Privacy Policy

This Privacy Policy explains how InnovateLocal.ai ("InnovateLocal," "we," "us," or "our") collects, uses, protects, and shares information when you visit innovatelocal.ai or sign up for our waitlist or beta program (the "Service").

InnovateLocal.ai is operated by Radians per Second Squared, LLC, a limited liability company organized under the laws of the Commonwealth of Pennsylvania ("Rad/s2"). We operate under an information security management system aligned with ISO/IEC 27001 and an AI management system aligned with ISO/IEC 42001.

1. Information we collect

We collect only what we need to run the waitlist and beta program, and only what you voluntarily provide.

Information you provide:

• Waitlist sign-up. Your email address, which is typically an institutional (for example, .edu) address.
• Beta qualification survey (optional). Your name, institution or organization, your role, your area of interest, the size of your program or business, and any other details you choose to share in free-text fields.
• Communications. Any information you include when you contact us.

We do not use tracking cookies, analytics platforms, or third-party data brokers (see Section 9).

Please do not submit sensitive information (for example, government identifiers, financial account numbers, or health information) in free-text fields. If you do, we treat it under the protections described in Section 4.

2. How we use information

We use the information we collect to:

• Operate and manage the waitlist and beta program, including verifying eligibility.
• Match participating businesses, nonprofits, and student teams to projects.
• Communicate with you about the Service, your sign-up, and program updates.
• Improve and secure the Service.
• Comply with our legal and contractual obligations.

We do not sell your personal information.

3. Artificial intelligence and your data

InnovateLocal.ai uses artificial intelligence to support intake, documentation, and project matching. We govern these features under our ISO/IEC 42001-aligned AI management system.

• No training on your content by third-party providers. Where a provider supports it, we configure its service so that your inputs and outputs are not used to train that provider's models. Where such a control is not available, we do not send your confidential information to that provider.
• Human oversight. AI-assisted outputs are reviewed by people before they are relied upon for consequential decisions.
• Retention minimization with providers. Where a provider offers retention controls, we select the shortest available retention period.
• Disclosure of change. If we materially change the AI providers we use, we will update this Policy.

4. How we protect information

We protect information under our ISO/IEC 27001-aligned information security program. Measures include:

• Data classification. We classify information under a four-level scheme (Public, Internal, Confidential, Secret). Personally identifiable information is classified as Confidential or higher and handled accordingly.
• Access control. Access to personal information is limited to authorized personnel on a least-privilege basis, protected by single sign-on and multi-factor authentication.
• Encryption. We protect information in transit and at rest using industry-standard encryption.
• Administrative, technical, and physical safeguards. We assess foreseeable risks, train our people, test our controls, and securely dispose of information at the end of its retention period.
• Incident response. We maintain a security incident response team and a documented response process. If a security incident affects your personal information, we will notify affected users and any required parties without undue delay and as required by applicable law.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5. How we share information

We share personal information only as described here:

• Service providers. We use vetted third parties to host and operate the Service, such as infrastructure, database hosting, and AI service providers. Each provider is subject to our supplier due-diligence process and is bound by contractual confidentiality obligations before any confidential information is shared.
• Within Rad/s2 and its venture studio, as needed to operate the program and match projects.
• Legal and safety. When required by law, regulation, or legal process, or to protect the rights, property, or safety of users, the public, or Rad/s2.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell or rent your information to third parties, and we do not work with third-party data brokers.

6. Data retention

We keep personal information only as long as needed for the purposes described in this Policy, after which we securely dispose of it. In general, we retain waitlist and beta information for the duration of the program and for a reasonable period afterward, then delete or anonymize it, unless a longer period is required by law or contract. You may ask us to delete your information sooner (see Section 7).

7. Your choices and rights

You may:

• Access or correct the information we hold about you.
• Request deletion of your information.
• Opt out of non-essential communications at any time using the unsubscribe link or by contacting us.

To exercise these choices, contact us. Depending on where you live, you may have additional rights under applicable privacy laws, and we will honor those rights as required.

8. Children's privacy

The Service is intended for adults (18 years of age or older) and for university-affiliated users and local organizations. The Service is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

9. Cookies and tracking

Consistent with Rad/s2's practice across our sites, we do not use advertising cookies, analytics platforms, or third-party tracking on innovatelocal.ai. We may use only the strictly necessary cookies required for the site and sign-up to function.

10. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the effective date above and, for material changes, provide additional notice where appropriate.