InovaOS Privacy Policy
Last updated Oct 14, 2026
1. Who we are and what this policy covers
InovaOS Advisory L.L.C-FZ ("InovaOS", "we", "us"), part of Inova Group, decides how and why your personal data is used. That makes us the data controller for everything described here.
Registered address: Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates
Business licence: 2647132.01
Privacy contact: support@inovaos.com
UK representative: Inova Group Ltd (company number 12383318), C/O Ashfield Accountancy, First Floor, 33 Chertsey Road, Woking, Surrey, GU21 5AJ, United Kingdom. Email: privacy@inovaos.com. You can contact our representative about anything in this policy.
We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), and any other data protection law that applies to you.
This policy covers personal data we handle when you:
visit inovaos.com or our campaign pages on go.inovaos.io;
respond to our adverts, fill in a form or book a call;
speak with us on a strategy session, sales or check-in call;
join the InovaOS LAUNCH programme, including the LAUNCH Companion at app.inovaos.com and our community and live sessions on Circle;
connect your LinkedIn account to, or upload LinkedIn data into, the LAUNCH Companion.
It does not cover websites or services run by others that we link to, such as LinkedIn. Their own privacy policies apply. How we use cookies is explained in our Cookie Policy.
2. Information we collect
Most of what we hold comes directly from you. The rest comes from tools you choose to connect, from our advertising and website tools, or from people who introduce you to us.
| Category | Examples | Where it comes from |
|---|---|---|
| Identity and contact | Name, email, mobile number, company website, home address, company name and number, VAT number | You, on our forms, booking pages and the programme agreement |
| Professional background | Current role, experience, specialism, goals, LinkedIn profile URL | You, on forms and calls |
| Personal circumstances and finances | Savings, income targets, runway, family commitments and other circumstances you choose to share in exercises or on calls | You |
| Advertising and website activity | Cookie and device identifiers, IP address, the advert or link you came from, pages viewed, form and booking events | Your device, through the tools in our Cookie Policy, where you have agreed |
| Leads from others | Your name and contact details | Ad platform lead forms you submit, or people and partners who introduce you to us |
| Bookings | Chosen time, answers to booking questions | You, through HubSpot Meetings |
| Calls | Recordings, transcripts and AI-generated summaries of calls | Zoom, Fathom and HubSpot, see section 6 |
| Payment and billing | Payment plan, amounts paid, invoices. Card details are held by our payment providers, not by us | You, Stripe, Whop and PayFunnels |
| Programme activity | Attendance, module and exercise progress, worksheets, trackers, pipeline records, check-ins and coaching notes | You, our coaches, the LAUNCH Companion and Circle |
| LAUNCH Companion content | Messages you send NOVA, files you upload, and the responses NOVA gives | You |
| LinkedIn data | See section 5 | LinkedIn, with your permission, or a data export you upload |
| Communications | Emails, WhatsApp and other chat messages, Circle posts and direct messages | You |
| Third parties you name | Details of prospects, clients or contacts you enter into trackers or the Companion | You |
We do not ask for special category data, such as health information. Some exercises and coaching conversations touch on personal topics, so you may choose to share it. If you do, we use it only to support you on the programme, on the basis of your explicit consent, which you can withdraw at any time.
You need to give us your contact and billing details to join LAUNCH. Everything else is optional, but the programme works best when you share enough for us to coach you.
Your contacts' data. When you enter details of prospects or contacts into the platform, or upload a LinkedIn export, you are sharing other people's personal data with us. Please only share what you are entitled to share. We use it only to run your pipeline tools for you. We do not use it to contact those people or for our own marketing.
3. How we use it and our lawful bases
We only use personal data where the law allows it. We never sell it.
| Purpose | Lawful basis under UK GDPR |
|---|---|
| Responding to your enquiry and following up about it by email, phone, text or WhatsApp | Steps you ask for before a contract; legitimate interests in responding to people who contact us |
| Booking and running strategy sessions | Steps you ask for before a contract; legitimate interests |
| Sending marketing emails and texts | Your consent, or, if you enquired about or bought our services, our legitimate interests in telling you about similar services. You can opt out when you give us your details and in every message |
| Measuring and improving our adverts, including sharing event data and hashed contact details with ad platforms | Consent, given through our cookie banner |
| Website analytics | Consent, given through our cookie banner |
| Delivering LAUNCH: platform access, coaching, community, trackers, the Companion | Contract |
| Running your pipeline tools with contacts you add | Legitimate interests (yours and ours) |
| Taking payments, issuing invoices, collecting overdue sums | Contract; legal obligation for tax and accounting records |
| Checking eligibility for the First Client Commitment (clause 3.6 of the programme agreement) | Contract |
| Recording calls for follow-up, catch-up, coaching quality and staff training | Legitimate interests (see section 6) |
| Improving the programme and our marketing using anonymised information | Legitimate interests |
| Using your name, photo, company or testimonial in marketing | Consent, given in Part G of the programme agreement or later in writing |
| Connecting LinkedIn and posting on your behalf | Consent, given through LinkedIn's own permission screen |
| Health or other special category information you choose to share | Explicit consent |
| Keeping the platform and community safe, and enforcing our terms | Legitimate interests; legal obligation |
| Meeting legal, regulatory and tax requirements | Legal obligation |
Where we rely on consent, you can withdraw it at any time, for example through the cookie settings link or by emailing us. That does not affect anything we did before you withdrew it.
Where we rely on legitimate interests, we have weighed our interests against yours. You can ask us for details, and you can object (see section 9).
Job applications. If you apply for a role through our careers page, we use your name, contact details, CV and video link only to assess your application, as a step you have asked us to take before a possible contract. Your application is emailed to our founders through Resend and is not shared outside InovaOS.
No automated decisions. We do not make decisions about you with legal or similarly significant effects by automated means alone. A person at InovaOS makes decisions about your place on the programme, payments and the First Client Commitment.
4. The LAUNCH Companion and NOVA
The LAUNCH Companion (app.inovaos.com) is where you work through the programme. NOVA is the AI inside it: it reviews your exercises, answers questions and helps you apply the modules to your own business.
What NOVA processes: the messages, files and tracker data you give it, plus your programme progress so its answers fit where you are.
Who sees it: you, and InovaOS coaches and staff so they can support you. Other participants cannot see your Companion data.
Where it is stored: our app database is hosted by Supabase in London, UK.
AI providers: NOVA's requests pass through OpenRouter, which sends them to Anthropic (Claude models) to write responses, and to OpenAI to index programme content and your entries so NOVA can find what is relevant. They act as our processors. Under their API terms, Anthropic and OpenAI do not use content sent through their APIs to train their models. Our OpenRouter account has prompt logging switched off, and NOVA is locked to Anthropic and OpenAI, so your content is never routed to other AI providers.
No training on your data: we do not use your Companion content to train AI models. We may review anonymised conversations to improve the programme and NOVA's guidance.
Emails from the Companion: sign-in links, reminders and nudges are sent through Resend.
Accuracy: AI outputs are for information, may need checking, and are not professional advice (clause 3.5 of the programme agreement).
LinkedIn data and NOVA. Data received through the LinkedIn connection (section 5) is never sent to NOVA or any AI provider, and only you and your coach can see it.
Please do not enter confidential client information into the Companion unless you are entitled to share it.
5. LinkedIn
If you choose to connect your LinkedIn account in the LAUNCH Companion, we receive, with your permission, the analytics for your own LinkedIn posts (such as impressions and reactions), your name and profile photo, and the ability to publish a post when you press "Post to LinkedIn". We use this only to show you and your coach your progress. We do not sell or share it, or use it for advertising or to train AI models. You can disconnect at any time in the app; we then delete your LinkedIn access straight away and your LinkedIn data within 30 days. If you upload your LinkedIn data export, we read your connections and invitations from it to update your pipeline, and keep only the people and counts the app shows you.
In addition:
Connecting LinkedIn is optional. The programme works fully without it.
We only publish a post when you press "Post to LinkedIn". We never post, message or connect with anyone automatically.
You can also remove the Companion's access from your LinkedIn settings (Settings & Privacy, then Data privacy, then Permitted services). We treat that the same as disconnecting in the app.
We do not combine data received from LinkedIn with data from other sources to build profiles, and we do not scrape LinkedIn.
A LinkedIn data export contains details of your connections. We use those details only to build your own pipeline view, on the basis of our and your legitimate interests. They are never contacted by us and are not shared with other participants.
How LinkedIn itself handles your data is covered by the LinkedIn Privacy Policy.
6. Calls, recordings and testimonials
Strategy sessions. These run on Zoom and are recorded and transcribed with Fathom, an AI note-taker, so we can follow up accurately and improve our service. We tell you at the start of the call. If you would rather not be recorded, say so and we will turn recording off.
Phone calls. We may call or text you through HubSpot after you fill in a form or book a call. HubSpot calls may be recorded, and we tell you when they are.
Check-in calls. Check-in calls with LAUNCH clients are recorded in HubSpot. Only InovaOS staff can play them back, and each playback is logged.
Coaching calls and workshops. Weekly live calls run through Circle and are recorded so members can catch up on sessions they miss. Your name, voice, image and contributions may appear in recordings available to other LAUNCH participants (clause 15.3 of the programme agreement). Recordings stay inside the programme. We do not publish them externally where you can be identified unless you have consented.
Confidentiality. What is said on calls and in the community stays there. Participants agree not to share other members' information (clause 11 of the programme agreement).
Testimonials and case studies. We only use your name, photo, company, logo or testimonial in marketing if you have consented, either in Part G of the programme agreement or later in writing. You can withdraw consent at any time by emailing us. We will then remove it from our website, social channels and adverts within 30 days, but we cannot recall copies others have made. Otherwise we only use anonymised information about your progress, with details that could identify you removed.
7. Who we share it with, and international transfers
We do not sell personal data. We share it only with the people and services below, and only as much as each needs.
| Who | Why | Providers |
|---|---|---|
| InovaOS team and coaches | Delivering coaching and support | InovaOS coaches and staff |
| Websites and app hosting | Running inovaos.com, go.inovaos.io and the LAUNCH Companion, and counting app page views | Vercel (including Vercel Web Analytics), Supabase (London) |
| AI in the Companion | Generating NOVA's responses and search | OpenRouter, Anthropic, OpenAI |
| Internal AI and workspace tools | Preparing follow-ups, notes and programme improvements from call transcripts and records | Anthropic (Claude), Notion, Slack, Google Drive, Superhuman |
| CRM, forms and calling | Managing enquiries, follow-ups, check-in calls and chat messages | HubSpot (EU data centre); respond.io for WhatsApp and other chat channels |
| Advertising and analytics | Measuring and improving our adverts, with your consent | Meta (two pixels and the Conversions API), Google (Analytics and Tag Manager), Hyros, AdsMurai, HubSpot ads (connected to Meta) |
| Booking | Scheduling calls | HubSpot Meetings |
| Calls and recording | Running, recording and transcribing calls | Zoom, Fathom, HubSpot |
| Community and live sessions | Community, events and weekly coaching calls | Circle |
| Communicating with you | Google Workspace, Resend | |
| Payments | Taking and managing payments | Stripe, Whop, PayFunnels |
| E-signature | Signing the programme agreement | DocuSign |
| Fonts | Displaying our websites | Fontshare, Google Fonts (these see your IP address only) |
| Professional advisers | Legal, accounting and tax advice | Our lawyers and accountants, under a duty of confidentiality |
| Authorities | Where the law requires it | Courts, tax authorities, regulators |
Service providers act as our processors under written contracts. They may only use your data on our instructions and must keep it secure. Some act as controllers for part of what they do: Meta is jointly responsible with us for the data its pixel collects, and payment providers such as Stripe and Whop also use payment data for their own fraud and legal duties under their own privacy policies. If InovaOS is reorganised or sold, data may pass to the new owner under this policy.
International transfers. InovaOS is based in the United Arab Emirates and our team accesses data from there. Our app database is in the UK and HubSpot holds our CRM data in the EU, but many providers above are based in the United States, Fontshare serves fonts from India, and respond.io is based in Hong Kong. The UAE, India and Hong Kong do not have UK adequacy decisions. When personal data leaves the UK, we protect it with a recognised safeguard: a UK adequacy decision where one exists, the UK Extension to the EU-US Data Privacy Framework for certified US providers, or the UK International Data Transfer Agreement or Addendum otherwise. You can ask us which safeguard applies to each provider and for a copy.
8. How long we keep it
We keep personal data only as long as we need it, then delete or anonymise it.
| Data | How long |
|---|---|
| Leads, enquiries and chat messages in HubSpot and respond.io, for people who do not join | 2 years from last contact |
| Strategy session recordings, transcripts and summaries, wherever we hold them (Zoom, Fathom, internal tools) | 12 months from the call |
| HubSpot phone and check-in call recordings | 12 months from the call |
| Programme agreement, invoices and payment records | 6 years after the agreement ends, for tax and legal claims |
| LAUNCH Companion records, trackers, pipeline contacts and coaching notes | Your 12-month platform access period, then 2 years. Records needed to assess the First Client Commitment are kept until it is resolved |
| NOVA conversations | Until 30 days after your 12-month platform access ends |
| Coaching call recordings in Circle | While the programme runs, and no longer than 24 months after the call |
| LinkedIn access and data received from LinkedIn | Access deleted at once on disconnecting; LinkedIn data within 30 days (section 5). Contacts taken from an uploaded LinkedIn export follow the Companion records period above |
| Job applications (contact details, CV and video link) | 6 months after we make a decision, unless you ask us to keep your details for future roles |
| Marketing consents and opt-outs | As long as needed to respect your choice |
| Cookie lifetimes | As listed in our Cookie Policy |
| Google Analytics data | 14 months |
| Data held by ad platforms (Meta, Hyros, AdsMurai) | Meta: under Meta's own retention settings. Hyros: while we hold a Hyros account, then deleted under Hyros's terms. AdsMurai: passes events on without keeping long-term logs |
We may keep data longer if the law requires it or if it is needed for a legal claim.
9. Your rights and how to complain
You have the right to:
access a copy of the personal data we hold about you;
correct anything inaccurate or incomplete;
delete your data, where we no longer have a good reason to keep it;
restrict how we use it while a concern is looked at;
object to processing based on legitimate interests, and to direct marketing at any time;
move data you gave us to another provider in a common format;
withdraw consent where we rely on it, including disconnecting LinkedIn.
Email support@inovaos.com to use any of these rights. It is free. We may ask you to confirm your identity. We reply within one month, or tell you within that month if we need up to two more months for a complex request.
Some rights have limits. For example, we must keep invoices for tax purposes even if you ask us to delete them. We acknowledge complaints within 30 days and aim to resolve them within 2 months.
Complaints. Please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113), or the data protection authority where you live.
10. Cookies, security, children, changes and contact
Cookies. We use cookies that are strictly necessary for our sites to work. We only use analytics and advertising cookies, such as Google Analytics, the Meta Pixel and HubSpot tracking, if you agree through our cookie banner. Our Cookie Policy lists them and explains how to change your choice.
Security. We protect personal data with access controls, encryption in transit, and contracts with our providers. Access is limited to people who need it. No system is completely secure, so if a breach is likely to result in a high risk to you, we will tell you without undue delay, and we will tell the regulator as the law requires.
Children. LAUNCH is for professionals aged 18 and over. We do not knowingly collect data from children.
Changes. We may update this policy as our services change. The date at the top shows the latest version. We will tell clients about significant changes by email or in the platform.
Contact. InovaOS Advisory L.L.C-FZ, Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. Email: support@inovaos.com. Our Website Terms and Disclaimer also apply when you use our sites.