How we handle your data at Innuvia

Last updated: 12/6/2025

Overview

Innuvia provides a software-as-a-service platform hosted on Amazon Web Services (AWS). This privacy policy describes the types of data we collect, how we use and protect it, and the choices available to you. We will update this policy as our services and legal requirements evolve.

Information we collect

• Account information: Name, email address, authentication identifiers, organization/workspace membership, and billing contact details.
• Customer content: Data you and your teams choose to store in Innuvia (e.g., documentation, files, structured and unstructured inputs). You control what is submitted and can remove it at any time.
• Usage and device data: Log data such as IP address, browser type, device attributes, timestamps, and basic interaction signals to operate and improve the service.
• Support communications: Information you provide when contacting support or participating in feedback programs.

How we use information

• To provide, maintain, and improve the Innuvia service.
• To authenticate users, enforce permissions, and prevent abuse.
• To monitor reliability, security, and performance.
• To communicate service updates, security notices, and support responses.
• To meet legal, regulatory, and compliance obligations.

Where and how we process data

We host Innuvia on AWS. Data may be processed in the regions necessary to provide the service reliably and securely. Where required, we use standard safeguards for international transfers.

Subprocessors and sharing

• Service providers: We use vetted subprocessors (e.g., AWS for hosting/storage, logging/monitoring providers) under contracts that require security and confidentiality.
• Legal compliance: We may disclose information to comply with applicable law, legal processes, or enforce our terms.
• No sale of personal data: We do not sell personal information.

Security

• Encryption in transit (TLS) and at rest (AWS-managed keys).
• Least-privilege access controls and network segmentation.
• Audit logging for access and key system events.
• Regular updates to infrastructure and dependencies.

Data retention and deletion

• We retain account and customer content as long as needed to deliver the service or as required by law.
• You can request deletion of your account and associated data; requests are processed subject to legal, billing, and backup requirements.

Cookies and similar technologies

We use cookies and similar technologies for authentication, session management, fraud prevention, and basic analytics. Essential cookies are required to operate the service. Optional cookies (if used) are applied only with your consent.

Authentication

Innuvia supports sign-in with Microsoft and Google in addition to email-based authentication. When you choose a social login provider, we receive limited profile details (e.g., name, email) necessary to create or link your account and to verify your identity. We do not receive your password from these providers.

Your rights and choices

• Access, update, or delete certain personal information.
• Request a copy or export of your data where applicable.
• Opt out of non-essential communications.

Children

Innuvia is not directed to children under 16 and we do not knowingly collect their data.

Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. We will post updates here and adjust the “Last updated” date above.

Contact us

If you have questions about this policy or your data, contact us at privacy@innuvia.com.