Privacy Policy

1. Information We Collect

Information you give us: name, business name, email, phone number, billing address, and account settings. Payment card details are entered directly into our payment processor (Stripe); we receive only the card brand, last four digits, expiry, and billing ZIP/postal code.

Transaction and agreement records: date, time, amount, and plan of each purchase; the version of the Terms and Privacy Policy you accepted; and the IP address, device, browser, and timestamp of that acceptance.

Usage and device data: login dates and times, IP addresses, approximate location derived from IP, device and browser type, pages and features used, and actions taken in the Service (for example workflows created, messages sent, contacts imported).

Communications: support tickets, emails, chat messages, and call recordings or notes, where permitted by law and disclosed at the time.

Customer Data: contact lists and content you upload to the Service. We process this on your behalf as a service provider (data processor).

2. How We Use Information

We use information to provide and maintain the Service; process payments, renewals, and refunds; send receipts, renewal reminders, and service notices; provide support; secure accounts and detect fraud; improve the Service; and comply with legal obligations.

Fraud prevention and payment disputes. We use transaction records, agreement records, login history, IP and device data, and communications to verify purchases, prevent fraud, and respond to chargebacks and payment disputes. This is necessary for our legitimate interest in protecting against fraudulent or mistaken claims.

3. How We Share Information

We do not sell personal information. We share it only with:

• Payment processors and card networks/issuers, to process payments and to respond to disputes and chargebacks, including evidence of your purchase, agreement, and use of the Service.
• Service providers that host, operate, or support the Service (for example cloud hosting, email and SMS delivery, analytics, support tools), under contracts that limit their use of the data.
• Legal and safety, when required by law, court order, or to protect our rights, users, or the public.
• Business transfers, in connection with a merger, acquisition, or sale of assets.

4. Cookies and Tracking

We use cookies and similar technologies to keep you logged in, remember preferences, measure usage, and secure the Service. You can control cookies in your browser settings; disabling some may affect functionality.

5. Data Retention

We keep account information while your account is active. We keep transaction, agreement, and access-log records for at least 7 years, because payment disputes can be filed months after a charge. Customer Data is deleted within 30 days after account termination unless law requires otherwise.

6. Security

We use reasonable administrative, technical, and physical safeguards, including encryption in transit and access controls. No method of transmission or storage is 100% secure.

7. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To make a request, email support@innostak.com. We may keep records needed for billing, fraud prevention, dispute response, or legal compliance even after a deletion request.

California residents: You have rights under the CCPA/CPRA, including to know, delete, and correct, and to not be discriminated against for exercising them. We do not sell or share personal information for cross-context behavioral advertising.

EU/UK residents: Our legal bases are contract performance, legitimate interests (including fraud prevention and dispute defense), consent where required, and legal obligation. You may complain to your local data protection authority.

8. Communications Consent

By providing your phone number and email at checkout, you agree to receive transactional messages (receipts, renewal reminders, account notices). Marketing messages are sent only with your consent, and you can opt out at any time by replying STOP to texts or using the unsubscribe link in emails.

9. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their information.

10. International Transfers

Your information may be processed in the United States. Where required, we use appropriate safeguards for transfers.

11. Changes

We will post updates on this page with a new effective date and notify you by email for material changes. Earlier versions are archived.