Privacy

This Privacy Notice (this "Notice") describes how Innovus Labs, LLC, a Wyoming limited liability company located at 30 N Gould St, Suite N, Sheridan, WY 82801, United States ("Innovus," "we," "us," or "our"), collects, uses, discloses and protects personal information ("Personal Information"). Innovus develops Celara ("Celara"). Innovus determines the purposes and means of processing the Personal Information described in this Notice and is therefore the controller of that Personal Information.

This Notice applies to Personal Information that Innovus processes for its own purposes: when you visit celara.ai (the "Site"), request our security packet, sign up for updates, book a demonstration, or interact with us as a customer, prospective customer, partner or supplier. Celara and the Site are offered to businesses in the Americas.

This Notice does not apply to data that our customers ("Customers") process using Celara. Celara is installed in each Customer's own cloud account, and that data belongs to the Customer. Where Innovus processes Personal Information on behalf of a Customer, it does so as the Customer's processor, as described in Section 7 (Data Within Celara) and on our Data processing page.

Both forms transmit your details from our server to Verdant, where we retain them. Our application logs record only the domain of the email address (for example, example.com), never the full address or the other details you entered. The forms also use your IP address for a few minutes, held only in memory, to limit repeated submissions.

Cookies. The Site sets one cookie, i18next, which stores your language preference for one year. This cookie is necessary for the Site to function as you requested. We do not use analytics, advertising or tracking cookies or scripts.

Fonts. The Site loads its fonts from Google Fonts. To deliver them, your browser connects to Google's servers, which receive your IP address and browser details. Google's use of that information is governed by Google's privacy policy.

Server logs. Our web server records technical details of each request, such as your IP address, the time, the page requested, and the response and error details, in order to operate and secure the Site.

When you do business with us, we process the contact details and messages you share with us by email, in Slack and in Google Workspace, and the details of the services you purchase.

We may record and transcribe customer calls using Read.ai or Gemini in Google Meet, and we inform participants at the start of a call when it is recorded. We also use AI tools to support sales, support and communications. Read.ai and Gemini may process call recordings and support communications. We use Claude only for Innovus's internal work, and not with customer support content or with data from customers' Celara deployments.

We do not sell Personal Information, and we do not use it to train our own AI models.

We disclose Personal Information only to:

Celara runs in each Customer's own cloud account. Innovus has no access to that account unless the Customer grants support access, and the data in it belongs to the Customer.

Innovus processes certain Personal Information on behalf of Customers: sign-in and directory data through WorkOS; Datahub queries; support data; email sent through Innovus's SendGrid account and connector data through Unipile, if a Customer enables them; and, once those services are live, license records and health telemetry. For that information, the Customer is the controller and Innovus is its processor, acting only on the Customer's instructions under the Data Processing Addendum (the "DPA") published on our Data processing page. If you are a user of a Customer's Celara deployment, you should contact that Customer regarding your information.

Innovus is based in the United States. The Site and the services we operate are hosted in AWS in the United States (us-east-2), and our service providers process information in the United States or in the locations listed on our Subprocessors page. If you are located outside the United States, your Personal Information is transferred to the United States. Where required by law, we protect these transfers with appropriate safeguards, such as standard contractual clauses.

We protect Personal Information using access controls, encryption and monitoring, under written security policies that are reviewed annually. Our Security & trust page describes these measures, and our security packet may be requested there.

Depending on where you reside, you may have the right to access the Personal Information we hold about you, to correct or delete it, to object to or restrict our use of it, to receive a copy of it in a portable format, and to withdraw your consent at any time. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

To exercise any of these rights, email privacy@celara.ai. We may ask you to verify your identity. We respond within 15 days, or sooner where your local law requires. There is no charge for exercising your rights.

You also have the right to lodge a complaint with the data protection authority where you reside, such as the ANPD in Brazil, the Superintendencia de Industria y Comercio in Colombia, or the Office of the Privacy Commissioner of Canada. We encourage you to contact us first so that we can address your concern.

If you reside in a US state with a consumer privacy law, such as California, Colorado, Connecticut, Texas or Virginia, you may have the right to know what Personal Information we collect about you and how we use it, to obtain a copy of it, to correct it and to delete it, and not to be discriminated against for exercising these rights.

In the past 12 months, we collected the following categories of Personal Information: identifiers and contact details, such as name and email address; professional information, such as company and role; internet activity, such as the server logs and language cookie described in Section 3; and audio and video, when we record calls. We collect this information from you, use and disclose it only as described in this Notice, and retain it for the periods stated in Section 9. We do not collect sensitive personal information. We do not sell or share Personal Information, and we do not use it for targeted advertising or profiling; accordingly, there is nothing to opt out of. We nevertheless treat a Global Privacy Control signal as a request to opt out.

To exercise these rights, email privacy@celara.ai. You may use an authorized agent; we may ask you or your agent to verify your identity and the agent's authority. If we decline your request, you may appeal by replying to our response, and we will respond to your appeal within 45 days.

The Site and our services are intended for businesses and are not directed at individuals under 18 years of age. We do not knowingly collect Personal Information from individuals under 18 years of age.

We will update this Notice when our practices change and will revise the date below. We will identify any significant change on this page before it takes effect.

Innovus Labs, LLC, 30 N Gould St, Suite N, Sheridan, WY 82801, United States. Privacy questions and requests may be sent to privacy@celara.ai, and security matters to security@celara.ai.