Version 1.5 · effective 14 November 2026 · international standard. The English version is authoritative; local-language versions are courtesy translations. Questions and requests: info@innovatica.ai.
1. Who we are
This policy explains how Innovatica Technologies FZ-LLC, a free-zone limited liability company registered in Ras Al Khaimah, United Arab Emirates ("we", "Innovatica") processes personal data when you visit innovatica.ai, contact us, or interact with solutions we run under our own name. Contact for all privacy matters: info@innovatica.ai.
Where we operate AI and data solutions on behalf of a client, the client is the controller of its end users' data and our processing is governed by the Data Processing Agreement published alongside this policy. That client's own privacy notice applies to you as its end user.
2. What we collect, why, and on what basis
| Context | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form / e-mail | Your name, the e-mail address you provide, the content of your message, the page and language you wrote from, and our correspondence | Responding to your inquiry; taking steps prior to a contract | Steps at your request prior to a contract; legitimate interest in responding |
| Questionnaire (innovatica.ai/start/) | Your answers to its questions (what you need, your description, your kind of business and its size, how you handle it today), your name, the e-mail address and/or phone number you give and the way you prefer to be contacted (WhatsApp or a call), the page and language you wrote from, and how you found us (an advertising tag or the code of the partner who introduced you, if the link carried one) | Responding to your inquiry, on the channel you chose; taking steps prior to a contract; crediting the partner who introduced you (only the code, never your answers) | Steps at your request prior to a contract; legitimate interest in responding and in paying our partners correctly |
| Confirmation e-mail | Your e-mail address | One confirmation of receipt | Legitimate interest |
| Idea page (innovatica.ai/tell/, closed on 14 November 2026; answers received before then) | Your answers to its questions (the task you repeat, your kind of business and its size, how often it happens, how you handle it today), the page and language you wrote from, and, only if you choose to give it, your e-mail address and whether you ticked the consent box | Learning which problems to build tools for, with AI tools helping to sort the answers (people decide what gets built); if you ticked the box, e-mailing you about this problem only: if we build an app for it, or can solve it for your business | Legitimate interest in improving our services (the answers); your consent (the e-mail), which you can withdraw at any time |
| Analytics (only if you allow it) | Google Analytics 4 measurement: pages viewed, which step of a form you reached (never what you type), device and browser, approximate location | Seeing how the site is used | Your consent, given in the consent bar; without it no analytics cookies are set |
| Website operation | Technical logs and telemetry: IP address, browser/user-agent, pages requested, timestamps, response codes and latency | Operating, securing and improving the site | Legitimate interest in running a secure service |
| Business relationship | Contact details of client representatives (name, role, e-mail, phone) | Contract performance, invoicing, communication | Contract; legal obligations |
We use no advertising trackers. Analytics cookies are set only if you allow them in the consent bar. Until you do, or if you decline, Google Analytics runs without cookies and keeps no identifier for you: for each page viewed Google receives a cookieless signal (with your IP address, browser and the page address, as any web request carries), used only for aggregate, modelled counts. You can change or withdraw your choice at any time with "Analytics settings" at the foot of the pages that run analytics, which also deletes the analytics cookies. A language/theme preference may be stored locally in your browser and never leaves it.
3. Where the data lives and who processes it
Our infrastructure runs on Microsoft Azure in the European Union (currently Sweden Central; some services West Europe). E-mail is delivered via Azure Communication Services. Source code and operational configuration are hosted on GitHub. Where a solution uses large-language- model inference, the relevant provider (e.g. Anthropic) processes the submitted content without training on it, under its commercial terms. The current subprocessor list, locations and transfer safeguards are stated in our Data Processing Agreement (Annex 3), published on this page.
Messages sent through the contact form on innovatica.ai, answers sent from its idea page, and questionnaire answers that include an e-mail address are stored in our central message inbox (questionnaire answers with only a phone number reach our team mailbox by e-mail instead), on the same Azure infrastructure, where our team handles and answers them. Our answer reaches you by e-mail with a private link to the conversation, where you can read it and reply.
AI tools (a large-language-model provider listed in Annex 3) help us sort and summarise idea-page answers; people decide what gets built, and no decision about you is made automatically. Analytics, if you allow it, is processed by Google (Google Analytics 4).
Transfers outside the EU occur only under appropriate safeguards (standard contractual clauses and/or an applicable adequacy framework).
4. How long we keep it
- Contact-form messages and their conversation in our inbox: deleted 24 months after the conversation is closed (or after its last change, if it is never closed); messages rejected as spam are deleted within a day.
- Questionnaire answers: as contact-form messages (above); when they reached us by e-mail only, deleted 24 months after the matter is closed. If we contact you on WhatsApp, that service's own privacy terms also apply to the conversation there.
- Idea-page answers: deleted 24 months after they are received; an e-mail address you gave is deleted at once when you ask, and your consent can be withdrawn at any time.
- Analytics data (only with your consent): kept in Google Analytics for no longer than 14 months.
- Other inquiries and correspondence: as long as needed to handle the matter and any follow-up business relationship, then deleted or archived per legal retention duties.
- Technical logs and telemetry: 30 days operational retention.
- Contract and invoicing records: statutory retention periods.
5. Your rights
Subject to the data-protection law that applies to you (the GDPR and/or your national law), you have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interest, as well as the right to withdraw consent where processing rests on it. Write to info@innovatica.ai. We respond within the statutory deadlines.
You also have the right to lodge a complaint with the supervisory authority competent for you (in the EU, your national data-protection authority; country-specific authorities are named in the local versions of this policy).
6. Changes
We update this policy as our services evolve; the current version and its date are always shown here. Material changes are announced on this page.
Version history
| Version | Date | Summary |
|---|---|---|
| 1.5 | 2026-11-14 | The questionnaire (innovatica.ai/start/): its answers, name, e-mail and/or phone with the preferred channel, and how you found us (ad tag or partner code); stored like contact-form messages. The idea page (innovatica.ai/tell/) is closed; answers received before then are kept as stated |
| 1.4 | 2026-11-11 | Analytics: the cookieless signals sent before or without consent are disclosed, and consent is withdrawn with "Analytics settings" at the foot of the page (it also deletes the cookies) instead of by clearing the browser's site data |
| 1.3 | 2026-11-11 | The idea page (innovatica.ai/tell/): its answers, the optional e-mail with consent, AI-assisted sorting and 24-month retention. Analytics: Google Analytics 4 only with consent, 14 months at most; the earlier "no third-party analytics cookies" line is corrected |
| 1.2 | 2026-11-11 | Editorial: the confirmation e-mail no longer states a reply time, so its purpose reads "one confirmation of receipt". No change to the data or the legal basis |
| 1.2 | 2026-11-10 | Editorial revision, punctuation only: dashes replaced by commas, colons or parentheses, with no change in meaning. The earlier punctuation is available on request |
| 1.2 | 2026-11-09 | Contact-form messages are stored in our central inbox (not only e-mailed) and answered with a private conversation link; 24-month retention after the conversation closes, spam deleted within a day |
| 1.1 | 2026-07-30 | Separated into the country-neutral international standard (owner decision): GDPR/national-law phrasing, competent supervisory authority generic; country specifics in local versions |
| 1.0 | 2026-07-30 | First release: website and business-contact processing, legal bases, EU hosting with safeguarded transfers, retention, data-subject rights incl. supervisory-authority complaint |