Privacy Policy
Innovite (“we”, “us”) is the data controller for personal information collected through innoviteai.com. We’re a UK-based business and we comply with the UK GDPR and the Data Protection Act 2018.
What we collect
Through the strategy-call form on the site, we collect:
- Your name
- Company name
- Work email address
- Industry, deal-value range, lead-generation method, and target client volume (the form’s qualifying questions)
- Browser user-agent and IP address (for spam triage and analytics)
Through the AI Qualifier widget, we may also collect: business model, deal value, decision-making authority, and timeline.
If you reply to or initiate any email correspondence with us, we retain that correspondence as long as the conversation is active.
What we do with it
- Respond to enquiries. We use your contact details and form answers to reply to your enquiry, schedule a strategy call, and tailor the conversation to your business.
- Auto-response. When you submit the form, an automated email is sent to your address using the answers you provided. The copy is generated by an AI (Anthropic Claude) and reviewed before delivery.
- Pipeline management. We retain qualified-prospect data in our customer-relationship database (Supabase, EU region) to track our own sales pipeline.
- Service delivery. If you become a client, we use the data to deliver agreed services under our engagement agreement.
Legal basis
We process personal data on the basis of:
- Legitimate interests — for responding to enquiries you initiate and for following up where we believe doing so is reasonable.
- Contract — once you become a client, to deliver the services you’ve engaged us for.
- Consent — where required (e.g. marketing communications), we’ll ask first.
Who else handles your data
We use the following third-party providers, each acting as a data processor on our behalf:
- Vercel — website hosting and serverless functions (data may transit US infrastructure)
- Supabase — primary database (EU region)
- Resend — transactional email delivery
- Anthropic — AI auto-response copy generation
- Slack — internal new-lead notifications
- Plausible — cookieless web analytics (EU-hosted)
- Wistia — embedded video player on the showcase section
- Google Fonts — web font delivery
Where any of these providers transfer data outside the UK or EEA, we rely on their published Standard Contractual Clauses or equivalent safeguards.
How long we keep it
- Form submissions and qualifier answers: up to 24 months from submission, then deleted unless you become a client.
- Email correspondence: as long as the conversation is active, plus 24 months.
- Client records: for the duration of the engagement plus 7 years for accounting and legal compliance.
Your rights
You have the right to:
- Access the personal data we hold about you
- Correct anything that’s inaccurate
- Ask us to delete your data
- Restrict or object to our processing
- Withdraw consent where we’ve relied on it
- Lodge a complaint with the Information Commissioner’s Office (ico.org.uk)
To exercise any of these rights, email sammy@innoviteai.com. We’ll respond within 30 days.
Cookies
The site itself does not set cookies. Embedded third-party services (Wistia, Google Fonts) may set cookies when you load their content. We use Plausible Analytics, which is cookieless by design.
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top reflects the most recent change. Material changes will be highlighted on the site.
Contact
Questions about this policy or how we handle your data: sammy@innoviteai.com.