Privacy Notice

1. Data we collect

Account data: name, email address, hashed password, workspace name, role, and sign-in/session details (IP address, device and browser info) used for security.

Recording content: screenshots, page titles, URLs, click and field-interaction events captured by the browser extension or uploads, plus the SOPs, narration, videos and simulations generated from them. The extension only records while you actively start a recording, and it masks password fields and values it detects as sensitive.

Usage data: credit usage, feature usage, error reports and logs needed to run, secure and improve the Service.

Billing data: Paddle processes your payment details as Merchant of Record. We receive only limited information such as your name, email, country, purchase and subscription status. We never receive your full card number.

Communications: messages you send to support and emails we send you (for example verification codes and low-credit alerts).

2. How we use data

To provide the Service: create your account, record and process workflows, generate content, manage credits and storage, and send service emails.

To keep the Service secure: authentication, session limits, abuse and fraud prevention, and error monitoring.

To support you and improve the Service, using aggregated or de-identified data where possible.

To meet legal, tax and accounting obligations.

We do not sell personal data, do not use it for third-party advertising, and do not use your recordings to train public AI models.

3. Legal bases (GDPR/UK GDPR)

Performance of our contract with you; our legitimate interests in securing and improving the Service; compliance with legal obligations; and your consent where we ask for it (you can withdraw consent at any time).

4. AI processing

By default, content analysis, SOP generation and narration run on our own servers. External AI providers are used only if a workspace admin explicitly enables them in AI Settings; in that case only the content needed for the requested generation is sent to that provider under its data-processing terms.

5. Who we share data with

Paddle.com (payments, invoicing, tax) — as Merchant of Record under its own privacy policy.

Hosting and infrastructure providers that store and run the Service for us.

Resend (transactional email delivery).

Members of your own workspace, according to the roles your admin sets.

Authorities or other parties where required by law, or to protect rights, safety and security.

All service providers act on our instructions and are bound by confidentiality and data-protection obligations.

6. International transfers

Our providers may process data in countries other than yours, including the United States and India. Where required, we rely on appropriate safeguards such as standard contractual clauses.

7. Retention

We keep account data while your account is active. When a recording is deleted, its stored files are removed. When an account or workspace is closed, we delete or anonymise its content within 30 days, except data we must keep for legal, tax or security reasons (for example purchase records) for as long as required.

8. Security

We use encryption in transit (HTTPS), hashed passwords, role-based access control, workspace isolation, session limits and monitoring. No system is perfectly secure; if a breach affects your data we will notify you and authorities as required by law.

9. Your rights

Depending on where you live (including under GDPR, UK GDPR, India's Digital Personal Data Protection Act 2023 and US state laws such as the CCPA), you may have the right to access, correct, delete, or export your data, to object to or restrict processing, to withdraw consent, and to appeal a decision. We do not sell or share personal data for cross-context behavioural advertising.

To exercise a right, email support@insightia.org. We will respond within 30 days and may need to verify your identity. If your data is part of a workspace managed by your employer, we may refer your request to that workspace admin. You may also complain to your local data-protection authority.

10. Cookies and local storage

We use only essential browser storage (local storage) to keep you signed in, remember your device and preferences. We do not use advertising or cross-site tracking cookies. Paddle's checkout may set its own cookies needed for payment and fraud prevention.

11. Children

The Service is not intended for anyone under 18 and we do not knowingly collect their data.

12. Changes

We will post updates here and notify you of material changes by email or in the app.

13. Contact

Data controller: Hemali Mukundchandra Mody, operator of ProcessIQ. Privacy and data requests: support@insightia.org.