1. Introduction
Innovista Intelligence ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, name, password
- Billing Information: Payment details (processed securely by Stripe)
- Subscription Details: Selected tier, verticals, subscription status
- Custom Research Requests: Company names, research topics, detailed requirements
- Communications: Messages sent to our support team
2.2 Automatically Collected Information
- Usage Data: Reports viewed, downloads, time spent on platform
- Device Information: IP address, browser type, operating system
- Cookies: Session cookies for authentication and preferences
- Analytics: Page views, click patterns, feature usage
3. How We Use Your Information
We use your information to:
- Provide and maintain our Service
- Process your subscription and payments
- Deliver reports and custom research
- Send service-related notifications (new reports, billing updates)
- Respond to your inquiries and support requests
- Improve our Service and develop new features
- Detect and prevent fraud or abuse
- Comply with legal obligations
- Send marketing communications (with your consent)
4. How We Share Your Information
4.1 Service Providers
We share information with trusted third-party service providers who assist us in operating our Service:
- Stripe: Payment processing and billing
- Vercel: Hosting and infrastructure
- Neon (PostgreSQL): Database hosting
- Email service providers: Transactional emails
4.2 Legal Requirements
We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide you services. Specific retention periods:
- Account Data: Retained while account is active, deleted within 90 days of account closure
- Billing Records: Retained for 7 years for tax and accounting purposes
- Usage Logs: Retained for 2 years for analytics and service improvement
- Custom Research Requests: Retained for duration of subscription plus 1 year
6. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption in transit (HTTPS/TLS)
- Encrypted database storage
- Secure authentication (NextAuth.js)
- Regular security audits
- Access controls and employee training
- Payment data handled exclusively by PCI-compliant Stripe
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Your Privacy Rights
Depending on your location, you may have the following rights:
7.1 General Rights
- Access: Request a copy of your personal information
- Correction: Update inaccurate or incomplete information
- Deletion: Request deletion of your account and data
- Data Portability: Receive your data in a structured, machine-readable format
- Opt-Out: Unsubscribe from marketing communications
7.2 California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
- Right to know whether personal information is sold or disclosed
- Right to opt-out of the sale of personal information (we do not sell your data)
- Right to deletion
- Right to non-discrimination for exercising CCPA rights
7.3 European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
To exercise any of these rights, contact us at privacy@innovista-intelligence.com
8. Cookies and Tracking
We use cookies and similar tracking technologies to:
- Essential Cookies: Required for authentication and security
- Analytics Cookies: Understand how visitors use our Service
- Preference Cookies: Remember your settings and preferences
You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Service.
9. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any information.
10. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to such transfers. We take appropriate safeguards to ensure your data receives adequate protection.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on our Service. Your continued use after changes constitutes acceptance of the updated policy.