Privacy Policy

1. Who we are

Inovex Technologies Limited is the data controller responsible for the personal data described in this policy, except where we act as a data processor on behalf of our business customers (see “When we act as a processor”). You can reach us at:

Inovex Technologies Limited
Peel House, Suite 138
30 The Downs, Altrincham
England, WA14 2PX
Email: info@inovex-tech.com

2. Information we collect

Information you provide to us

This includes your name, email address, company name, job role, phone number, account login details, billing information, the email address you submit to join our waitlist, and any content or correspondence you send us (for example, support enquiries).

Information we collect automatically

When you use our website or platform we automatically collect technical information such as your IP address, device and browser type, pages viewed, referring pages, and usage and log data, including through cookies and similar technologies (see “Cookies”).

Information we receive from third parties

Where you connect a third-party service to Lead2Case — such as a Meta (Facebook, Instagram or WhatsApp) account, an email provider, or a telephony service — we receive data from that service as authorised by you. For example, when you import leads from a Meta lead generation form, we receive the contact details those individuals submitted. We may also receive limited information from analytics and advertising partners.

3. When we act as a processor

When our business customers use Lead2Case to manage their own leads and clients, those customers are the data controller for the personal data they upload or collect through the platform, and we act as a data processor on their behalf, following their instructions.

If you are an individual whose information has been entered into Lead2Case by one of our customers, please direct any privacy requests to that customer in the first instance. We will support them in responding to your request.

4. How we use your information

We use personal data to:

provide, operate, maintain and secure the Services;
create and administer accounts and process payments;
manage our waitlist and contact you about early access and product updates;
respond to your enquiries and provide customer support;
send service communications and, where permitted or with your consent, marketing messages (which you can opt out of at any time);
analyse usage to understand and improve the Services;
provide AI-assisted features (see “Artificial intelligence”);
detect, prevent and address fraud, abuse and security issues; and
comply with our legal obligations.

5. Legal bases for processing

Under the UK GDPR we rely on the following legal bases to process personal data:

Performance of a contract — to provide the Services and manage your account.
Legitimate interests — to operate, improve and secure our Services and carry out business-to-business marketing, balanced against your rights and interests.
Consent — for certain cookies and marketing, where required. You can withdraw consent at any time.
Legal obligation — to meet our accounting, tax and other legal requirements.

6. Artificial intelligence

Lead2Case uses artificial intelligence and automated processing to help you work more efficiently — for example, to qualify and prioritise leads, generate summaries and suggested next steps, and automate routine administrative tasks. We aim to be transparent about how this works:

What the AI operates on — AI features process the information held in your account to generate the outputs you request.
No training on your data — we do not use your personal data, or the personal data of your customers, to train third-party foundation models. Where we use third-party AI providers, they are contractually prohibited from using your data to train their models.
Human oversight — AI outputs are suggestions to support your team, not final decisions. We do not make decisions that produce legal or similarly significant effects about an individual based solely on automated processing without appropriate safeguards, including the ability to request human review.
Trusted providers — any AI providers we use act as our sub-processors under contracts that require appropriate security and confidentiality, and we process data within the EU where reasonably practicable.

We share personal data only as needed and with appropriate safeguards:

Service providers and sub-processors — such as hosting and infrastructure, email delivery, payment processing, analytics and AI providers, who process data on our behalf under written contracts.
Platform integrations you enable — including Meta (see below).
Legal and protection — where required to comply with the law, respond to lawful requests, or protect our rights, users or the public.
Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.

We do not sell your personal data.

8. Third-party platforms (including Meta and WhatsApp)

Our Services integrate with third-party platforms, including Meta Platforms (Facebook, Instagram and WhatsApp). Where you connect a Meta account or we access data through Meta’s APIs — for example, to import leads from lead generation forms — we handle that information in accordance with Meta’s Platform Terms and Developer Policies, and only use it to provide the features you have enabled.

WhatsApp. Lead2Case integrates with the WhatsApp Business Platform so you can communicate with your leads and clients over WhatsApp. Where you enable this feature, we process the information needed to send and receive those messages — including phone numbers, message content, and related delivery and status information — through Meta’s WhatsApp Business infrastructure, in accordance with Meta’s and WhatsApp’s business terms and policies. WhatsApp messaging operates on an opt-in basis, recipients can opt out at any time, and we use this information only to deliver the messaging features you have enabled. We do not use the content of WhatsApp messages for unrelated purposes, and we do not sell it.

We do not use data obtained through Meta for any purpose that is incompatible with this policy, and we do not sell it. You can disconnect an integration at any time, and you may request deletion of data obtained through it (see “Data deletion”).

9. Where we store your data

We host and store personal data on infrastructure located within the European Union (EU). As a UK-based company, our staff and systems may access this data from the United Kingdom. Transfers of personal data between the UK and the EU are permitted under applicable adequacy decisions.

Where we need to transfer personal data to a country without an adequacy decision, we put appropriate safeguards in place, such as Standard Contractual Clauses (with the UK Addendum where relevant).

10. Data retention

We keep personal data only for as long as necessary for the purposes set out in this policy, or as required to meet legal, accounting or reporting obligations. Waitlist details are kept until launch or until you ask us to remove them. Account data is generally retained for the life of the account and for a limited period afterwards. When data is no longer needed, we securely delete or anonymise it.

11. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. These include encryption of data in transit, access controls, and regular review of our practices. No method of transmission or storage is completely secure; where we are required to by law, we will notify you and the relevant authorities of a personal data breach.

12. Your rights

Subject to certain conditions, you have the following rights under the UK GDPR:

access a copy of the personal data we hold about you;
request correction of inaccurate or incomplete data;
request erasure of your data (the “right to be forgotten”);
restrict or object to certain processing;
request portability of data you provided to us;
withdraw consent where processing is based on consent; and
not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

To exercise any of these rights, email info@inovex-tech.com. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.

13. Data deletion

To request deletion of your personal data — including any data we have obtained through a connected platform such as Meta — email us at info@inovex-tech.com with the subject “Data deletion request”. We will verify your request and delete the relevant data, unless we are required to retain it to comply with a legal obligation.

14. Cookies

We use cookies and similar technologies that are necessary to operate our website, and — with your consent where required — cookies that help us measure and improve how the site is used. You can control or delete cookies through your browser settings; blocking some cookies may affect how the site works.

15. Children’s privacy

Our Services are intended for businesses and are not directed to children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

16. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where changes are material, take reasonable steps to notify you.

17. Contact us

If you have any questions about this policy or how we handle your personal data, please contact us: