Who we are
InnoQualis Ltd ("InnoQualis", "we") is a company registered in the United Kingdom. We are the data controller for personal data collected through innoqualis.com, docs.innoqualis.com and our campaign emails. For the InnoQualis application at hub.innoqualis.com we act as a processor on behalf of the customer organisation that holds the account; that relationship is governed by the customer agreement and data processing addendum.
You can reach us about anything on this page at contact@innoqualis.com.
What we collect and why
When you request early access or contact us. Your work email address, and the company name and role if you give them. When you request early access you can also tell us, if you choose, your company's size and industry, how many people would use the platform, how many QA staff and testers you have, and whether you would like a demo. These details describe your organisation rather than you, and we use them to tailor the demo and onboarding. We use your contact details to reply to you and to tell you when access opens. Lawful basis: our legitimate interest in answering a request you made. Requesting early access does not subscribe you to marketing. The form has a separate checkbox, "Subscribe to marketing and promotional offers", which is unticked by default. Only if you tick it do we add you to our marketing list, on the basis of your consent, which you can withdraw at any time by using the unsubscribe link in any email or by replying.
When you accept analytics. Only after you accept the cookie notice on the site do we record page views and interaction events (clicks, scroll and pointer movement) to understand how the site is used. Nothing is recorded if you decline. Lawful basis: consent. See the Cookie Notice.
When you use the site at all. Our web server keeps standard access logs (IP address, browser type, requested page, time) for security and troubleshooting, and deletes them after 30 days. Analytics events recorded with your consent are kept for 12 months and then deleted. Lawful basis for logs: our legitimate interest in keeping the site secure.
When your organisation uses the application. Account details (name, work email, role) and the quality records your organisation creates. We process these only on your organisation's instructions and under the customer agreement. Records are retained for 10 years after an account is decommissioned unless the customer agreement says otherwise, because quality records are subject to regulatory retention obligations.
Who we share it with
We do not sell personal data and we do not share it for advertising. We use a small number of service providers to run InnoQualis, each under a contract that limits what they may do with the data:
| Provider | What for | Where |
|---|---|---|
| OVHcloud (our servers) | Hosting the application — Frankfurt, Germany; the migration from our previous host is in progress | European Union |
| Hetzner Online GmbH and Backblaze | Encrypted backup copies of the application | European Union |
| Cloudflare | DNS for innoqualis.com (content delivery and access control planned) | Global network, EU data localisation |
| Microsoft 365, contracted through GoDaddy for the current term | Sending and receiving email | European Union |
| Stripe | Payments for application subscriptions | United States and European Union; Stripe's own privacy notice applies on their pages |
| OpenAI | AI features in the application, only when a user triggers one. A customer can ask us to turn AI features off for its workspace, after which the application refuses every AI feature for that workspace | United States, under EU Standard Contractual Clauses and the UK Addendum |
| Anthropic and GitHub | Bug reports sent through the in-app feedback form: Anthropic's AI model may help triage a report and draft a fix, and the fix is proposed as a pull request on GitHub. A screenshot is used only if you attach one, is never copied into code or a pull request, and is deleted once the report is closed | United States, under EU Standard Contractual Clauses and the UK Addendum |
The full list of sub-processors for the application, with data flows and agreements, is published at docs.innoqualis.com/trust and updated before any new provider is added.
Where data is held
Application data is hosted in the European Union (OVHcloud, Frankfurt — migration in progress) with encrypted backup copies held independently in the EU. Data is encrypted in transit (TLS 1.2 or higher); backups are encrypted before they leave the production host. The full data-processing terms are in our Data Processing Agreement.
Your rights
Under UK data protection law you can ask us to: access the personal data we hold about you; correct it; delete it; restrict or object to how we use it; and give you a copy in a portable format. Where we rely on consent you can withdraw it at any time. Email dpo@innoqualis.com, or contact@innoqualis.com if you prefer; we respond within one month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
If you are in California, see Do Not Sell or Share My Personal Information for the rights that apply to you.
Children
Our sites and application are for businesses and are not directed at anyone under 16. We do not knowingly collect personal data from children.
Changes to this policy
We update this page when our practices change and note the date of the last review below. Significant changes are announced by email to people who have asked to be kept informed.
Last reviewed 10 October 2026.