Privacy statement

1. Who is responsible for your data

The data controller is Innoworks B.V., established at Hoedemakerplein 2A, 7511 JP Enschede, the Netherlands, registered with the Dutch Chamber of Commerce under number 97446939. For any question about privacy or your personal data, reach us at info@innoworks.ai.

2. What data we process

We only collect data you provide yourself or that is technically required:

• Contact form: your name, email address, optional phone number, the service or challenge you select and the content of your message.
• AI-scan: the website you enter, the content of the conversation you have with our AI, a business profile derived from that conversation (such as sector and challenge), and any contact details (name, email, phone) you mention yourself during the conversation.
• Email correspondence: messages you send us and our replies.
• Technical data: your IP address, used only briefly for security and abuse prevention (rate-limiting and bot protection). We do not link it to a profile and do not use it to track you.

3. Why, and on what legal basis

We process your data for the following purposes, each with a legal basis:

• Responding to your request and preparing a possible collaboration, basis: performance of, or steps prior to, a contract.
• Our services and lead follow-up (following up a request, giving suitable advice), basis: legitimate interest in being able to offer our services.
• Security and abuse prevention of our forms and the AI-scan, basis: legitimate interest in a safe, working website.

We do not use your data for automated decision-making with legal effect, and we do not send you marketing unless you have asked for it or given consent.

4. The AI-scan specifically

When you enter a website in the AI-scan, our AI has a conversation with you and analyses the publicly available information of that website to give tailored advice. That conversation is stored so we can follow up on your request and improve the advice. If you mention your name or contact details, we keep them as part of your request. Don't want us to keep the conversation? Email us at info@innoworks.ai and we will delete it.

5. How long we keep your data

We keep your data no longer than necessary. Requests via the contact form and the AI-scan are kept for up to 24 months after the last contact, after which we delete or anonymise them. If your request leads to a collaboration, the statutory retention periods apply to the related data (for example the 7-year tax retention obligation for administration).

6. Who we share your data with

We never sell your data. We do rely on carefully selected processors that help us run the site. A data processing agreement is in place with each of them:

• Supabase, secure database storing requests and scan conversations.
• Resend, sending transactional email (confirmation + internal notification).
• Upstash, rate-limiting against abuse.
• Cloudflare (Turnstile), bot protection on the forms.
• Google (Gemini), the AI model that runs the AI-scan and generates the note.
• Vercel, hosting of the website and the server functions.
• PostHog, website statistics. Our data is stored on their European servers in Frankfurt.
• Google (Analytics), additional statistics, only after your consent.
• Prospect Pro, recognising business visitors from their organisation's IP address.

7. Transfers outside the EU

Some of the parties above may process data (partly) outside the European Economic Area. In that case we ensure appropriate safeguards, such as the European Commission's Standard Contractual Clauses, so your data is protected there too.

8. Cookies and statistics

We measure how this site is used, so we can improve it. You decide how far that goes. On your first visit, a banner asks for your choice.

Before you choose, and if you decline

We store and read nothing on your device: no cookies, no browser storage. We only measure, in aggregate, which pages are visited, which source you arrived from (a search engine, LinkedIn or an AI assistant, for example), what kind of device and browser you use, and which country and region you are in. We derive that last part from your IP address.

We want to be honest about this: your IP address and browser characteristics are processed by our statistics provider in order to make that derivation. So it is not a fully anonymous measurement, and we will never call it that. Our legal basis is legitimate interest: we want to know whether our site works, without following you around. We do not recognise you when you return later, and we do not build a profile of you.

If you give consent

Then we do place something in your browser, so we can combine your visits into a single visitor profile. We additionally measure which buttons you click, how far you scroll, and whether you come back. We also make a recording of your session, so we can see where visitors get stuck. What you type into forms and what you discuss in the AI scan is masked in that recording before it reaches our servers. If someone then submits the contact form, we link the earlier browsing behaviour to that request through an internal identifier. Never through your email address.

You can change your choice at any time by clearing this site's storage in your browser. If you decline, we fall back to the aggregate measurement described above and delete what was stored.

9. How we secure your data

We take appropriate technical and organisational measures. All traffic is encrypted over HTTPS, storage is protected with row-level access rules, forms are protected with bot checks and rate-limiting, and only authorised staff have access to your data.

10. Your rights

Under the GDPR you have the following rights, which you can exercise free of charge:

• access to the data we hold about you;
• rectification of inaccurate data;
• erasure of your data ("right to be forgotten");
• restriction of processing;
• objection to processing;
• portability of your data;
• withdrawal of consent given earlier.

Send your request to info@innoworks.ai; we respond within the statutory period of one month. If you disagree with how we handle your data, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

11. Changes to this statement

We may update this privacy statement from time to time, for example for new services or changed regulations. The current version is always on this page, with the date of the last change at the top.

12. Contact

Questions about this statement or about your personal data? Feel free to email us at info@innoworks.ai. We are happy to help.