Privacy Policy

We collect information you provide directly to us, such as when you create an account, upload data for analysis, or contact us for support.

• Account Information: Email address, name, and password when you register
• Profile Information: Company name, position, and contact details you choose to provide
• Usage Data: Information about how you use our services, including uploaded files and generated reports
• Device Information: Browser type, operating system, and IP address

• To provide, maintain, and improve our services
• To process your data and generate analytics reports
• To send you technical notices, updates, and support messages
• To respond to your comments and questions
• To detect, prevent, and address fraud and abuse
• To comply with legal obligations

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. The retention periods vary based on the type of data:

• Account Data: Retained while your account is active and for 30 days after deletion request
• Uploaded Files & Reports: Retained while your account is active; deleted within 30 days of account deletion
• P&L Statements: Retained while your account is active or until you delete them
• Usage Logs: Retained for 90 days for security and debugging purposes
• Payment Records: Retained for 7 years as required by tax and accounting laws
• Security Audit Logs: Retained for 1 year for compliance and security monitoring

When data is no longer needed, it is securely deleted or anonymized. You can request deletion of your data at any time through your account settings.

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256
• Access Controls: Strict role-based access controls limit who can access your data
• Regular Audits: We conduct regular security audits and penetration testing
• Data Isolation: Your data is logically isolated from other customers

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your consent or at your direction
• With service providers who assist in our operations (under strict confidentiality agreements)
• To comply with legal obligations or respond to lawful requests
• To protect our rights, privacy, safety, or property

We use the following third-party service providers (subprocessors) to help us deliver our Service. These providers process data on our behalf under strict contractual obligations:

• Stripe, Inc. (USA) - Payment processing and subscription management
• Supabase, Inc. (USA) - Database hosting, authentication, and backend infrastructure
• Vercel, Inc. (USA) - Website hosting and content delivery
• Google LLC (USA) - AI/ML services for data analysis features
• OpenAI, Inc. (USA) - AI/ML services for data analysis features
• PrivateEmail (Namecheap) (USA) - Email communication services

We will notify users of any changes to our subprocessors list by updating this page. All subprocessors are required to maintain appropriate security measures and comply with applicable data protection laws.

Your Rights

Depending on your location, you may have certain rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data

California residents have additional rights under the CCPA. Please see our Do Not Sell My Personal Information page for more details.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

support@insightdash.xyz