Privacy

Insyqo is operated by Insyqo, Inc., a corporation incorporated in Delaware, United States. Insyqo, Inc. is the data controller for the personal data described in this policy. For any question, email [email protected].

Account details: your name and email address, and any profile fields you choose to fill in (display name, title, pronouns, bio, time zone). Content: the canvases, journey maps, projects, clients, notes, and transcripts you create inside your workspace. Usage and device data: how you use the app and basic technical information such as browser and IP address, gathered to keep the service reliable and secure. Billing data: Stripe processes your payments, and your card details never touch our servers, but we retain your subscription status and billing event records, which can include your name, email, and billing address from Stripe receipts.

We use this data to run the service (signing you in, storing your work, sending transactional emails such as invitations and password resets), to bill you for Pro subscriptions, to provide support, and — where you haven't opted out — to send product emails. Our legal bases are performance of our contract with you, our legitimate interest in operating and improving Insyqo, and, for marketing emails, your consent.

When you use an AI feature — insight extraction, transcript analysis, codebase analysis — the relevant content is sent to our AI provider, Anthropic, to generate the response. Anthropic does not use your inputs to train its models, and we don't share your data with any other AI provider.

Data is stored in Supabase (Postgres), hosted in the EU (eu-central-1), with encryption in transit and at rest. We use a small number of subprocessors to run the service: Supabase, Vercel, Stripe, Resend, Anthropic, Upstash, and Cloudflare — plus Microsoft, where your workspace connects the Microsoft Teams integration.

We keep your data for as long as your account is active. If you delete a project, canvas, or journey map, it moves to Trash and can be restored for 30 days before permanent removal. If you delete your account, we delete your data 30 days later. To request an export or an earlier deletion, email [email protected].

Depending on where you live and subject to legal exceptions, you may ask us to confirm whether we process your personal data and to access, correct, delete, or obtain a portable copy of it. Where applicable, you may also opt out of the sale of personal data, targeted advertising, or qualifying profiling. We do not currently sell personal data or use it for targeted advertising or qualifying profiling. Email [email protected] to submit a request. We may verify your identity and will respond within the period required by law. If we deny a Delaware privacy request, reply to our decision to appeal. We will review the appeal and, if denied, provide a way to contact the Delaware Department of Justice. We will not discriminate against you for exercising a privacy right.

We support passkeys and two-factor authentication on accounts, encrypt data in transit and at rest, and enforce per-workspace isolation at the database level using row-level security, so one workspace can never see another's data. The service is intended for business users and is not directed to children under 13; we do not knowingly collect personal data from children under 13.