Privacy policy

If you use Insightful for your research

We collect the email you sign in with. Sign-in is a one-time code sent to that address. We do not store a password. We collect the workspace you create: its name, an optional website, the description we draft from that website, your logo and brand colour, and the settings you choose (anonymous by default, and how long to keep transcripts).

We collect what you put into a study: the brief, the plan, the attributes, and the results we generate from the conversations (summaries, themes, quotes, findings, attribute values). That content is yours. We use it to run the interview and to show you the results. If you create a share link, anyone holding it can read that study’s aggregate results and quotes until the link expires or you stop sharing. Transcripts are never included.

If you were invited to an interview

You do not create an account. We store the answers you give, as typed text or as the transcript of what you said, plus the summary, themes, quotes and attribute values the interviewer derives. If the company turned on anonymous responses, you are stored as a participant code such as P01, and nothing is tied to your name. We also count that the link was opened.

Your answers go to the company that sent you the link. We do not sell them, and we do not use them to train models. If you want them removed, contact that company, or email support@insightful.chat with the link you were sent and we will help.

Voice

In a voice interview, audio is streamed to our speech provider so it can be transcribed and so the interviewer can speak back. We do not keep the recording. The transcript is what is stored, on the same terms as a typed answer.

The contact form

If you write to us, we keep your name, email, an optional company, the topic you picked and the message, for long enough to reply and to keep a record of the request. We do not add you to a mailing list.

Cookies

Signing in sets a session cookie so you stay signed in. The interview page sets one cookie per study, named for that study, http-only, for 30 days. Its only job is to resume your own conversation if you refresh or come back. We do not use advertising or analytics cookies.

Who else processes data

Supabase stores the database, the sign-in session and uploaded logos. Vercel hosts the application. Anthropic runs the interviewer and the analysis. xAI handles voice, turning speech into text and text into speech. Stripe processes subscription and credit payments. Resend sends email, including sign-in codes and messages from the contact form. Each processes data only to provide that part of the service. Several of them are in the United States. Where the database sits, and how access works, is on the security page.

How long we keep it

Participant transcripts and the attributes stored on them are deleted automatically after the workspace’s retention period: 6, 12 or 24 months, 24 by default. When they go, that study’s aggregate report is marked to be recomputed without them. You can ask us to delete a workspace, and we will delete the studies and conversations that belong to it.

Who is responsible

The workspace that runs a study decides what to ask, whether responses are anonymous, and what to do with the results. For the people they invite, that workspace is responsible for having a lawful basis to ask. Insightful processes the interviews on their behalf.

Your rights

Depending on where you live, you can ask for access to the personal information we hold, for a correction, or for deletion. Customers can do a lot of this in the product. Participants should start with the company that invited them, or email us with the interview link. We will not charge you for a reasonable request, and we will not refuse one because it is inconvenient.

This policy is written to meet the Australian Privacy Principles in the Privacy Act 1988. If you are in the European Economic Area or the United Kingdom, you can also object to processing, ask for a copy in a portable form, and complain to your local authority. Our lead point of contact is support@insightful.chat.

Security

Traffic is encrypted in transit. Data at rest is encrypted by our hosting and database providers. Access to a workspace’s studies is limited to its members. Participant interviews are written by the server with a privileged key that is not available in the browser. No method of storage is perfect; if we learn of a breach that is likely to cause serious harm we will tell the people affected and the relevant authority.

Children

Insightful is not for anyone under 16, whether as a customer or as a participant. Do not send an interview link to a child.

Changes

If we change this policy we will update the date at the top. A change that materially reduces what participants are told, or how long answers are kept, will be reflected in the product before it applies to new interviews.