Privacy Policy

This policy covers the use of inovasense.com, including B2B inquiries and interactive tools. Contracts for our services are concluded separately. Visiting the website or sending an inquiry does not constitute consent to processing for other purposes.

1. Controller and contact

inovasense s.r.o.
Karpatské námestie 7770/10A
831 06 Bratislava, Slovakia
Company ID (IČO): 50288172
Tax ID (DIČ): 2120258910
VAT ID: SK2120258910
Email: info@inovasense.com
Phone:

2. What we process and why

Business inquiries and communication

Data: Name, email, optional company name, selected topic, message, any source page and acknowledgment of this policy. Technical request information, including the IP address, is also processed when submitting the form.
Purpose: Handling your inquiry, follow-up communication and protecting the form against spam.
Legal basis: GDPR Article 6(1)(f): legitimate interests in responding to B2B inquiries and maintaining secure communication.
Retention: Our correspondence: until the inquiry is resolved, for no more than 2 years after the last communication. Web3Forms states that submissions are retained for up to 3 years, or less depending on settings or earlier deletion.

AI tools and operational records

Data: The full technical description you enter; IP address; IP-derived country, city and region; for MCU vs MPU also continent, approximate coordinates and time zone. Browser, language, referrer, request time, tool, input length, model, response time and stored preliminary recommendation or classification. Depending on the tool, confidence, token counts and processing costs are also recorded.
Purpose: Generating the technical result you request, diagnostics, monitoring tool use and reliability, and preventing abuse. Text is sent to the Gemini API; operational records are stored in Supabase.
Legal basis: GDPR Article 6(1)(f): legitimate interests in providing and securely operating technical tools. Records containing an IP address or identifiable content are treated as personal data.
Retention: Our AI operational records in the primary database: up to 30 days, with automatic daily deletion. Google states that Gemini prompts, context and outputs are retained for 55 days for its own abuse monitoring.

Website traffic and performance

Data: Visited URL and parameters, referrer, browser, device, operating system, time and country. Speed Insights also processes network speed and page performance measurements. Vercel processes the IP address on receipt and uses a derived identifier for the visitor session.
Purpose: Traffic reports, identifying loading problems and improving the website through Vercel Web Analytics and Speed Insights.
Legal basis: GDPR Article 6(1)(f): legitimate interests in measuring and improving the website insofar as personal data is processed. We do not use this data for targeted advertising.
Retention: Vercel states that visitor sessions expire after 24 hours. Availability of statistical reports follows the reporting window of the service and plan; this does not make our AI records anonymous or apply that period to them.

Security and abuse prevention

Data: IP address, time, reason for limiting a request, country, city, browser and, depending on the tool, its identifier; technical hosting and error logs.
Purpose: Protecting website, API and administration availability, limiting automated abuse and investigating operational errors.
Legal basis: GDPR Article 6(1)(f): legitimate interests in protecting services and operational resources.
Retention: Our AI rate-limit records in the primary database: up to 30 days, with daily deletion. Vercel hosting logs follow its settings and plan. Temporary request limits also operate in server memory.

Name, email and message are required to send and handle an inquiry; company name is optional. A technical description is required to obtain a tool result. Without these details the relevant function cannot operate.

Enter a general technical description into AI tools. Do not submit personal or sensitive data, trade secrets or NDA-protected content. Approximate location is derived from the IP address, not a GPS sensor.

3. Recipients and service providers

Web3Forms, operated by Web3Creative (India): form receipt and delivery, and spam prevention; its subprocessors may process content, email and IP addresses.
Google Workspace: delivery and storage of business email correspondence.
Vercel: hosting and web request processing, operational logs, Web Analytics and Speed Insights.
Google Gemini API: processing submitted technical text and generating results, including the provider’s abuse monitoring.
Supabase: storage of AI operational and security records. The database region alone does not determine where all other services process data.
Authorized inovasense personnel access data as needed. Public authorities receive data when required by law. We do not sell data or use it for advertising profiles.

Provider details and contractual terms

4. Processing outside the EEA

Services may process data in the USA, India and other countries according to their infrastructure. Transfers to an applicable certified US recipient may rely on an adequacy decision under GDPR Article 45 (EU–US Data Privacy Framework); other transfers use the applicable safeguards, including Standard Contractual Clauses under GDPR Article 46 described in provider terms. You can request information about the specific safeguards and a copy by emailing us.

5. Cookies and browser storage

Web Analytics and Speed Insights run when a page loads. Vercel describes these services as measurement without analytics cookies; however, the Web Analytics script may read localStorage, for example the __va_attribution entry. We do not use Google Analytics or advertising cookies.

After you click contact from a tool result, a brief description and result may be temporarily stored in sessionStorage to transfer them into an editable message. The transfer is valid for 30 minutes; session storage ends when the tab closes. The message is sent only when you submit the form.

Administrator login uses the security cookie inovasense_admin, valid for up to 24 hours. Its purpose is authentication to the administration area.

You can clear or restrict storage through browser settings, which may affect brief transfers or administrator login. “Cookie-free” does not mean that no data is processed.

6. Deletion and data security

The periods above distinguish our own copies from provider retention. We delete data when its purpose or retention period ends, unless a specific legal duty or an existing legal dispute requires a particular record to be retained longer; use is then restricted to that reason. Provider technical backups follow their recovery and deletion cycles and are not used for ordinary analysis. We use HTTPS encrypted transmission, restricted access and protected administration.

7. Your rights

You can request access and a copy of your data, correction, erasure and restriction under the conditions of the GDPR.
You can object to processing based on legitimate interests on grounds relating to your situation. We assess the relevant purpose and legal conditions when handling your request.
Portability applies to automated processing based on consent or a contract when GDPR conditions are met. Where specific processing relies on your consent, you can withdraw it without affecting the lawfulness of earlier processing.
Send requests to info@inovasense.com. We normally respond within one month and inform you within that period of any lawful extension and its reasons. Proportionate identity verification may be needed to protect your data.

You have the right to lodge a complaint with the supervisory authority:

Úrad na ochranu osobných údajov Slovenskej republiky
Galvaniho Business Centrum II
Galvaniho 7/B
821 04 Bratislava
dataprotection.gov.sk

8. AI results and decision-making

Tools provide preliminary technical results and are not used to make automated decisions about people with legal or similarly significant effects. The CE tool uses AI to classify the description and rules to select legislation. Results require professional verification.

9. Policy changes

The current version and update date are published on this page. If processing purposes or scope change, we provide the information required by the GDPR.