

Google Analytics / Google Tag Manager: For anonymized usage analytics (only with your consent), with Google Signals for aggregated demographics outside the EEA, UK and Switzerland
Microsoft Clarity, Microsoft Advertising (Bing UET), Yandex Metrica: the same consent-gated usage analytics, loaded only where we have enabled them
Affiliate partners: When you click affiliate links, the destination service may set tracking cookies. See our Affiliate Disclosure for details.
Brandfetch / DuckDuckGo Icons: For loading service logos and brand assets

Third-Party Processors

When you use InnovaAI, subsets of your data are processed by the following third-party providers. All processors are located in the United States. You may contact each processor directly to exercise parallel data-protection rights under their respective policies.

Anthropic (Sonnet, Haiku LLMs): processes scraped agency content and intake form data to generate audit analysis.
OpenAI (text-embedding-3-small): processes service-intelligence text for semantic search.
Firecrawl: processes target agency URLs to extract scrape content.
Apollo: processes target-agency domain for firmographic enrichment.
Resend: delivers transactional emails (audit verifications, magic links, audit notifications). 7-day retention of email body content.
Stripe: processes payment data for the $29.99 Full Audit Unlock and Operator Monitoring subscription. Card data never reaches InnovaAI servers (PCI scope: Stripe-hosted checkout).
Vercel: hosts the InnovaAI application and processes incoming HTTP requests; retains access logs per Vercel's privacy policy. With your consent, Vercel also provides our analytics and performance measurement (Vercel Analytics and Speed Insights), both cookieless.

Data Retention

Audit reports are retained for 90 days from generation, then automatically purged. Audit telemetry (workflow logs) is retained for 90 days. Verification codes and claim tokens are purged immediately after use or upon expiry. Contact form submissions and newsletter subscriptions are retained as long as necessary to fulfill their purpose. Analytics data follows Google Analytics default retention (14 months). Account records are retained until you exercise the right to erasure described below.

Your Rights

You have the right to:

Reject analytics cookies via our consent banner
Clear localStorage data through your browser settings
Article 15 (access): download a complete JSON export of your personal data from Account Security (requires sign-in).
Article 17 (erasure): permanently delete your account and all associated data via a confirmation email flow. Initiate it from Account Security.
Unsubscribe from newsletter communications at any time

Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us.