Privacy Policy

Last updated: September 8, 2026

Innovate-Ops ("we", "us") is a Canadian company based in Kitchener, Ontario. We take privacy seriously and handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).

This policy covers the innovate-ops.com website and enquiries submitted through our Facebook and Instagram lead forms. Equipment and operational data processed through the Innovate-Ops Platform for our customers is governed by our customer agreements and security documentation, not this policy.

What we collect

Information you give us

When you book a demo or contact us through our website form, we ask for your name and work email. You can optionally share your company, role, equipment type, scale and a message. We use this information only to respond to your inquiry and set up the demo or deployment you asked about.

If you use the "Ask Octopus" chat on this site, your questions are answered by an AI assistant and are stored along with the answers so we can improve how the assistant and the site answer real questions. The chat is for product questions — please don't share confidential or sensitive information in it. If the assistant is unavailable and you choose to leave your email, that inquiry is handled like a contact-form inquiry.

Facebook and Instagram enquiries

If you submit a Facebook or Instagram lead form to request information from Innovate-Ops, the details you submit are stored in Meta lead tools and accessed by Dennis to respond manually to your request. Submitting that form does not create an OctoVault account or subscribe you to a newsletter.

Information collected automatically

• Campaign attribution. If you arrive with campaign parameters, such as UTM tags or an ad click ID, we use them to understand which campaign brought you to us. When optional advertising storage is allowed, on OctoVault pages we store the campaign information for your first touch and your most recent paid touch in a first-party browser cookie. We use the most recent paid touch as our headline attribution. Intended browser retention is 90 days on Chrome and Android, 7 days on Safari; Safari may shorten this to 24 hours for some paid-link arrivals. When optional advertising storage is allowed, on other pages campaign parameters may be kept in session storage and are discarded when you close the browser tab. These records do not include your name or email, and you can delete them through your browser settings.
• Site analytics. We measure how the site is used with Google Analytics 4 (pages viewed, buttons clicked, demo bookings started). Analytics uses cookies or similar identifiers; the data we look at is aggregated and we do not use it to identify you personally.
• Platform usage analytics. When you sign in to the customer portal, we record login events, page views and approximate dwell time to understand how the platform is used and to improve it. This data is associated with your account and organization, is not shared with third parties, and is accessible to Innovate-Ops and your organization's administrator.
• Technical logs. Like most websites, our hosting infrastructure records basic technical information (such as IP address and browser type) for security and reliability.

With your analytics consent, we use Microsoft Clarity for session replay and heatmaps to understand how pages are used, with typed text masked.

Your website privacy choices

Use Privacy & measurement in the footer to accept or reject optional advertising and analytics cookies and browser storage. Both choices are available equally. We remember an explicit choice in the first-party ov_consent cookie, intended to last 180 days; browser restrictions or deletion may shorten that period. The cookie stores the preference version, four consent settings and a timestamp, not your name or email. Necessary site operation and the preference itself do not depend on accepting optional storage.

There is no automatic privacy banner. Open Privacy & measurement in the footer to accept or reject optional storage. Google Analytics and Google Ads measurement use their configured regional defaults: optional analytics and advertising storage is denied by default in the European Economic Area, United Kingdom, Switzerland and Quebec, and granted by default elsewhere. Google may still send cookieless measurements when storage is denied. Session replay is different: it starts only after you accept analytics, including a saved acceptance; a regional default does not start replay. Rejecting optional storage stops our website attribution persistence and the forwarding of stored Meta browser identifiers; it does not stop you creating an account. Campaign parameters already on the current page may travel with an app link together with your advertising-data and personalization settings. The app handles its own privacy choices. Google tags may send cookieless measurements when storage is denied; rejection does not mean that all network requests stop.

This consent feature makes no separate third-party IP-location lookup. A browser preference is not guaranteed to survive browser data clearing, private browsing or browser retention limits.

How we use your information

• To respond to your inquiry and schedule the demo or deployment you requested.
• To operate, secure and improve this website.
• To understand which marketing brings visitors to us.

We never sell your personal information. We do not share it with third parties for their own marketing.

Email and CASL

We send commercial electronic messages only with your consent — for example, when you submit our form asking us to contact you. Every message identifies Innovate-Ops, includes our contact information, and you can ask us to stop at any time (every marketing message includes a way to unsubscribe, and you can always just reply or email us). We honour unsubscribe requests promptly, as CASL requires.

Where your information lives and who can see it

Inquiries submitted through our website form are stored on Google Cloud infrastructure, with Canada as our primary data region, and an email notification goes to our team. Service providers such as Google process data on our behalf under contractual safeguards; some processing (for example, content delivery and analytics) may occur outside your province or country, where it is subject to local laws. Access within Innovate-Ops is limited to the people who handle your inquiry.

We may disclose personal information if required by law or a valid legal process.

Retention

We keep inquiry information for as long as needed to handle your request and the business relationship that may follow, and as required by law. If you'd like your information deleted, email us and we'll remove it unless we're legally required to keep it.

Safeguards

Personal information is protected with industry-standard safeguards, including encryption in transit, encryption at rest on our cloud infrastructure, and access controls limiting who on our team can see it.

Your rights

Under PIPEDA you may ask us what personal information we hold about you, request a correction, or withdraw your consent to our use of it. Contact us at the address below and we'll respond promptly. You also have the right to complain to the Office of the Privacy Commissioner of Canada.

Children

This website is intended for businesses and is not directed at children.

Changes to this policy

If we change this policy, we'll post the new version here with an updated date.