Privacy Policy
Last updated: July 26, 2026
Innovaxel (“we”, “our”, or “us”) is a software engineering company with offices in Lahore, Pakistan and Dubai, UAE. We build AI systems, digital products, and cloud infrastructure for clients across 12 industries worldwide. This Privacy Policy explains what personal data we collect when you use our website at www.innovaxel.com, why we collect it, how we use it, and what rights you have over it. Please read this policy carefully. By continuing to use our website, you acknowledge this notice.
1. Key Definitions
Personal Data
Any information that identifies or could identify a living individual — such as a name, email address, phone number, IP address, or company name.
Processing
Any action performed on personal data, including collection, storage, use, transmission, and deletion — whether automated or manual.
Data Controller
The entity that determines why and how personal data is processed. For data collected through this website, Innovaxel is the data controller.
Data Processor
A third party that processes data on our behalf under our instructions — for example, our email delivery provider or analytics platform.
Consent
A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
2. Information We Collect
We collect information in two ways: information you provide directly to us, and information collected automatically when you visit our website.
Information you provide directly
- Contact form submissions: name, email address, phone number, company name, selected service, approximate budget, and your project description.
- Meeting booking requests: name, email address, company, and any notes submitted through our scheduling system.
- Email correspondence: any information you include when emailing us at contact@innovaxel.com.
- Job applications: name, contact details, CV/resume, portfolio links, and any other information you submit through our careers pages.
- Newsletter subscriptions: email address and, where provided, first name.
- Free resource downloads: name and email address submitted to receive a free guide or checklist (such as our AI Automation Readiness Checklist), used to send you the resource and, unless you unsubscribe, occasional related insights.
Information collected automatically
- Usage data: pages visited, time on site, navigation paths, referrer URLs, and buttons clicked.
- Product interaction data: steps completed in our AI Readiness Assessment tool, buttons clicked (e.g. booking a call), and other in-product events, collected via our analytics provider PostHog.
- Device and technical data: IP address, browser type and version, operating system, screen resolution, and device type.
- Cookie data: identifiers and preference signals set by first-party and third-party cookies (see our Cookies Policy for full details).
- Advertising interaction data: whether you arrived from a Google Ads campaign, and conversion events such as form submissions or meeting bookings.
- Linked identity data: when you submit the contact form, book a meeting, complete the AI Readiness Assessment, or download a free resource, we link your prior anonymous browsing activity on our site to your name and email address via our analytics provider, so we can see the journey that led to your enquiry.
3. How We Use Your Information
Responding to Enquiries
We use your contact form and email data to respond to your project enquiries, answer questions, and schedule discovery calls. This is the primary reason most visitors share data with us.
Delivering Services
For active clients, we process contact and project information to manage engagements, deliver work, and communicate on project status throughout the engagement lifecycle.
Website Analytics
We use Google Analytics and PostHog to understand how visitors use our site — which pages perform well, where visitors drop off, which content drives enquiries, and how people move through tools like our AI Readiness Assessment — so we can improve the experience.
Free Resource Delivery
When you request a free guide or checklist, we use your name and email to send the resource and, unless you unsubscribe, occasional related insights. We also notify our internal team so we can follow up if helpful — you can opt out of further contact at any time.
Advertising & Remarketing
We use Google Ads to run targeted advertising campaigns. Conversion data helps us measure which campaigns are effective. You can opt out of personalised advertising at any time.
Recruitment
Information submitted through careers pages is used solely to evaluate applications for open roles. We retain this data for up to 12 months after a hiring decision is made.
Legal & Compliance
We may process data to comply with applicable laws, respond to lawful requests from regulators or courts, enforce our terms of service, or protect the rights and safety of Innovaxel and third parties.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction that requires a legal basis for data processing, we rely on the following:
Legitimate interests
Responding to enquiries, improving our website, measuring advertising effectiveness, and protecting against fraud. We balance these interests against your rights and will not override your fundamental privacy interests.
Contractual necessity
Processing data needed to fulfil a contract with you or to take steps at your request before entering a contract — including managing active client engagements.
Consent
Where we send marketing communications or place non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.
Legal obligation
Where applicable law requires us to process data — for example, for tax, accounting, or regulatory compliance purposes.
5. Data Retention
We retain personal data only as long as necessary for the purposes described in this policy, or as required by applicable law. Our general retention periods are:
| Data Type | Retention Period |
|---|---|
| Contact form submissions (no engagement) | 24 months |
| Active client project data | Duration of engagement + 7 years |
| Meeting booking records | 12 months |
| Free resource download requests | 24 months |
| Job applications (unsuccessful) | 12 months after decision |
| Website analytics data | 26 months (Google Analytics default); PostHog data per our plan settings |
| Email correspondence | 3 years from last interaction |
| Financial and contractual records | 7 years (legal requirement) |
6. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:
- TLS encryption for all data transmitted to and from our website.
- Access controls ensuring only authorised personnel can access personal data, governed by role-based permissions.
- Secure handling of all credentials and API keys through environment-based secrets management — no credentials in source code.
- Regular security reviews of our website and internal systems.
- NDA-first engagement process: every client and project involves signed confidentiality agreements before any sensitive information is shared.
While we take every reasonable precaution, no method of transmission over the internet is 100% secure. If you suspect your data has been compromised, please contact us immediately at contact@innovaxel.com.
7. International Data Transfers
Innovaxel operates from Pakistan and the UAE and works with clients and technology providers globally. Your data may be transferred to and processed in countries outside your country of residence, including countries that may not offer the same level of data protection as your home jurisdiction. When we transfer data internationally, we do so under appropriate safeguards — including standard contractual clauses approved by relevant data protection authorities — to ensure your data remains protected to the standards described in this policy.
8. Third-Party Services & Processors
We use trusted third-party services to operate our website and business. Each processor is contractually bound to protect your data and process it only on our instructions.
| Service | Purpose | Data Shared |
|---|---|---|
| Google Analytics | Website usage analytics | Anonymised behaviour data, IP address |
| PostHog | Product & behavioural analytics | Page views, product interaction events, and — once you submit a form — your name and email linked to your session history |
| Google Ads | Advertising & conversion measurement | Click and conversion events |
| Vercel | Website hosting & delivery | Request logs, IP address |
| Email provider | Transactional email delivery | Name, email, message content |
| Calendar / scheduling tool | Meeting booking | Name, email, preferred time |
We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.
9. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data. To exercise any of these rights, contact us at contact@innovaxel.com. We will respond within 30 days.
Right of Access
Request a copy of the personal data we hold about you, along with information about how and why we process it.
Right to Rectification
Request correction of any personal data that is inaccurate or incomplete. We aim to act on rectification requests within 5 business days.
Right to Erasure
Request deletion of your personal data where there is no compelling reason for us to continue processing it, subject to legal retention obligations.
Right to Restriction
Request that we limit how we process your data — for example, while a dispute about accuracy is resolved.
Right to Data Portability
Receive your personal data in a structured, machine-readable format and transfer it to another controller where technically feasible.
Right to Object
Object to processing based on legitimate interests or for direct marketing at any time. We will stop unless we can demonstrate compelling legitimate grounds.
Withdraw Consent
Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Lodge a Complaint
If you believe your rights have been violated, you may lodge a complaint with your national data protection authority. We encourage you to contact us first.
10. Children's Privacy
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data without parental consent, please contact us immediately and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy whenever you visit our website to stay informed about how we protect your data. Continued use of the website after changes are posted constitutes your acknowledgement of the updated policy.
12. Contact Us
For any questions, requests, or concerns about this Privacy Policy or the way we handle your personal data, please contact our team:
Innovaxel
Phone+1(415)800-357-6
PakistanLahore, Pakistan
UAEDAMAC Executive Heights, 1904, Barsha, Dubai