Privacy Policy

Last updated August 2026 · Innovex is a pre-launch, early-access product — this policy will be expanded as we grow.

This policy explains what information Innovex collects, why, and how we handle it — including information accessed through Gmail, since connecting Gmail is core to how Innovex works.

What we collect

• Account information: your name, work email, and password (stored securely by our authentication provider, Supabase — we never see or store your password in plain text).
• Gmail data, only if you connect it: OAuth tokens (encrypted at rest and never exposed in plain text), and the subject, snippet, and sender/recipient of messages relevant to proposals, invoices, and client follow-up threads you've asked Innovex to track.
• Workspace and team data: who's on your team, their role, and the follow-up cadence/settings you configure.
• Product usage data: the proposals/invoices you track, drafts generated, and whether you approve, reject, or send them.

How we use it

• To operate the core product: detecting stalled proposals and invoices, drafting follow-up messages, and sending them only after you explicitly approve.
• To maintain your account, trial, and workspace.
• To respond to questions you send us.
• To improve the product — we do not sell your data, and we do not use your Gmail content to train any AI model.

Google user data

Innovex's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used solely to provide the follow-up tracking and drafting features you've connected Gmail for — never for advertising, and never shared with third parties except the infrastructure providers (see below) needed to run the product.

Where data lives

Innovex is built on Supabase (a hosted Postgres database and authentication provider) and deployed on Vercel. Gmail refresh tokens are stored using Supabase Vault, a dedicated encrypted-secret store — application code and staff never handle them in plain text. Draft follow-ups are only sent after a human on your team clicks approve.

Your choices

• Disconnect Gmail at any time from your dashboard's Settings tab — this revokes our access with Google immediately.
• Request deletion of your account and associated data by reaching out via the homepage.
• Approve or reject every drafted follow-up before it sends — nothing goes out automatically without that step unless you explicitly turn it off for a given sequence.

Cookies & analytics

We use minimal local storage to remember your theme (light/dark) and language preference. We may use lightweight, privacy-respecting analytics to understand which pages and buttons are used — this is limited to aggregate click/page events, not personal profiling.

Changes to this policy

As Innovex moves from early access to general availability, this policy will be updated to reflect new features (like billing) and we'll note the date above accordingly.

Contact

Questions about this policy or your data? Reach out via the homepage at theinnovex.tech.

← Back to Innovex