Innoveto Privacy Policy

Summary

Innoveto (“we,” “our,” “us”) provides AI chatbot, automation, and digital marketing services for healthcare, legal, and business organizations. This policy explains how we collect, use, disclose, and protect personal information in compliance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), data protection laws in Central America (including Costa Rica’s Law 8968, Panama’s Law 81, Nicaragua’s Law 787, and constitutional or sectoral protections in Guatemala, El Salvador, and Honduras), Peru’s Law 29733, Argentina’s Law 25.326, Colombia’s Law 1581, U.S. state privacy laws (including CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA, and others effective in 2025 such as DPDPA, ICDPA, MCDPA, NJPA, NHPA, and MDPA), and federal laws such as HIPAA where applicable.

We collect only necessary data and do not sell or share personal information for targeted advertising or cross-behavioral purposes as defined under applicable laws. This policy applies to information collected through our website, AI chatbot interactions, and related services. If you are a resident of a U.S. state or a Latin American country listed above with privacy rights, please see Section 7 to exercise them.

Information We Collect

We collect the following categories of personal information, either from you directly or automatically:

• Identifiers: Name, email address, phone number.
• Professional/Business Information: Organization name, role, or details (e.g., clinic or firm information).
• Interaction Data: Form submissions, AI chatbot conversations, inquiries.
• Internet/Activity Data: IP address, browser type, device information, website analytics, cookies (for session management, analytics, and personalization).
• Sensitive Information (if provided): Health-related details (e.g., for healthcare services), subject to HIPAA if classified as PHI.

Sources: Directly from you (e.g., forms, chats); automatically via cookies/tools; or from business partners.

We do not knowingly collect data from children under 13 years of age and comply with COPPA and equivalent protections in applicable Latin American laws.

How We Use Data

We use data to:

• Respond to inquiries, schedule audits, and deliver services/communications.
• Improve our website, AI chatbot performance, and user experience (e.g., anonymized analytics; we do not use chatbot interactions to train AI models without explicit consent).
• Comply with legal obligations, including audits and data protection requirements.
• Conduct internal operations such as fraud prevention and security.

Sensitive data is processed only with consent or as necessary for services, with heightened safeguards in place.

Disclosure and Sharing

We do not sell personal information. We may share categories of data (identifiers, business information, interaction data) with:

• Service Providers (e.g., hosting, analytics tools like Google Analytics) under strict contractual terms.
• Affiliates or Partners for service delivery.
• Legal Authorities if required (e.g., subpoenas).

We do not share information for targeted advertising or profiling without opt-in consent.

Data Retention

We retain data only as long as necessary for the purposes outlined above or as required by law (e.g., 7 years for HIPAA-related records or equivalent retention periods under Latin American laws). Data is deleted or anonymized thereafter.

Data Protection and Compliance

We implement reasonable security measures, including encrypted databases, secure servers, access controls, and Sentinel™ blockchain logs for data integrity. For healthcare services involving PHI, we fully comply with HIPAA, including business associate agreements, risk assessments, and safeguards against unauthorized AI access. Regular audits ensure compliance with U.S. state laws, Mexico’s LFPDPPP, and data protection laws in Central America, Peru, Argentina, and Colombia.

User Rights

Under applicable laws, you may have the right to:

• Access, correct, or delete your data.
• Opt out of automated processing/profiling (if applicable).
• Limit the use of sensitive data.
• Not be discriminated against for exercising your rights.
• Object to data processing (where applicable under ARCO or equivalent Latin American laws).

To exercise your rights, email privacy@innoveto.ai with verification details (e.g., the email address used). We respond within 45 days (or as required by law — e.g., 30 days under certain U.S. states or 15 days under some Colombian laws).

For California residents: We do not offer financial incentives linked to data collection.

International Data Transfers

Data may be processed in the U.S. For users in Mexico, Central America, Peru, Argentina, and Colombia, transfers rely on standard contractual clauses, adequacy mechanisms, or equivalent safeguards consistent with the LFPDPPP and local laws (e.g., Colombia’s Law 1581 or Argentina’s Law 25.326).

Cookies and Tracking

We use cookies for analytics, performance, and personalization. Manage your preferences via your browser or our cookie banner. Essential cookies cannot be disabled.

Updates

We may update this policy periodically. Changes will be posted here with a new “Last Updated” date. Continued use of our services constitutes acceptance of the updated policy.

Contact Us

For questions, contact privacy@innoveto.ai or write to Innoveto, [Address], U.S.A.