How data is handled

Who else processes data

Insightful Chat uses a short list of processors. Each one handles only the part of the service named here.

Supabase stores the database, the sign-in session and uploaded logos. The database for this product is in AWS ap-south-1 (Mumbai).

Vercel hosts the application.

Anthropic runs the interviewer and the analysis.

xAI handles voice: turning speech into text, the spoken interviewer, and text into speech.

Stripe processes subscription and credit payments.

Resend sends email, including sign-in codes and messages from the contact form.

Anthropic, xAI, Stripe and Resend are based in the United States. What we collect, and the rights people have, is on the privacy page.

Participant data

Participants do not create an account. We store the answers they give, as typed text or as the transcript of what they said, plus the summary, themes, quotes and attribute values derived from that conversation.

When anonymous responses are on, the person is stored as a code such as P01, and nothing is tied to their name. The welcome page tells them that before they start. They can stop at any time.

Voice recordings

In a voice interview, audio is streamed to xAI so it can be transcribed and so the interviewer can speak back. Insightful Chat does not keep the recording. The only files we store are workspace logos. The transcript is what is kept, on the same terms as a typed answer.

Retention and deletion

Participant transcripts and the attributes stored on them are deleted automatically after the workspace’s retention period: 6, 12 or 24 months, 24 by default. When they go, that study’s aggregate report is marked to be recomputed without them. You can ask us to delete a workspace, and we will delete the studies and conversations that belong to it.

Who can see a workspace

A workspace has an owner and members. Access to its studies is limited to those members, enforced in the database with row-level security. The owner is the person who can change the plan, the logo and the workspace settings. A share link is an exception a member creates: anyone holding it can read that study’s aggregate results and quotes until it expires or is deleted. Transcripts are not included.

Participant interviews are written by the server with a privileged key. That key is not available in the browser. It exists so someone without an account can take part. It is not a way for the public site to read another workspace.

AI models

The interviewer and the analysis call Anthropic’s commercial API. Voice calls xAI’s API. These are not the consumer chat products.

Anthropic’s commercial terms say they do not use API inputs or outputs to train models by default. xAI’s API documentation says they do not train on API inputs or outputs without permission, and that API requests are stored for 30 days for abuse review and then deleted. That 30 days is xAI’s audit window. It is separate from how long Insightful Chat keeps a transcript.

Insightful Chat does not use participant answers to train models of its own.

Encryption

Traffic is encrypted in transit. Data at rest is encrypted by the hosting and database providers as part of their service. That is their default. This page does not claim a certification.

Reporting a vulnerability

If you find a vulnerability, email support@insightful.chat. Include enough detail to reproduce it, and leave participant transcripts out of the report if you can. We reply within one working day, Sydney time.