Privacy Policy

Last updated: November 2024

1. Introduction

This Privacy Policy explains how InsyteSage ("we," "us," or "our") collects, uses, and protects your personal information when you use our data analysis platform. We are committed to ensuring your privacy and protecting your data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

For the purpose of the GDPR, InsyteSage acts as the data controller for the personal information you provide to us. Our contact details can be found in the Contact section of this policy.

3. Information We Collect

We collect and process the following types of information:

  • Account information (name, email, password)
  • Usage data (features used, analysis performed)
  • Uploaded data files and analysis results
  • Payment information (processed securely by our payment provider)
  • Communication data (when you contact us)
  • Technical data (IP address, browser type, device information)

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract: Processing necessary for the performance of our contract with you
  • Consent: Where you have given explicit consent for specific processing
  • Legal Obligation: Where we need to comply with a legal obligation
  • Legitimate Interests: Where processing is necessary for our legitimate interests

5. Data Storage and Security

Your data is stored securely in the European Union through our infrastructure provider, Supabase. We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

6. Your Data Protection Rights

Under GDPR, you have the following rights:

  • Right to Access: Obtain a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to our processing of your data
  • Rights related to Automated Decision Making: Not be subject to decisions based solely on automated processing

7. International Data Transfers

While our primary data storage is in the EU, we may transfer data to other jurisdictions. When we do, we ensure appropriate safeguards are in place through Standard Contractual Clauses or other legal mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. You can request data deletion at any time through our platform or by contacting us.

9. Cookies and Tracking

We use essential cookies necessary for the operation of our platform. For any non-essential cookies or tracking technologies, we will seek your explicit consent in accordance with GDPR requirements.

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect or process data from children under 16 without parental consent.

11. Changes to Privacy Policy

We may update this policy periodically. We will notify you of any material changes via email or through our platform.

12. Data Protection Officer

For any privacy-related queries or to exercise your rights, contact our Data Protection Officer at:
Email: privacy@insytesage.com

13. Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data in accordance with GDPR requirements.

14. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us.