Privacy Policy

Effective: February 12, 2026 | Last updated: February 12, 2026

1. Introduction

InnoventuresAI Inc ("we," "our," or "us") operates Springbase, a multi-model AI chat platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

We are committed to protecting your privacy and handling your data responsibly. By using Springbase, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account using Google OAuth, we collect:

  • Your name
  • Email address
  • Profile picture (if provided by Google)
  • Google account identifier

Chat Data

We collect and store your conversations with AI models, including:

  • Your messages and prompts
  • AI-generated responses
  • Conversation metadata (timestamps, model used)
  • Any files or images you upload

Usage Data

We automatically collect information about how you use Springbase:

  • Credits usage and subscription status
  • Feature usage patterns
  • Session duration and frequency
  • Model preferences

Payment Information

When you subscribe to our paid plans, payment information is processed by Stripe. We do not store your full credit card number, CVV, or other sensitive payment details. We only receive:

  • Transaction status and history
  • Last four digits of your card (for display purposes)
  • Billing address
  • Subscription status

Device and Technical Data

We collect technical information including:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Timezone and language preferences
  • Referring website

Cookies and Tracking Technologies

We use cookies and similar technologies for:

  • Session management and authentication
  • Remembering your preferences
  • Analytics and performance monitoring
  • Personalization

3. How We Use Your Information

We use the collected information for the following purposes:

  • Providing the Service: Processing your requests, generating AI responses, and maintaining your conversation history
  • Account Management: Creating and managing your account, authenticating your identity, and processing subscriptions
  • Payment Processing: Managing subscriptions, processing payments, and handling billing inquiries
  • Service Improvement: Analyzing usage patterns to enhance features, fix bugs, and improve user experience
  • Communication: Sending service updates, security alerts, and responding to support requests
  • Legal Compliance: Meeting our legal obligations and enforcing our terms

4. Third-Party Data Sharing

We share your information with the following third parties:

AI Model Providers

Your chat messages are sent to AI model providers to generate responses. These include:

  • OpenAI (GPT models)
  • Anthropic (Claude models)
  • Google (Gemini models)
  • Other AI providers as we add new models

Each provider has their own privacy policy governing how they handle your data. We recommend reviewing their policies for more information.

Payment Processor

We use Stripe to process payments. Stripe's handling of your payment information is governed by their Privacy Policy.

Analytics Providers

We may use analytics services to understand how users interact with our service. These services collect anonymized or aggregated data about usage patterns.

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Retention

We retain your information for specific periods based on the type of data and our legal obligations:

  • User Profiles: Retained while your account is active. Upon account deletion, profile data is permanently deleted within 30 days.
  • Chat Messages: Retained until you delete individual conversations or your account is deleted. Deleted messages are permanently removed within 30 days.
  • Payment Records: Retained for 7 years as required by applicable tax and financial regulations.
  • API Usage Logs: Retained for 90 days, then permanently deleted.
  • Authentication Logs: Retained for 90 days for security monitoring purposes, then permanently deleted.
  • Analytics Data: Server-side analytics logs are retained for 90 days. Data is pseudonymized after 30 days by removing direct identifiers. Third-party analytics (Google Analytics GA4) data is managed by Google with a default retention of 14 months.
  • Security Event Logs: Retained for 365 days for security monitoring and incident investigation purposes, then permanently deleted.
  • Data Access Logs: Retained for 180 days for audit and compliance purposes, then permanently deleted.
  • Consent Records: Retained for 3 years from the consent action or until consent is withdrawn, whichever applies. Consent records may be retained beyond account deletion to demonstrate compliance with legal obligations.
  • Marketing Consent Records: Retained until consent is withdrawn, or 3 years from your last interaction with the service, whichever occurs first.
  • File Uploads: Retained until you delete them or your account is deleted. Deleted files are permanently removed within 30 days.

You may request deletion of your data at any time by using the data export and deletion tools in your account settings, or by contacting us at support@innoventuresai.com.

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption of data in transit using TLS/SSL
  • Encryption of data at rest
  • Secure authentication via Google OAuth
  • Regular security assessments and monitoring
  • Access controls limiting employee access to personal data

Our infrastructure is hosted on Supabase, which provides enterprise-grade security and compliance certifications.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your personal data and account
  • Export: Request a portable copy of your data
  • Opt-Out: Opt out of marketing communications
  • Restriction: Request restriction of processing in certain circumstances

You can exercise your right to data export directly from your account settings. For other requests, please contact us at support@innoventuresai.com. We will respond to your request within 30 days.

8. Cookies and Tracking

Essential Cookies

Required for the service to function, including authentication and session management. These cannot be disabled.

Analytics Cookies

Help us understand how users interact with Springbase. These collect anonymized data about usage patterns.

Preference Cookies

Remember your settings and preferences, such as theme selection and model preferences.

Marketing Cookies

Used for attribution tracking and referral program functionality. These cookies help us understand how users discover Springbase.

Managing Cookies

When you first visit Springbase, you will see a cookie consent banner that allows you to accept or reject non-essential cookies. You can also manage your cookie preferences at any time through your browser settings. Note that disabling essential cookies may affect the functionality of Springbase.

9. Children's Privacy

Springbase is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@innoventuresai.com.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located.

These countries may have data protection laws that differ from your country. By using Springbase, you consent to the transfer of your information to these countries.

We take appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Effective" date at the top
  • Sending you an email notification for significant changes

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of Springbase after changes are posted constitutes acceptance of the updated policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

InnoventuresAI Inc
Email: support@innoventuresai.com

We will respond to your inquiry within 30 days.