Privacy Policy

Bodygen Inc. Privacy Policy
Last Updated: July 2, 2025

Introduction

This policy describes how Bodygen Inc. collects, uses, shares, or otherwise processes information relating to individuals (“Personal Information”) and the rights associated with that processing. We comply with all applicable US state privacy laws.”
A reference to “Bodygen Inc.,” “Innov8CPG”, “we,” “us,” or the “Company” is a reference to Bodygen Inc. and its affiliates involved in the collection, use, sharing, or other processing of Personal Information. Where applicable, Bodygen Inc. is the data controller.
This Privacy Policy applies to the Personal Information we collect when you use our websites (including https://bodygen.ai and https://innov8cpg.com), our products, services, and applications (collectively, the “Services”), when you attend a Bodygen Inc. event, or otherwise interact with us.
This Privacy Policy does not apply to the extent we process Personal Information in the role of a processor or service provider on behalf of our customers. Our customers are solely responsible for establishing policies for and ensuring compliance with all applicable laws and regulations relating to their use or collection of Personal Information in connection with our Services. If you are an individual who interacts with one of our customers and have a request regarding your Personal Information, please contact the customer directly.
When acting as a processor, we comply with applicable processor obligations under relevant privacy laws and enter into appropriate data processing agreements with our customers.

Personal Information We Collect

“Personal Information” refers to any information that relates to an identifiable living person. Data protection laws around the world define this concept differently, and we adhere to the definitions applicable to your jurisdiction.
Some privacy laws differentiate between “controllers” and “processors” of Personal Information. A controller decides why and how to process Personal Information, while a processor only processes it on behalf of a controller.
We collect Personal Information in the following ways:
A. Personal Information You Provide Us Directly. We collect Personal Information you provide to us when registering for an account, using our Services, or otherwise interacting with us. This information is used to provide, improve, and protect the Services. While providing this information is voluntary, it may be necessary for certain services, and without it, we may be unable to provide the requested Services.
B. Personal Information We Collect Automatically. We use standard tools like log files, cookies, and pixel tags to automatically collect information from your devices as you navigate our Services or interact with our communications. For more details, please review our Cookie Policy.
C. Personal Information We Collect From Third Parties. We may collect Personal Information from third-party sources, such as authentication partners (e.g., Google for account login) and public databases, for user authentication and marketing activities.

Cookies and Similar Technologies
We and our third-party partners use cookies, web beacons, and other similar technologies to collect information automatically as you interact with our Services. This helps us operate our Services, understand user activity, customize your experience, and for security and advertising purposes.
What They Are: Cookies are small text files placed on your device that allow us to recognize your browser and remember your preferences. Other technologies like web beacons collect similar information to help us understand how you use our Services.
How We Use Them: We use these technologies for several purposes, including:
Strictly Necessary: To enable features essential for providing our Services to you.
Functional: To remember your preferences and settings to enhance your experience.
Performance and Analytics: To collect data on how our Services are performing and how users interact with them, which helps us improve our offerings.
Advertising: To help us and our partners deliver more relevant advertising.
Your Choices and Control: You have control over the use of cookies. Depending on your geographic location, you will be presented with clear choices about cookie consent when you visit our sites. You can manage these preferences at any time through our cookie management tool. We honor universal opt-out preference signals as required by law, such as the Global Privacy Control (GPC). Additionally, most web browsers allow you to control cookies through their settings. Please note that restricting certain cookies may impact the functionality of our Services. For more detailed information, please review our separate Cookie Policy.

How and Why We Use Personal Information

If you are in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, our legal basis for collecting and using your Personal Information depends on the specific context. We rely on the following legal bases:
Performance of a contract
Legitimate business interests
Compliance with a legal obligation
Your consent
In some limited cases, we may have a legal obligation to collect Personal Information from you. We will make this clear at the relevant time and advise you whether providing your information is mandatory.

Personal Information Sharing and Disclosure

We may share your Personal Information as described in this policy or at the time of collection in the following circumstances:
Customer Admin and Users: If a customer provisions your user account, that customer’s administrator may have access to and control over your account information.
Affiliates: We may share Personal Information with our affiliates for purposes consistent with this Privacy Policy.
Service Providers: We use trusted third-party service providers for functions such as billing, customer support, hosting, analytics, and marketing. These parties may access your information only as reasonably necessary to perform services on our behalf and in compliance with this policy.
Business Transferees: We may share or transfer information in connection with a merger, acquisition, reorganization, or sale of assets.
Authorities and Others: We may disclose your information to third parties if we determine it is reasonably necessary to comply with the law, prevent harm, prevent fraud or abuse, or protect our rights and property.
Consent: We may share your Personal Information for a specific purpose if you have given us your consent.

Automated Decision-Making and Profiling
We use automated processing and artificial intelligence to operate and improve our Services. These processes help us deliver value to our users while respecting your privacy rights.
How We Use Automated Processing:
We use automated systems to:
Optimize Business Processes: We use automation to enhance the efficiency and accuracy of core business functions, such as streamlining complex quoting, qualification, and internal approval workflows for our customers
Facilitate Commercial Connections: Our platform employs automated systems to help users identify and connect with relevant commercial partners within the CPG ecosystem, such as matching product developers with qualified manufacturers
Provide and Analyze Insights: We use automated tools to analyze data and provide insights that help our users make more informed, data-driven decisions
Improve and Personalize Our Services: Automation allows us to deliver a more responsive and personalized user experience and helps us undertake internal research for technological development and demonstration to enhance our platform’s capabilities
Legal Basis:
We only use automated decision-making that produces legal or similarly significant effects when:
You have explicitly consented to such processing
It is necessary to enter into or perform our contract with you
It is authorized by applicable law

Your Rights:
When we make decisions based solely on automated processing that significantly affect you, you have the right to:
Request human intervention in the decision-making process
Express your point of view regarding the decision
Challenge the decision and request that it be reconsidered
Receive meaningful information about the logic involved in the automated decision-making
Understand the significance and potential consequences of such processing for you
How to Exercise These Rights:
To exercise any of these rights or to object to automated decision-making, please contact us at privacy@bodygen.ai. When you contact us, please specify which automated decision you are concerned about and what action you would like us to take.
Special Categories of Data:
We do not use automated decision-making based on special categories of personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation) unless we have your explicit consent or it is necessary for substantial public interest reasons under applicable law.

Security

We employ appropriate and reasonable physical, technological, and administrative security measures to safeguard your information. For more details, please see our Security page. However, no method of transmission or electronic storage is 100% secure, and we cannot guarantee its absolute security.

International Transfer

Your information may be transferred to, stored, and processed by us, our affiliates, and other third parties in countries outside the EEA, the UK, and Switzerland, including the United States. We will transfer Personal Information according to the requirements of applicable data protection legislation by putting in place appropriate safeguards, such as European Commission Standard Contractual Clauses and by adhering to the principles of the EU-U.S. Data Privacy Framework (“DPF”), the UK Extension to the DPF, and the Swiss-U.S. DPF.

Data Retention

We retain Personal Information only for as long as necessary for the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. We determine the appropriate retention period based on the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use, and applicable legal requirements.

Your Privacy Rights and Choices

Depending on your location and subject to applicable law, you may have the following rights regarding the Personal Information we control about you:
The right to access, correct, amend, or delete your Personal Information.
The right to object to or restrict the processing of your Personal Information.
The right to request the portability of your Personal Information.
The right to withdraw consent at any time for processing based on consent.
The right to opt-out of marketing communications.
The right to complain to a data protection authority.
You can exercise these rights by contacting us at privacy@bodygen.ai. We may request specific information to verify your identity.

Information for California Consumers

This section applies to California consumers and describes how we collect, use, and share Personal Information under the California Consumer Privacy Act (CCPA).
A. How We Collect, Use, and Share Your Personal Information. We collect the following statutory categories of Personal Information: Identifiers; Professional or employment-related information; Inference data; Commercial information; Internet or network information; Financial information; and Geolocation data. The business purposes for collection and the categories of third parties with whom we share this information are described in the sections above.
B. California Privacy Rights. California law grants residents the right to know about, delete, and opt-out of the sale of their Personal Information. We do not and will not sell your Personal Information. You also have the right to non-discriminatory treatment for exercising your CCPA rights.
C. How to Exercise Your California Privacy Rights. To exercise your rights, please email us at privacy@bodygen.ai. We will verify your identity before processing your request. Authorized agents may also submit requests on your behalf with written permission.

Additional Information

Universal Opt-Out Signals
We honor universal opt-out preference signals as required by law, such as the Global Privacy Control (GPC). If your browser or device sends a GPC signal indicating you do not want your personal information to be sold or shared, we will respect that choice. Learn more about GPC at globalprivacycontrol.org.
Links to Other Websites: Our Services may contain links to or interoperate with third-party services. We are not responsible for the privacy practices of these services and encourage you to read their privacy policies.
Our Policy on Children: Our Services are not directed to individuals under 18. We do not knowingly collect information from children under 18.
Modification of Privacy Policy: We may modify this Privacy Policy periodically. The “Last Updated” date at the top of this page indicates the last revision. For material changes, we will provide additional notice and obtain your consent where required by law.
Contacting Us: If you have any questions, wish to exercise your rights, or would like to access this policy in an alternative format, please contact our Privacy Officer at privacy@bodygen.ai or by mail at:
Bodygen Inc.
Attn: Privacy Officer
1968 S Coast Hwy #4750
Laguna Beach, CA 92651

Data Privacy Framework Notice

Bodygen Inc. complies with the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF as set forth by the U.S. Department of Commerce. To learn more about the DPF Program and to view our certification, please visit http://www.dataprivacyframework.gov.
Our commitment under the DPF is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. For any complaints or disputes regarding our DPF compliance, please first contact us at privacy@bodygen.ai. If we do not resolve your complaint, you may contact our U.S.-based third-party dispute resolution provider, JAMS, free of charge. Under certain conditions, you may be entitled to invoke binding arbitration.