Legal
Privacy Policy
Last updated: July 19, 2026
The Short Version
On our website we use Google Analytics to understand how visitors find and use the site — only if you allow it in the cookie banner; decline and Google sets no cookies on your device. Inside the platform we keep first-party usage records to operate, support, and improve the service. We do not run advertising pixels, and we do not sell personal information.
1. What We Collect on the Website
Your cookie-banner choice (stored in a cookie so we do not re-ask, and recorded in our systems so we can honor it). With your consent, Google Analytics collects pages viewed, approximate location, device and browser type, and how you arrived — for example a search engine or a campaign link. If you request an audit or sign up, we collect what you enter (name, work email, company, website) plus the page address you were on, including any campaign tags in the link that brought you here. If you decline analytics, Google's tags operate without cookies and we receive only aggregate, non-identifying signals.
2. What We Collect in the Platform
Your account details (name, work email, role, company); first-party records of actions taken in the product, tied to your account, used to operate the service, provide support, and improve the product; and the business information you or your company add (brand details, competitors, topics, prompts) together with the AI responses we collect on your behalf. No third-party analytics or advertising tools run inside the platform. Standard server logs (IP address, request time, user agent) are kept for security and reliability; where we rate-limit requests, IP addresses are stored only in hashed form.
3. Cookies
Essential cookies: your sign-in session and the cookie that remembers your consent choice (kept about six months). Analytics cookies (_ga and similar, up to 24 months) are set only after you consent, and declining clears them. You can change your choice at any time by clearing cookies for this site.
4. What We Do Not Do
We do not sell your data. We do not share it with advertising networks. We do not train third-party AI models on your prompts or audit results. We do not share your audit data across customers.
5. Legal Bases (EEA/UK Visitors)
Consent — analytics cookies on the website. Contract — account data and platform usage needed to provide the service your company signed up for. Legitimate interests — first-party measurement of our own website and product (without device tracking), security logging, and responding to inquiries; you may object at any time.
6. Subprocessors
We use the following infrastructure providers, acting on our instructions: Supabase (database + authentication), Vercel (hosting), Resend (transactional email), OpenRouter (LLM gateway), Google (analytics, only with your consent), and Sentry (error tracking).
7. Data Retention
Account and audit data is retained for the life of your engagement plus 12 months. Website analytics and consent records are kept up to 24 months. Probe response data older than 24 months may be aggregated and the raw rows deleted.
8. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time (without affecting processing that happened before withdrawal). California and other US-state residents: we do not sell or "share" personal information as those laws define it. To exercise any right, email hello@insightgeo.ai.
9. Contact
Privacy questions: hello@insightgeo.ai. We will update this page when our practices change and note material changes here.