Privacy Policy

Information We Collect

Third-Party Services

We use the following third-party services in the operation of our websites and platform:

• Stripe — for processing payments and managing subscriptions. Stripe's privacy policy is available at stripe.com/privacy.
• Google Fonts — for loading the Inter and Plus Jakarta Sans typefaces. Google may collect anonymised usage data when fonts are loaded. See Google's Privacy Policy.
• OpenAI, Anthropic, and Google — when using BYOK toolkits, your queries are sent to the respective AI provider using your own API key. Data sent to these providers is subject to their respective privacy policies and terms of service.

How We Use Your Information

• To provide and maintain the InnotekSEO AI platform and its features, including GEO audits, competitor research, schema generation, and AI citation tracking.
• To process payments and manage subscriptions for Free, Pro, and Enterprise plans.
• To respond to your enquiries submitted through our contact form.
• To send important service updates, such as changes to your plan, security notices, or platform maintenance notifications.
• To improve our websites and platform based on aggregated, anonymised usage patterns.
• To comply with legal obligations under UK law.

We do not sell your personal data to third parties. We do not use your data for profiling or automated decision-making.

Data Storage and Security

We take the security of your data seriously and implement appropriate technical and organisational measures to protect it. Key security practices include:

• All data is transmitted over HTTPS with TLS encryption.
• BYOK (Bring Your Own Key) API keys are encrypted at rest using AES-256-GCM encryption. Your API keys are never stored in plaintext and are only decrypted at the moment of use.
• Payment information is handled entirely by Stripe, a PCI DSS Level 1 certified payment processor. We never store card numbers, CVVs, or bank details on our systems.
• Account passwords are hashed using industry-standard algorithms and are never stored in plaintext.
• Access to production systems is restricted to authorised personnel with multi-factor authentication.

Our infrastructure is hosted on servers within the United Kingdom and European Economic Area. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours as required by UK GDPR.

Your Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can request that we correct inaccurate or incomplete data.
• Right to erasure — you can request that we delete your personal data, subject to legal retention requirements.
• Right to restrict processing — you can request that we limit how we use your data.
• Right to data portability — you can request your data in a structured, commonly used, machine-readable format.
• Right to object — you can object to our processing of your data where we rely on legitimate interest.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us. We will respond to your request within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal information, please contact us immediately and we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. For InnotekSEO AI account holders, we will notify you of significant changes via email. We encourage you to review this policy periodically.

Cookies

Our corporate website (innoteksolutions.co.uk) is a static site and uses minimal cookies. The InnotekSEO AI platform uses the following cookies:

• Essential cookies — required for authentication and session management. These cannot be disabled.
• Analytics cookies — used to understand how the platform is used so we can improve it. These are anonymised and can be opted out of.

We do not use advertising or tracking cookies. We do not participate in cross-site tracking networks.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Account data — retained for the duration of your active account, plus 30 days after account deletion to allow recovery.
• Contact form submissions — retained for up to 12 months after the enquiry is resolved.
• Billing records — retained for 7 years as required by HMRC for tax and accounting purposes.
• Analytics data — aggregated and anonymised data may be retained indefinitely. Identifiable analytics data is deleted after 26 months.
• BYOK API keys — deleted immediately upon removal by you or upon account deletion.