Privacy Policy

1. Introduction

Innova Flow (“we,” “our,” or “us”) operates the website and platform at innovaflow.app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. By using Innova Flow, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, phone number, business name, and business type when you create an account.
• Media Content: Photos, voice recordings, and videos you upload for AI avatar creation and content generation.
• Social Media Data: When you connect your Facebook or Instagram accounts, we access your pages, ad accounts, and posting permissions as authorized by you through the Meta OAuth process.
• Payment Information: Billing details processed securely through Stripe. We do not store your credit card information on our servers.
• Usage Data: Information about how you interact with our platform, including pages visited, features used, and performance metrics.
• Lead Data: Information about leads generated through your ad campaigns, including name, phone number, email, and source.

3. How We Use Your Information

• To create and manage your AI avatar and voice clone for content generation.
• To generate, schedule, and publish marketing content on your connected social media accounts.
• To create and manage advertising campaigns on your behalf through the Meta Marketing API.
• To provide AI-powered lead management and automated follow-up services.
• To process payments and manage your subscription.
• To communicate with you about your account, updates, and support.
• To improve our platform and develop new features.

4. Third-Party Services

We use the following third-party services to operate our platform:

• Meta (Facebook/Instagram): For social media posting and ad campaign management. Subject to Meta's Data Policy.
• Stripe: For payment processing. Subject to Stripe's Privacy Policy.
• Supabase: For secure data storage and authentication.
• OpenAI: For AI content generation. Content is processed but not used for training.
• ElevenLabs: For voice cloning and synthesis.
• HeyGen: For AI avatar video generation.
• Vercel: For hosting and infrastructure.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We only share your data with the third-party service providers listed above, solely for the purpose of delivering our services to you. We may disclose your information if required by law or to protect our rights.

6. Facebook & Instagram Data

When you connect your Facebook or Instagram account, we request only the permissions necessary to provide our services. You can revoke access at any time through your Facebook Settings or through the Innova Flow dashboard. We access your data exclusively to post content and manage ads on your behalf. We do not access your personal messages, friends list, or any data beyond the authorized scope.

7. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), encrypted storage, and secure authentication. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it. AI-generated content and media files will be permanently deleted upon account termination.

9. Your Rights

You have the right to:

• Access and review your personal data.
• Request correction of inaccurate information.
• Request deletion of your data and account.
• Disconnect your social media accounts at any time.
• Export your data in a portable format.
• Opt out of marketing communications.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: