Privacy Policy

1. Introduction

InnovaSense FZ-LLC (“InnovaSense”, “we”, “us”, or “our”) respects the privacy of individuals and is committed to handling personal data responsibly, transparently, and securely.

This Privacy Policy describes how we collect, use, disclose, retain, transfer, and protect personal data when individuals:

• Visit our website at https://www.innovasense.com;
• Contact us or submit inquiries;
• Request information about our consulting, technology, software, or artificial intelligence services;
• Participate in business communications, demonstrations, meetings, or events;
• Interact with our AI-powered products and services, where this Privacy Policy is expressly applicable.

This Privacy Policy is intended to reflect the requirements of applicable data protection legislation, including UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data (“UAE PDPL”) and, where applicable, the European Union General Data Protection Regulation (“GDPR”) and United Kingdom data protection legislation.

Additional privacy notices, contractual provisions, or data processing agreements may apply to specific products, enterprise engagements, and services.

2. Data Controller and Contact Information

For personal data processed for our own business purposes, the responsible organization is:

Website: https://www.innovasense.com

Email: info@innovasense.com

For privacy inquiries, data subject requests, or concerns regarding the handling of personal data, please contact us using the email address above.

Where InnovaSense processes personal data exclusively on behalf of an enterprise customer, that customer may act as the data controller and InnovaSense may act as a data processor. In such cases, the applicable customer agreement and data processing terms govern the processing activities.

3. Personal Data We Collect

Depending on how individuals interact with us, we may collect the following categories of personal data.

3.1 Information Provided Directly

• Name and contact information;
• Business email address and telephone number;
• Organization name, job title, and professional details;
• Information submitted through contact forms or inquiries;
• Correspondence and business communications;
• Information provided during consultations, demonstrations, or meetings.
• Job applications submitted through our website, including your CV or résumé and the details you provide with it.

3.2 Website and Technical Information

When individuals visit our website, we may collect:

• IP address;
• Browser type and version;
• Device type and operating system;
• Website usage and navigation information;
• Pages visited and interaction timestamps;
• Referring websites;
• Cookie identifiers and similar technical information.

3.3 Business and Professional Information

We may process business contact information obtained through professional interactions, referrals, business networking, events, and publicly accessible professional sources.

Where personal data is collected indirectly, we provide the information required by applicable law.

3.4 AI-Related Information

Where relevant to an AI-powered product or service, the information processed may include:

• Text entered into an AI application;
• Documents or files submitted for processing;
• Audio recordings or voice inputs;
• Speech-to-text transcripts;
• AI-generated responses and interaction histories;
• Technical information required to operate, monitor, or troubleshoot AI services.

The precise categories depend on the product, its configuration, the applicable customer agreement, and the privacy notice provided for that service.

We do not assume that all categories of AI-related data are collected across every InnovaSense product.

4. Purposes of Processing

We may use personal data for the following purposes:

1. Responding to inquiries and communicating with individuals;
2. Providing consulting, software development, technology, and AI-related services;
3. Managing commercial relationships and customer engagements;
4. Operating, maintaining, and improving our website and services;
5. Providing technical support and troubleshooting;
6. Maintaining information security and preventing misuse;
7. Performing website analytics and measuring service performance;
8. Sending marketing communications where legally permitted;
9. Managing contractual, administrative, and financial obligations;
10. Complying with applicable legal and regulatory requirements;
11. Establishing, exercising, or defending legal rights.

Personal data will not be processed for materially incompatible purposes without an appropriate legal basis and any notice or consent required by applicable law.

5. Legal Bases for Processing

We process personal data only where permitted under applicable data protection legislation.

Depending on the relevant jurisdiction and processing activity, this may include:

Consent: Where an individual has provided valid consent for a specified processing purpose.

Contractual necessity: Where processing is necessary to enter into or perform a contract with the individual.

Legal obligations: Where processing is required to comply with applicable legal requirements.

Legitimate interests: Where permitted under the applicable legal framework, including the GDPR, and where our legitimate interests are not overridden by the individual’s rights and freedoms.

Other lawful grounds: Where processing is authorized by an applicable statutory exception or other recognized legal basis.

Legal bases differ between jurisdictions. A basis available under the GDPR does not automatically establish permission under the UAE PDPL.

Where consent is required, we will seek it in accordance with applicable law. Individuals may withdraw consent at any time, without affecting processing lawfully performed before withdrawal.

6. Artificial Intelligence and Automated Processing

InnovaSense develops and provides artificial intelligence, automation, and intelligent software solutions.

Depending on the product or engagement, AI systems may process text, documents, audio, or other information supplied by users or enterprise customers.

Such processing may include natural language understanding, transcription, information extraction, automated responses, workflow execution, and decision-support activities.

Where personal data is processed using AI, we seek to apply appropriate safeguards relevant to the nature and risks of the processing.

Customer data and AI model training

Customer information is not automatically authorized for use in training general-purpose AI models merely because it is processed through an InnovaSense service.

Whether information may be used for model training, evaluation, product improvement, or other secondary purposes depends on the applicable service terms, customer instructions, legal basis, and any required consent.

Product-specific notices or agreements must disclose such uses where applicable.

Automated decisions

Where AI systems are used in activities that may materially affect individuals, additional safeguards and information may be required.

Where applicable law provides rights concerning decisions based solely on automated processing, including profiling, individuals may exercise those rights through the appropriate controller.

This general website policy does not authorize unrestricted automated decision-making.

7. Voice Recordings and AI Conversations

Certain InnovaSense solutions may support voice-based interactions, including AI voice agents and automated customer service applications.

Depending on the service configuration, these systems may process:

• Voice recordings;
• Call metadata;
• Transcripts;
• Information disclosed during conversations;
• AI-generated responses;
• Operational logs.

The organization responsible for the service must provide any legally required notices and obtain any legally required consent before recording or processing communications.

Recording, retention, access, disclosure, and deletion arrangements are governed by the applicable product notice, customer agreement, and legal requirements.

Where InnovaSense acts as a processor, it handles the relevant information in accordance with the controller’s lawful documented instructions and the applicable agreement.

8. Sensitive Personal Data

Certain information, including health-related information, biometric information, and other legally protected categories, may be subject to additional requirements.

InnovaSense does not generally request sensitive personal data through ordinary website contact forms.

Where sensitive information is processed in connection with a specific service, we will assess and apply the additional legal, contractual, and security requirements relevant to that processing.

Individuals should avoid submitting sensitive personal data through general contact forms unless specifically requested through an appropriate secure channel.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies for purposes such as:

• Essential website functionality;
• Security and performance;
• Website analytics;
• Remembering user preferences;
• Improving website content and usability;
• Marketing and measurement, where implemented and legally permitted.

Where consent is required for non-essential cookies or tracking technologies, those technologies should not be activated before valid consent is obtained.

Users should be able to manage applicable cookie preferences and withdraw consent where required by law.

Further details about the actual cookies, their providers, purposes, and retention periods should be made available through a dedicated Cookie Policy or cookie preference interface.

10. Sharing and Disclosure of Personal Data

We do not sell personal data to third parties.

We may disclose personal data to recipients where necessary and legally permitted, including:

• Hosting and cloud infrastructure providers;
• Software and IT service providers;
• Communications and telecommunications providers;
• AI technology providers and subprocessors;
• Professional advisers, auditors, and accountants;
• Payment and administrative service providers;
• Government bodies and regulatory authorities where legally required;
• Other recipients authorized by the individual or applicable agreement.

We seek to limit disclosures to information reasonably necessary for the relevant purpose.

Where required, appropriate contractual, confidentiality, and data protection arrangements must be established with service providers and processors.

11. International Data Transfers

InnovaSense operates from the United Arab Emirates and may work with customers, technology providers, and partners in other jurisdictions.

Personal data may therefore be transferred to or processed in countries outside the jurisdiction where it was originally collected.

International transfers must comply with applicable data protection requirements.

Depending on the relevant jurisdiction, appropriate mechanisms may include:

• Transfers to jurisdictions recognized as providing adequate protection;
• Approved contractual safeguards;
• Standard Contractual Clauses where applicable;
• Other lawful transfer mechanisms or permitted exceptions.

Where the GDPR applies, additional transfer assessments and safeguards may be required.

Where the UAE PDPL applies, international transfers must comply with its applicable cross-border transfer provisions.

Information about relevant transfer safeguards may be requested using the contact details in this policy.

12. Data Retention

We retain personal data only for the period necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention decisions may take account of:

• The purpose of processing;
• Contractual requirements;
• Applicable legal and regulatory obligations;
• Security and operational requirements;
• The need to establish or defend legal claims;
• Customer instructions where we act as a processor.

Retention periods may vary across categories of personal data and services.

When information is no longer required, we will take appropriate steps to delete, anonymize, or securely dispose of it, subject to lawful retention obligations.

Product-specific retention periods, including those applicable to recordings and transcripts, should be documented separately where relevant.

13. Information Security

We seek to implement appropriate technical and organizational safeguards designed to protect personal data against unauthorized access, unlawful processing, accidental loss, destruction, alteration, or disclosure.

Depending on the systems and processing activities involved, safeguards may include:

• Access controls and authentication;
• Encryption where appropriate;
• Role-based permissions;
• System monitoring and logging;
• Secure software development practices;
• Backup and recovery arrangements;
• Personnel confidentiality obligations;
• Security reviews and risk assessments;
• Incident management procedures.

The safeguards actually implemented must be appropriate to the nature, sensitivity, and risks of the personal data being processed.

Although reasonable measures are taken to protect information, no electronic system or internet transmission can be guaranteed to be completely secure.

14. Personal Data Breaches

In the event of a suspected or confirmed personal data breach, InnovaSense will assess the incident and take appropriate containment, investigation, remediation, and documentation measures.

Where legally required, we will notify the relevant supervisory authority, affected individuals, or responsible customer within the applicable requirements and timeframes.

Where InnovaSense acts as a processor, breach notification responsibilities will also be governed by the applicable data processing agreement.

15. Your Data Protection Rights

Depending on the applicable jurisdiction and circumstances, individuals may have the right to:

• Receive information about the processing of their personal data;
• Request access to personal data;
• Request correction of inaccurate or incomplete information;
• Request deletion where legally applicable;
• Request restriction or cessation of certain processing;
• Object to direct marketing and certain other processing;
• Request data portability where applicable;
• Withdraw consent where processing relies on consent;
• Exercise applicable rights concerning automated decisions and profiling;
• Lodge a complaint with a competent supervisory authority.

These rights are subject to applicable legal conditions, exemptions, and limitations.

Requests may be submitted to info@innovasense.com.

We may request reasonable identity verification before responding to a request and will respond within the timeframes prescribed by applicable law.

Where we act only as a processor, requests may need to be directed to the relevant customer acting as controller.

16. Marketing Communications

We may communicate with business contacts and interested individuals about our services, technology solutions, events, and business activities where legally permitted.

Where consent is required for marketing, we will obtain it before sending the relevant communications.

Individuals may unsubscribe from marketing emails using the instructions provided in those communications or by contacting us directly.

We will respect valid marketing objections and withdrawal requests in accordance with applicable law.

17. Children’s Privacy

Our general website and business services are not specifically directed at children.

We do not intentionally solicit personal data from children through our general website.

Where a particular service involves processing children’s personal data, the applicable controller must establish the appropriate lawful basis, notices, safeguards, and parental or guardian authorizations where required.

If we become aware that children’s personal data has been collected unlawfully, we will take appropriate corrective action.

18. Third-Party Websites and Services

Our website may contain links to external websites or integrate services operated by third parties.

We are not responsible for the independent privacy practices of third-party websites.

Users should review the privacy notices and terms of those third parties before submitting personal data.

Where third parties process personal data on our behalf, our responsibilities are governed by applicable law and the relevant contractual arrangements.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in legislation, technology, business activities, or personal data processing practices.

The latest version will be made available on our website with an updated revision date.

Where required by applicable law, we will provide additional notice or obtain consent before implementing material changes to processing activities.

20. Complaints and Regulatory Authorities

Individuals who have concerns about the processing of their personal data are encouraged to contact us first so that we can investigate and address their concerns.

Depending on the applicable law, individuals may also have the right to submit complaints to the relevant data protection supervisory authority.

For processing governed by the UAE PDPL, the competent UAE data protection authority may be relevant.

For processing governed by the GDPR or UK data protection legislation, the relevant European or UK supervisory authority may have jurisdiction.

21. Contact Us

For privacy-related questions, data subject requests, or complaints, please contact:

Email: info@innovasense.com

Website: https://www.innovasense.com