Privacy Policy

Last updated: July 11, 2025

Version 1.0 | Date: July 11, 2025

initIA - AI Agents for Business

1. Introduction

This Privacy Policy describes how northnode OÜ, owner of initIA ('initIA', 'we', 'us', or 'our'), collects, uses, and protects your personal information when you use our intelligent automation services for small and medium enterprises.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use our services.

2. Data Controller

The data controller responsible for your personal data is:

northnode OÜ

Registry code: 17119707

Address: Telliskivi tn 57 10412, Tallinn, Estonia

Email: initia.agenti@gmail.com

WhatsApp: +39 351 743 0261

For any questions regarding data protection, you can contact us through the above channels.

3. Data We Collect

We collect the following types of information:

3.1 Information You Provide:

• Business contact information (name, email, phone number)

• Company details (business name, industry, services)

• Content for automation (FAQs, business hours, pricing, promotional messages)

• Communication preferences and requirements

3.2 Automatically Collected Information:

• Usage data of our automation services

• Technical information (IP address, browser type, device information)

• Service performance and interaction logs

• Cookies and similar tracking technologies

3.3 Third-Party Platform Data:

• WhatsApp Business account information

• Telegram account information

• Integration data from CRM, booking, or payment systems (when applicable)

4. Legal Basis for Processing

We process your personal data based on:

• Contract Performance: To provide our automation services as agreed

• Legitimate Interest: To improve our services, provide support, and ensure security

• Consent: For marketing communications and optional integrations

• Legal Obligation: To comply with accounting, tax, and regulatory requirements

5. How We Use Your Data

We use your personal data to:

• Configure and operate intelligent agents according to your specifications

• Provide customer support and technical assistance

• Process payments and maintain billing records

• Improve our services and develop new features

• Comply with legal and regulatory obligations

• Send service-related communications

• With your consent, send marketing communications about our services

6. Data Sharing and Disclosure

We may share your data with:

6.1 Service Providers:

• Cloud hosting providers (with appropriate data processing agreements)

• Payment processors for billing purposes

• Technical support and maintenance providers

6.2 Third-Party Platforms:

• WhatsApp, Telegram, and other messaging platforms as necessary for service delivery

• CRM, booking, or payment systems when integration is requested

6.3 Legal Requirements:

• When required by law, court order, or regulatory authority

• To protect our rights, property, or safety, or that of others

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

7. Data Retention

We retain your personal data for as long as necessary to:

• Provide our services during the contract period

• Comply with legal obligations (typically 7 years for business records)

• Resolve disputes and enforce our agreements

Specific Retention Periods:

• Active service data: Duration of contract + 1 year

• Billing and payment records: 7 years

• Support communications: 3 years

• Marketing consent records: Until consent is withdrawn + 1 year

After the retention period, we securely delete or anonymize your data.

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit and at rest

• Access controls and authentication systems

• Regular security assessments and updates

• Staff training on data protection

• Incident response procedures

• Secure data centers with physical security measures

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request copies of your personal data

• Right to Rectification: Request correction of inaccurate data

• Right to Erasure: Request deletion of your data (subject to legal obligations)

• Right to Restrict Processing: Request limitation of data processing

• Right to Data Portability: Request transfer of your data

• Right to Object: Object to processing based on legitimate interests

• Right to Withdraw Consent: Withdraw consent for processing (where applicable)

To exercise these rights, contact us at initia.agenti@gmail.com. We will respond within 30 days.

10. Cookies and Tracking

Our website uses cookies and similar technologies:

Essential Cookies: Required for website functionality

Analytics Cookies: To understand website usage and improve performance

Preference Cookies: To remember your language and settings

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place:

• Adequacy decisions by the European Commission

• Standard Contractual Clauses (SCCs)

• Binding Corporate Rules

• Certification schemes

We ensure that any international transfers comply with applicable data protection laws.

12. Contact Information

For any questions about this Privacy Policy or our data practices, contact us:

Email: initia.agenti@gmail.com

WhatsApp: +39 351 743 0261

Address: northnode OÜ, [Company Address], Estonia

Data Protection Officer: Available upon request for enterprise clients

If you are not satisfied with our response, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate or your local supervisory authority.