Privacy Policy

1. Introduction

INNOVA ("we," "us," or "INNOVA") is committed to protecting your privacy and personal data security. This Privacy Policy applies to the collection, use, and protection of personal information through our website (www.innovatec-dev.com), SMS messaging platform, and related services (collectively, the "Services").

We comply with applicable data protection laws and regulations, including but not limited to the Personal Information Protection Law of the People's Republic of China (PIPL), the Cybersecurity Law of the People's Republic of China, the Data Security Law of the People's Republic of China, the EU General Data Protection Regulation (GDPR), and other applicable data protection laws.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our Services.

2. Information We Collect

We collect the following types of personal information depending on the service scenario:

2.1 Information You Provide

• Contact Information: Name, email address, phone number, and company name, collected when you submit an inquiry through our contact form.
• Account Information: When you register an enterprise account, we collect company name, unified social credit code, contact name, job title, business email, and contact phone number.
• Message Content: When you create and send messages using the SMS platform, we process message template content, recipient phone number lists, and rich media assets (images, videos, etc.).
• Brand Verification Materials: Brand name, brand logo, official website, and business qualification documents required for carrier brand verification.

2.2 Automatically Collected Information

• Device and Technical Information: IP address, device type, operating system, browser type and version, screen resolution, etc.
• Usage Data: Pages visited, time spent on pages, click behavior, feature usage frequency, API call logs, etc.
• Log Information: Server logs, including access timestamps, requested URLs, response status, and response times, used for security auditing and performance optimization.

2.3 Information from Third Parties

• Message delivery status reports and error code information returned by carrier networks.
• Technical data related to your use of the Services provided by partners such as cloud service providers.

3. How We Use Information

We use the personal information collected solely for the following lawful purposes:

• Service Delivery: Processing and sending SMS messages, performing brand verification, providing API interfaces and related technical features.
• Customer Support: Responding to your inquiries, resolving technical issues, and providing service notifications and updates.
• Service Improvement: Analyzing usage data and performance metrics to optimize platform functionality and user experience.
• Security Protection: Detecting and preventing fraud, abuse, and unauthorized access to protect the platform and user data.
• Compliance Obligations: Meeting legal and regulatory requirements, cooperating with regulatory inspections, and maintaining necessary transaction records and audit logs.
• Marketing Communications: With your explicit consent, sending marketing information such as product updates and event notifications (you may unsubscribe at any time).

4. Legal Basis

The legal bases for processing personal information include:

• Contract Performance: Processing account information and message-sending personal data to fulfill the service agreement entered into with you.
• Legal Obligation: Processing personal data to comply with applicable laws and regulations (e.g., retaining transaction records, regulatory cooperation).
• Legitimate Interests: Processing personal data to safeguard platform security, prevent fraud, and improve services, provided that such processing does not unduly prejudice your rights and freedoms.
• Consent: For additional data processing activities not essential to the Services (such as marketing), we proceed only after obtaining your explicit consent.

5. Information Sharing

We do not sell your personal information to any third party. We may share your personal information in the following circumstances:

• Telecom Carriers: To send SMS messages, we need to transmit recipient phone numbers and message content to the target carrier network.
• Cloud Service Providers: We use trusted cloud service providers to host our infrastructure, bound by strict data processing agreements.
• Legal Requirements: Where required by laws, regulations, or government authorities acting within their lawful authority, we may need to disclose relevant information.
• Business Transfer: In the event of a merger, acquisition, or asset transfer, personal information may be transferred as part of the transferred assets (we will notify you in advance).

All third-party data processing is based on written data processing agreements and is subject to security protection standards consistent with this Policy.

6. Data Retention

We retain your personal information only for the period necessary to fulfill the service purposes or to meet legal obligations:

• Account Information: Retained for the duration of your account, and for 90 days after account cancellation for data cleanup and compliance auditing.
• Message Sending Records: Retained for 6 months to 2 years (depending on the legal requirements of different countries/regions) for delivery analysis and dispute resolution.
• Log Data: Retained for 6 months for security auditing and performance optimization.
• Marketing Consent Records: Retained for 12 months after consent withdrawal.
• Legally Required Retention: Data required to be retained by law shall be kept for the corresponding period.

Upon expiration of the retention period, we will securely delete or anonymize your personal information.

7. Data Security

We employ bank-grade security measures to protect your personal information, including but not limited to:

• Transmission Encryption: All data transmissions are encrypted via SSL/TLS protocols to prevent interception during transit.
• Storage Encryption: Sensitive data (such as phone numbers and verification codes) is encrypted using AES-256 at rest.
• Access Control: Based on the principle of least privilege, only authorized personnel may access personal information, subject to multi-factor authentication.
• Audit Logs: All data access operations are logged, and regular security audits are conducted.
• Security Certifications: The platform is ISO 27001 certified for information security management.
• Periodic Assessment: Regular vulnerability scanning and penetration testing by professional security firms.

In the event of a data security incident, we will notify regulatory authorities within 72 hours and promptly inform affected users.

8. Your Rights

Under applicable data protection laws, you have the following rights:

• Right to Be Informed: Understand how we collect and use your personal information.
• Right of Access: Obtain a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate personal information.
• Right to Erasure: Request deletion of your personal information to the extent permitted by law.
• Right to Restrict Processing: Request restriction of processing of your personal information under certain circumstances.
• Right to Data Portability: Obtain your personal information in a structured, machine-readable format and transmit it to a third party.
• Right to Object: Object to our processing of your personal information based on legitimate interests.
• Right to Withdraw Consent: Withdraw previously given consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, please contact us using the information at the end of this Policy. We will respond within 30 days of receiving your request.

9. Cookies

We use cookies and similar technologies to improve your browsing experience and analyze website usage:

• Essential Cookies: Necessary for basic website functionality; cannot be disabled.
• Analytics Cookies: Collect anonymized usage data to help us understand and improve our Services.
• Preference Cookies: Remember your settings (such as language preferences) to provide a personalized experience.

You can manage or delete cookies through your browser settings. Disabling certain cookies may affect website functionality.

10. Cross-Border Transfers

As our Services cover 200+ countries and regions globally, your personal information may be transferred to servers outside your country/region for processing. For cross-border data transfers, we will ensure:

• The recipient country/region provides an adequate level of data protection.
• Standard Contractual Clauses (SCCs) are in place or other lawful transfer mechanisms exist.
• Compliance with China's Personal Information Protection Law on cross-border transfer requirements, including completing security assessments or obtaining separate user consent where required.
• Compliance with EU GDPR requirements on cross-border data transfers.

11. Children's Privacy

Our Services are directed at enterprise and institutional clients and are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and discover that we have inadvertently collected personal information from a child, please contact us immediately, and we will promptly delete the relevant data.

12. Policy Changes

We may update this Privacy Policy from time to time to reflect business changes, legal requirements, or best practices. In the event of material changes, we will notify you through website announcements or email and note the update date on the policy page. Continued use of the Services constitutes acceptance of the updated policy.

We recommend checking this page periodically for the latest changes.

13. Contact Us

If you have any questions, suggestions regarding this Privacy Policy, or wish to exercise your data protection rights, please contact us through the following channels: