Privacy Policy

Informative translation. In case of any discrepancy, the Spanish version prevails.

At INNOV4 AI we build digital products. This policy explains, plainly, what personal data we process when you visit https://innov4ai.com, what we use it for, who we share it with, and what you can demand from us.

It is written in accordance with Ley N.° 29733, Ley de Protección de Datos Personales (Law No. 29733, Personal Data Protection Law), and its regulations (Reglamento) approved by Decreto Supremo N.° 016-2024-JUS (Supreme Decree No. 016-2024-JUS), in force since March 31, 2025.

An honest summary in three lines:

• This site does not use first-party cookies or advertising pixels, and we do not track you. We measure visits only in aggregate and anonymously with Cloudflare Web Analytics, which does not use cookies and does not identify you.
• The contact form does not send us anything: it opens your own email program, and you decide whether to send.
• The idea you write in the Concept Engine travels to an AI provider in the United States to generate the response, is not stored in any database of ours, and is not used to train models.

---

1. Who is responsible for your data

The owner of the personal data bank and controller of the processing is:

If you need to talk to us about privacy, write to proyectos@innov4ai.com. That is the official channel.

INNOV4 AI S.A.C. registers its personal data banks in the Registro Nacional de Protección de Datos Personales (National Personal Data Protection Registry, RNPD), the public registry created by article 34 of Law No. 29733 and run by the Autoridad Nacional de Protección de Datos Personales (National Authority for Personal Data Protection), where anyone can check whether a data bank exists, its purpose, and the identity of its owner. The registration corresponding to the data described in this policy is in the process of being updated; once it is complete, we will publish its registration code here.

---

2. What data we process and why

We process data in three situations, and only three. We explain them one by one.

2.1 When you write to us through the contact form

The first thing you should know: the form does not send us your data.

When you fill in the form and click "Prepare message", the site does not transmit anything to any server. What it does is open the email program on your own device with a message already drafted. The data you entered stays on your device. We receive it only if you decide to send that email.

Important: we do not use your contact data to send you advertising or marketing campaigns. If we ever wanted to do so, we would first ask you for specific, separate authorization, as Peruvian regulations on commercial communications require.

2.2 When you use the Concept Engine

The Concept Engine is the tool on the home page where you write a product idea and receive an initial, indicative architecture. Because it runs on artificial intelligence, it deserves a detailed explanation.

What happens to the text of your idea:

1. The text you write is sent to our server and from there to an artificial intelligence model that generates the response.
2. The main provider that runs that model is Anthropic, PBC, with its Claude Haiku 5.5 model (claude-haiku-5-5), which we access through its commercial API service. Anthropic is headquartered in the United States. The call leaves our server, not your browser, and we send Anthropic only the text of your idea: not your IP address, not your name, not your email.
3. If Anthropic fails or does not respond in time, the response is generated automatically by our backup provider, Cloudflare, Inc., through its Workers AI service, with the model llama-3.1-8b-instruct-fast. That processing takes place on Cloudflare infrastructure (Cloudflare is headquartered in the United States).
4. We do not store your idea. There is no database, file, or log of ours where it is kept. Our technical logs record only that a request occurred, which engine resolved it, and, when Anthropic responds, how many units of text (tokens) it consumed; never the content of what you wrote.
5. We do not use it to train models. We do not do so ourselves. Anthropic's commercial terms prohibit it from training models on the content we send through its API, and Cloudflare states in its Workers AI terms that it does not use that content to train models without the customer's express authorization.
6. What the provider retains. Although we do not store your idea, Anthropic does retain it for a limited time: under its policy for API customers, it automatically deletes the text received and the response generated from its systems within 30 days. It may keep them longer —up to two (2) years— if its automated safety systems detect that the request violates its usage policy, or when the law requires it.
7. If no AI provider is available, the response is generated by our own rules engine, which works without artificial intelligence. The interface always tells you which provider processed your idea or whether the rules engine responded.

A third AI provider is planned: the system contemplates using Groq, Inc. (United States) as an additional alternative. As of the date of this version, that tier is disabled, but we declare it now because it could be activated. If it is activated, your idea could be processed by Groq instead of Anthropic or Cloudflare. The interface always indicates which provider processed your request.

We ask one specific thing of you: the Concept Engine is a free-text box. Do not write personal data there —yours or anyone else's—, nor confidential information, nor trade secrets. Describe the idea to us, not the people. If you need to tell us something sensitive, write to us by email.

2.3 When you simply browse the site

For any web page to reach your screen, the server needs to know your IP address. This is a technical condition of the connection, not a decision of ours.

The site is hosted on the infrastructure of Cloudflare, Inc., which processes that connection data to serve the pages and protect the site against attacks.

In addition, we measure use of the site in aggregate with Cloudflare Web Analytics, a service of the same Cloudflare, Inc.:

Because these figures neither identify you nor make you identifiable, they are not personal data and we do not ask for your consent to obtain them. We tell you anyway so that you know exactly what happens.

Beyond that, we do nothing else: we do not install first-party cookies, we do not use advertising pixels, we do not record your session, and we do not create profiles. The site only stores in your browser a technical marker containing no personal data (innov4.bb) so the welcome animation is not repeated on the home page. The full detail, including the security cookies that Cloudflare may exceptionally place, is in the Cookie Policy.

---

3. Who we share your data with

We do not sell personal data. We do not transfer it for commercial purposes. The only third parties involved are providers that act as data processors, that is, they process data on our behalf and following our instructions.

We might also disclose data to competent authorities when a rule with the force of law or a court order obliges us to do so.

---

4. International data transfer (cross-border flow)

Yes, there is an international transfer, and we want you to know it clearly.

All of our providers are headquartered in the United States, a country that has not been declared by the Peruvian authority to have an adequate level of protection. This means your data leaves the national territory. The text of Concept Engine ideas is sent first to Anthropic, PBC and, only if it fails, to Cloudflare. Anthropic may rely on its own infrastructure subprocessors, whose list it publishes at https://www.anthropic.com/subprocessors.

This transfer is based on:

• Your informed consent, which you give by sending us the email or by using the Concept Engine after reading this policy.
• The contractual safeguards that the providers offer through their data processing agreements, which require security measures and limit the use of the information to the controller's instructions. In Anthropic's case, its data processing agreement (Data Processing Addendum) is part of its commercial terms and obliges it to process the data only to provide the service and following our instructions.

If you do not agree with this transfer, do not use the Concept Engine and contact us by other means.

---

5. How long we keep your data

Once the period has elapsed, the data is deleted or anonymized.

---

6. Your rights (ARCO and others)

As the owner of your personal data you may exercise the following rights, free of charge. The response periods are those set by Peruvian regulations and are counted in business days from the day after your request is submitted.

How to exercise them

Write to proyectos@innov4ai.com stating:

1. Your full name and a document proving your identity.
2. The right you want to exercise.
3. A clear description of your request.
4. The address (physical or electronic) where you want to receive the response.

If your request is incomplete, we will tell you so that you can correct it.

If you are not satisfied

You may turn to the Autoridad Nacional de Protección de Datos Personales (National Authority for Personal Data Protection, ANPDP) of the Ministerio de Justicia y Derechos Humanos (Ministry of Justice and Human Rights), through the rights-protection procedure.

• Web: https://www.gob.pe/7466-autoridad-nacional-de-proteccion-de-datos-personales
• Email: registropdp@minjus.gob.pe
• Phone: (01) 204 8020, extension 2410

---

7. Security

We apply technical and organizational measures to protect the data. Specifically, and verifiable in the way the site itself works:

• All traffic travels encrypted over HTTPS.
• The Concept Engine does not store the content of queries, so there is no repository that could be compromised.
• Technical logs are generated without including the text of visitors' ideas.
• There is a limit on requests per source that protects the service against abusive use.
• Credentials for external services are managed as platform secrets and do not appear in the source code.

No security measure is infallible. If we detect a breach affecting your personal data, we will notify the ANPDP and the affected individuals within 48 hours of becoming aware of the incident, as the current Regulations require.

---

8. Minors

This site is aimed at businesses and professionals. It is not intended for minors and we do not knowingly collect data from minors. If we detect that we have received data from a minor without the authorization of their parents or guardians, we will delete it.

---

9. Automated decisions

The Concept Engine generates text with artificial intelligence, but it makes no decision about you. It does not evaluate your profile, does not score you, does not condition access to any service, and produces no legal effects. It is an indicative tool for exploring ideas.

---

10. Changes to this policy

If we change the way we process data —for example, if we activate the alternative AI provider, if we incorporate analytics or advertising tools that identify or follow you, or if we add a form that does send information to our servers— we will update this policy, increase the version number, and change the date.

We recommend that you review it from time to time. Substantial changes will be announced visibly on the site.

---

Version history