Privacy Policy

Insightlo ("we," "our," or "us") is committed to protecting the privacy and security of our users and customers. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Insightlo customer intelligence and retention platform (the "Service"). By accessing or using the Service, you agree to the terms of this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Register for an account or request a demo
• Subscribe to the Service or manage your subscription
• Contact our support, sales, or customer success teams
• Participate in surveys, webinars, or product research sessions

This information may include your full name, job title, company name, email address, phone number, and the content of your communications with us.

1.2 Customer Data You Connect

To deliver customer intelligence, Insightlo integrates with your CRM, support systems, product analytics tools, and other data sources. The customer data you authorize us to access ("Customer Intelligence Data") remains your property. We process it solely to deliver our Services to you and do not use it for any other purpose. You are responsible for ensuring you have appropriate rights to share this data with us.

1.3 Automatically Collected Information

When you visit our website or use our platform, we automatically collect:

• IP address and approximate geographic location
• Browser type, version, and device information
• Operating system and device identifiers
• Pages visited, features used, and time spent in each section
• Interaction logs, usage patterns, and navigation paths
• Error logs and platform performance metrics

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and continuously improve the Insightlo platform
• Process and analyze your connected Customer Intelligence Data to deliver insights
• Authenticate users and maintain account security
• Process subscription payments and manage billing
• Send transactional communications including account updates and security alerts
• Send marketing communications with your consent where required by law
• Analyze platform usage to improve features and user experience
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations and enforce our Terms of Service
• Provide customer support and respond to inquiries

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal bases for processing personal data include:

• Contract Performance: Processing necessary to fulfill our subscription agreement with you
• Legitimate Interests: Platform improvement, security monitoring, and fraud prevention
• Legal Compliance: Meeting applicable legal and regulatory requirements
• Consent: For marketing communications where required by applicable law

4. Information Sharing and Disclosure

We do not sell your personal information. We may share it in the following limited circumstances:

• Service Providers: Trusted third-party vendors operating our infrastructure (cloud hosting, payment processing, analytics, email delivery), bound by strict data processing agreements
• Business Transfers: In connection with a merger or acquisition, with appropriate confidentiality protections
• Legal Requirements: When required by law, court order, or governmental authority
• With Your Consent: For any other purpose with your explicit consent

5. Data Security

We implement enterprise-grade security measures to protect your information, including:

• AES-256 encryption at rest for all stored data
• TLS 1.3 encryption in transit for all data transmission
• Role-based access controls and multi-factor authentication
• Continuous security monitoring and regular penetration testing
• SOC 2 Type II certified infrastructure
• Complete tenant isolation — no cross-customer data access

6. Data Retention

We retain personal information for as long as necessary to provide our Services, unless a longer period is required by law. Account data is generally retained for the duration of your subscription and up to 7 years for legal and audit purposes. Customer Intelligence Data is deleted within 30 days of contract termination upon request.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information (right to erasure)
• Restrict or object to certain processing activities
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time where processing is consent-based
• Lodge a complaint with your local data protection authority

To exercise these rights, contact us at privacy@insightlo.io.

8. Cookies

We use cookies and similar tracking technologies as described in our Cookie Policy. You can manage your cookie preferences through our consent manager or browser settings.

9. International Data Transfers

Your information may be transferred to and processed in countries outside your own. We ensure appropriate safeguards for all cross-border transfers, including Standard Contractual Clauses approved by the European Commission for transfers from the EEA.

10. Children's Privacy

Our Services are designed for business use and are not directed to individuals under 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or platform notice at least 30 days before taking effect.

12. Contact Us

• Privacy: privacy@insightlo.io
• General: hello@insightlo.io
• Company: Insightlo