TrustLast updated 1 November 2026

Privacy & legal.

What we collect, why, who else sees it, how long we keep it and how to make us delete it. Written to be read, not skimmed past.

01In short

  • This website sets no cookies, runs no analytics and loads nothing from third parties.
  • If you email us, we use what you send to answer you, and for nothing else.
  • We don’t sell personal data and we don’t train models on it.
  • You can ask us to show, correct or delete what we hold about you at privacy@ainoova.com. We answer within one month.

02Who we are

This notice covers ainoova.com and the email addresses at ainoova.com. The data controller is:

Name
Ainoova · [legal entity name]
Tax ID
[tax identification number]
Registered address
[registered address]
Privacy contact
privacy@ainoova.com

03What we collect

When you write to us

Your name, email address, the content of your message and anything you attach, such as a CV if you apply for a role.

When you visit this site

Nothing on our side. Our hosting provider records standard technical data with each request (IP address, browser type, time and page requested) to deliver the site and protect it from abuse. We do not combine it with anything else or use it to identify you.

What we never collect here

No cookies, no advertising or analytics identifiers, no fingerprinting, and no special categories of data. Please don’t send us health or other sensitive data by email.

04Why, and on what basis

PurposeDataLegal basis (GDPR / UK GDPR)
Answering your enquiry, demo or pilot requestContact details, messageSteps you ask for before a contract, Art. 6(1)(b), or our legitimate interest in answering, Art. 6(1)(f)
Considering a job applicationContact details, CV, messageSteps you ask for before a contract, Art. 6(1)(b)
Keeping your application for future rolesContact details, CVYour consent, Art. 6(1)(a), which you can withdraw at any time
Delivering and securing this websiteTechnical request dataLegitimate interest in a working, secure site, Art. 6(1)(f)

05Who else sees it

Only the providers that run the site and our email, acting on our instructions:

  • Website hosting: Vercel Inc., United States.
  • Email delivery and mailboxes: our email forwarding and mailbox providers.

Some of these providers are based in the United States. Where data leaves the European Economic Area or the United Kingdom, it is protected by the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework and its UK extension. We never sell or rent personal data, and we don’t share it for advertising. In the language of the California Consumer Privacy Act, we do not sell or share personal information.

06How long we keep it

  • Enquiries: for as long as the conversation needs, and no more than 24 months after our last exchange, unless it leads to a contract.
  • Job applications: until the process closes, plus 12 months only if you agree.
  • Hosting request data: the short period our hosting provider keeps it for security.

07Your rights

You can ask to access, correct, delete, restrict or port your data, object to how we use it, and withdraw consent at any time. Write to privacy@ainoova.com; we answer within one month, free of charge. We may ask you to confirm your identity first.

If you’re not satisfied, you can complain to a supervisory authority, such as the Spanish Agencia Española de Protección de Datos or the UK Information Commissioner’s Office. We’d appreciate the chance to put it right first.

This site is not directed at children under 16.

08Our ventures

Foresail, Accrue, Companion, Quadrant, Ronda and Sites each have their own terms and privacy notice, because each handles different data. When a business uses one of them, that business usually decides what data goes in and is its controller; we act as its processor, on its instructions.

Every venture follows the same privacy rules as the lab:

  • Customer data is never sold and never used to train models.
  • Connections to customer systems are read-only by default.
  • Customers can have their data deleted when they leave.

09Cookies

ainoova.com sets no cookies and uses no similar technologies: no analytics, no pixels, no embedded third-party content. Typefaces and images are served from our own domain, so visiting this site tells no one else that you were here. That is why there is no cookie banner.

If that ever changes, this section will say so first, and anything that isn’t strictly necessary will ask for your consent.

10Security

Everything on ainoova.com and our ventures is served over HTTPS. Inside the ventures, the lab’s rules apply: read-only access by default, credentials to customer systems encrypted and kept away from the browser, two-factor sign-in where accounts hold financial data, and each customer able to see only its own data.

Reporting a vulnerability

If you think you’ve found a security issue in ainoova.com or any of our ventures, email security@ainoova.com with enough detail to reproduce it. We aim to acknowledge reports within three working days and will keep you updated until it’s fixed.

Please act in good faith: don’t access or change data that isn’t yours, don’t degrade the service, and give us reasonable time to fix the issue before disclosing it. We won’t pursue legal action against research done that way. Our security.txt has the same contact.

12Changes

When this notice changes, we update the date at the top. If a change affects how we use data you have already given us, we will tell you before it applies. Questions about any of it: privacy@ainoova.com.