Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account data: your name, email, phone, password and organization details when you register.
• Customer Data: the business records you and your users create in Insphera — products, orders, invoices, contacts, deals, tickets and similar.
• Connected-account data: information from services you choose to connect (for example Google sign-in, calendar or email providers), limited to what the feature needs.
• Usage & device data: pages viewed, actions taken, IP address, browser and device type, collected to operate and secure the Services.
• Support & communications: messages you send us and records of our correspondence.

2. How we use your information

We use information to provide, secure and improve the Services; to authenticate you; to process payments; to send service and (with your consent) marketing messages; to provide AI features you enable; to prevent fraud and abuse; and to comply with legal obligations. We do not sell your personal information, and we do not use Customer Data for advertising.

3. Google user data & Limited Use

When you connect a Google account or use Google sign-in, we request only the scopes required to deliver the feature you turned on. Insphera's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the features you request; we do not transfer it to others except as needed to provide the Services, comply with law, or as part of a merger; we do not use it for advertising; and we do not allow humans to read it unless we have your consent, it is necessary for security or to comply with law, or the data has been aggregated and anonymized.

4. AI processing

Some features send your prompts and selected records to AI models (our own and trusted providers such as Google) to generate text, images, insights and reports. We send only the data needed for the feature, and we do not use your Customer Data to train third-party foundation models without your instruction.

5. Legal bases for processing

Where the GDPR applies, we process personal data on the bases of contract (to provide the Services you request), legitimate interests (to secure and improve the Services), consent (for marketing and certain integrations), and legal obligation (for tax and compliance).

6. How we share information

We share information only with: service providers and sub-processors that host, secure or support the Services under contract; payment processors; authorities where required by law; and a successor entity in the event of a merger or acquisition. A current list of sub-processors is available on our Sub-processors page.

7. Data retention

We keep account data for as long as your account is active and as needed to provide the Services. You can export or delete Customer Data at any time; after account closure we delete or anonymize data within a reasonable period unless retention is required by law.

8. Security

We protect data with encryption in transit (TLS) and at rest, role-based access control, network controls, and regular review. No method of transmission or storage is completely secure, but we work continuously to safeguard your information. See our Security page for details.

9. International transfers

We may process data in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses to protect transferred data.

10. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or object to processing, and to data portability. You can exercise these rights from your account settings or by emailing [email protected]. You may also withdraw consent or lodge a complaint with your local data-protection authority.

11. Cookies

We use cookies and similar technologies for authentication, preferences and analytics. You can control cookies through your browser. See our Cookie Policy for details.

12. Children

Insphera is a business tool and is not directed to children under 16. We do not knowingly collect personal data from children.

13. Changes & contact

We may update this policy and will post the new effective date here, notifying you of material changes. For any privacy question or request, contact our team at [email protected].