Last updated: May 22, 2026
We are Innocuous AI Limited ("Innocuous AI") and this Notice explains why and how we collect, store, share and use ("process") your personal information ("data") while you are using our Site and Service, your rights, and how to contact us. We are the data controller of the personal data processed in relation to this Notice, which means we are responsible for treating your data safely, in accordance with applicable data protection and privacy laws.
This Privacy Notice covers how we treat:
1) Personal data gathered when you are using or accessing our Services.
2) Personal data that our infrastructure partners share with us or that we share with our infrastructure partners.
3) Personal data in any Site or Service Content.
Our Services may, from time to time contain links to external websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies.
This Privacy Notice does not apply to the practices of third parties that we do not own or control, including but not limited to any third-party websites that you elect to access or to individuals that we do not manage or employ.
From the first moment you interact with Innocuous AI, we are collecting data. Sometimes you provide us with data, sometimes data about you is collected automatically. Here’s when and how we do this.
For example, each time you visit the Website or otherwise use the Services, we automatically collect your IP address, browser and device type, access times, the web page from which you came, the regions from which you navigate the web page, and the web page(s) you access (as applicable). There is more to this section and we want.
We collect when:
1) You browse any page of our website
2) You use Innocuous AI Services including Enok and cloud infrastructure services
3) You receive emails from us
4) You register an account and/or we process your payments
5) You view and sign contracts
6) You chat with us for customer support
You provide when:
1) You use Innocuous AI Services including Innocuous Book and cloud infrastructure services
2) You register and pay for our Services
3) You view and sign contracts
4) You chat with us for customer support
5) You opt-in to marketing messages.
If you unsubscribe from your Innocuous AI account, all other personally identifiable information is masked or removed from the system up request. For internal financial reporting purposes, your historical purchase history will be retained. For internal marketing and customer service reporting purposes, your historical customer journey will be retained.
1) Contact details including your name, company, address, telephone number, email address, and account credentials
2) Financial information including your ACH or check payment details, edit/debit card details, Services purchased
3) Data that identifies you such as your IP address, login information, browser type and version, time zone setting, browser plug-in types
4) Internet activity, including your interactions with our Services, URL clickstreams (the path you take through the site), pages viewed, products/Services viewed, page response times, download errors, how long you stay on our pages, what you do on those pages, how often, and other actions. For more information about cookies used on our website, please see our Cookie Policy.
5) Inferences, including information about your preferences
6) Customer records such as loss details from files uploaded by you to the Service
Does Innocuous AI collect sensitive data?
We don't collect any sensitive data about you (like racial or ethnic origin, political opinions, religious/philosophical beliefs, trade union membership, genetic data, biometric data, health data, data about your sexual life or orientation, and offences or alleged offences) except when we have your specific consent, or when we have to comply with the law.
Does Innocuous AI collect children's data?
No. Innocuous AI is a business-to-business platform, directed to and intended for use only by those who are 18 years of age or over. We do not target children, and we do not knowingly collect any personal data from any person under 18 years of age. If you believe we have inadvertently collected information from a child, please contact privacy@innocuous.ai and we will delete it.
Does Innocuous AI perform AI training on the data?
We use de-identified and aggregated data derived from your use of the Service to develop, train, fine-tune, test, evaluate, benchmark, and improve our artificial-intelligence systems, algorithms, and Service. We do not use information that identifies you or your customers to train publicly available foundation models, and we do not sell personal information. Where required by applicable law, you may exercise data-subject rights as described below.
Data protection law means that we can only use your data for certain reasons and where we have a legal basis to do so. Here are the reasons for which we process your data:
Delivering Services: Performing our contractual obligations to provide Innocuous AI Services to you.
Legal basis for this data usage: Contract
Processing Customer Usage: We use a limited number of sub-processors to provide the Service, including cloud-hosting providers and large-language-model providers which change from time to time. We impose contractual obligations on our sub-processors that are no less protective than those in our customer agreements.
Legal basis for this data usage: Contract
Processing Customer-Uploaded Data: With respect to personal information that our business customers upload or transmit through the Service in connection with insurance claims, our business customer is the controller and Innocuous AI acts as the processor or service provider. Personal information processed in this capacity is governed by our agreement with that customer. Data-subject requests concerning that information should be directed to the relevant business customer.
Legal basis for this data usage: Contract
Customer Support: Responding to questions and solving issues via live chat support, email, or phone.
Legal basis for this data usage: Contract
Marketing Purposes (with your consent): Sending you emails and messages about new features, products and Services, and content.
Legal basis for this data usage: Consent
Running & Improving our Site and Services: Managing your requests, login, and authentication, remembering your settings, processing payments, hosting and back-end infrastructure, testing features, managing landing pages, and identifying fraud.
Legal basis for this data usage: Contract, Legitimate Interests
What does each legal basis mean?
Consent: You have given clear consent for you to process your personal data for a specific purpose. You can choose to withdraw your consent using specific features provided to enable you to withdraw consent like an email unsubscribe link or your account privacy preferences.
Contract: Processing your data is necessary for a contract you have with us, or because we have asked you to take specific steps before entering into that contract.
Legitimate interests: Processing your data is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not outweighed by your rights and interests. These legitimate interests are:
1) Gaining insights from your behavior on our website or in our app
2) Delivering, developing, and improving the Innocuous AI service
3) Enabling us to enhance, customize or modify our Services and communications
4) Determining whether marketing campaigns are effective
5) Enhancing data security
Your Choices
You can choose not to provide us with personal data: If you choose to do this, you can continue to use the website and browse its pages, but we will not be able to process transactions or register you for our Services without personal data.
You can turn off cookies in your browser by changing its settings: As described in our Cookie Policy, you can block cookies by activating a setting on your browser allowing you to refuse cookies, and you can also delete cookies through your browser settings.
You can ask us not to use your data for marketing: We will inform you (before collecting your data) if we intend to use your data for marketing and if third parties are involved. You can opt out from marketing by emailing us at privacy@innocuous.ai.
Your Rights
You can exercise your rights by sending us an email at privacy@innocuous.ai. Please note that we may verify your identity before we are able to process any of the requests described in this Section, and in our discretion, deny your request if we are unable to verify your identify.
You have the right to access information we hold about you: This includes the right to ask us supplementary information about:
1) The categories of data we are processing
2) The purposes of data processing
3) The categories of third parties to whom the data may be disclosed
4) How long the data will be stored (or the criteria used to determine that period)
5) Your other rights regarding our use of your data
You have the right to be 'forgotten' by us: In certain circumstances, you have the right to request the deletion of your personal data, except information we are required to retain by law, regulation, or protect the safety, security, and integrity of Innocuous AI.
You have the right to correct any inaccurate personal data about you: You have the right to request that we correct inaccurate information about you. You can also visit your Profile page to correct and change certain personal information associated with it.
You have the right to data portability: We will give you a copy of your data in a digital format that you can provide it to another service, but we will not do so to the extent that it involves disclosing data about any other individual.
You have the right to restrict processing: In certain cases where we process your information, you may also have the right to restrict or limit the ways in which we use your personal information.
You can object to us using your data: Where we process your information based on our legitimate interests as explained above, you can object to this processing in certain circumstances. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons.
You have the right to lodge a complaint regarding our use of your data: If your request or concern is not satisfactorily resolved by us, you may approach your local data protection authority (see http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.html).
If you are a resident of these states: If you are a California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, or Montana resident (or a resident of another state with a comprehensive privacy law in effect), you may have the right to request access to, correction of, deletion of, or portability of your personal information, and to opt out of certain processing including “sale” or “sharing” for cross-context behavioral advertising and profiling thatproduces legal or similarly significant effects. To exercise these rights,contact privacy@innocuous.ai. We will respond within the timeframes required by applicable law and will not discriminate against you for exercising these rights.
Your data is shared only when strictly necessary and according to the safeguards and good practices detailed in this Privacy Notice. We do not share your personal information with others except as indicated below or when we inform you and give you an opportunity to opt out of having your personal information shared.
We may share your personal information with our authorized service providers that perform certain Services on our behalf. Unless we tell you otherwise, our service providers may only use data we share with them in accordance with our instructions. These Services may include processing payments, providing customer service and marketing assistance, and supporting website functionality.
We may disclose your information in response to a subpoena or similar investigative demand, a court order, or a request for cooperation from law enforcement or other government agency; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law.
In connection with substantial corporate transaction, such as the possible sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
The security of your personal information is important to us. We have physical, electronic, and managerial procedures to safeguard and secure the information we collect and that is submitted to us, both during transmission and after it is received.
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls, and regular security testing. In the event of a personal-information breach affecting Customer Data, we will notify the affected business customer without undue delay and in any event within the timeframes required by applicable law.
Unfortunately, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to protect your personal information, we cannot guarantee it absolute security. And please remember:
1) You are responsible for your username and password: keep them secret and safe!
2) If you have any questions about the security of your personal information, you can contact us at privacy@innocuous.ai.
3) If you believe your privacy has been breached, please contact us immediately: privacy@ innocuous.ai
The personal data we collect is processed in the United States, and in any data processing facilities operated by authorized service providers. By submitting your personal data, you agree to this transfer, storing, or processing by us. Where your information is transferred outside the US, we will take all steps reasonably necessary to ensure that your data is subject to appropriate safeguards, such as relying on a recognized legal adequacy mechanism, and that it is treated securely and in accordance with this Privacy Notice.
We may transfer your personal information outside the US, including but not limited to, the following reasons:
- In order to store it.
- In order to enable us or our sub-processors to provide services to you and fulfill our contract with you. This includes order fulfillment, processing of payment details, and the provision of services.
- Where we are legally required to do so.
- In order to facilitate the operation of our business, where it is in our legitimate interests and we have concluded these are not overridden by your rights.
We retain personal information for as long as needed to provide the Service to our business customers, to comply with our legal obligations (including insurance-records-retention requirements), to resolve disputes, and to enforce our agreements. De-identified and aggregated information may be retained indefinitely.
Innocuous AI will retain and use your information to the extent necessary to comply with our legal obligations (for example, l, if we are required to retain your information to comply with applicable tax/revenue laws), resolve disputes, enforce our agreements, and as otherwise described in this Notice.
We may amend or update this Notice from time to time. If we make any substantive changes, we may notify you by email or through a pop-up within our Site. We encourage you to check back regularly and review any updates.
If you have any questions, please contact us at:
privacy@innocuous.ai
Innocuous AI Limited
500 Eighth Avenue FRNT 3 #1956
Manhattan, NY 10018
USA
.png)
