Privacy

Your workspace is private by default and bounded by purpose.

This notice explains the product data model. Retention periods, subprocessors, and contact channels still require final review.

Privacy notice · October 1, 2026

01

Data used to operate Insight

The service processes the minimum information needed to provide accounts and research.

  • Account identifiers and authentication state.
  • Questions, source files, extracted text, answers, and generated artifacts.
  • Usage ledger entries, entitlement state, and Stripe references—not raw card data.

02

How the data is used

Workspace content is used to perform the requested research and product operations.

  • Return research results and preserve your history.
  • Generate and authorize artifact downloads.
  • Meter provider costs, prevent abuse, and investigate reliability incidents.

03

Site and product analytics

Google Analytics helps us understand how visitors find Insight and which features are useful.

  • We measure public page visits and selected interactions, such as starting research or opening a citation.
  • Analytics event names and parameters are limited to fixed categories and page paths without query strings; we do not send prompts, answers, file names or contents, account emails, user IDs, or payment identifiers.
  • Google Analytics may receive browser, device, referral, and approximate location information through its web SDK. Browser privacy controls can limit this collection.

04

Sharing and service providers

Data is disclosed only where needed to operate the selected feature or comply with law.

  • Authentication, hosting, storage, AI, search, and payment providers may process bounded data.
  • Private files are not published or shared with other customer accounts.
  • A production subprocessor list and data-region statement remain launch requirements.

05

Controls and lifecycle

Users have direct control over retained workspace content.

  • Delete individual files, chats, or projects, or clear all chats and project groupings from Settings.
  • Download a portable JSON account export before permanently closing an account.
  • Account deletion cancels active billing and erases workspace content; pseudonymous fraud-prevention and payment records may follow separate legal schedules.