Privacy Policy
Last updated
1. Who we are
InstaSights is operated by AI Constructs, LLC ("InstaSights", "we", "us"), an Illinois limited liability company. We run the InstaSights website at instasights.ai and the InstaSights application at app.instasights.ai (together, the "Service"). This policy explains how we handle personal information when you use them. For the people who use the Service, we are the data controller.
We license the consumer models behind the Service from Simsurveys, LLC, an affiliated company. Where Simsurveys handles information for us, it does so on our instructions, as described in section 5.
2. What we collect
Information you give us
- Account details: your name, email address and password (stored only as a hash). If you sign in with Google or Microsoft, we receive your name, email address and a provider identifier from them.
- Billing details: handled by Stripe. We keep a record of your plan, your purchases and the last four digits and card type of your payment method. We never see or store your full card number.
- Study content: the brief you write, your edits to the questionnaire, documents you attach, and web addresses you ask us to read, along with the public content of those pages. This content may include personal information about you or others, depending on what you submit.
- Messages: anything you send to support.
Information collected automatically
- Usage and technical data: the pages and features you use, the time of requests, your IP address, browser and device type, and error reports. We use this to run and secure the Service and to understand how it is used.
- Cookies and browser storage: what is needed to keep you signed in and to hold an unfinished study on your device, and analytics and advertising cookies only if you allow them. Details are in our Cookie Policy.
- How you found us: when you arrive from an ad or a link, the campaign or website that brought you (for example the campaign name, the ad’s click identifier and the page you landed on). With your analytics or marketing consent, we keep campaign and referral information and may associate it with your account to measure marketing effectiveness. Advertising click identifiers are retained and passed to the application only with marketing consent.
3. How we use it
- To create and manage your account and let you sign in.
- To run your studies: draft the questionnaire, run the simulation, and produce your summary, tables and workbook.
- To take payment and keep the records the law requires.
- To send you sign-in codes, receipts, study notifications and answers to your questions. Where we send marketing email, we obtain consent when required by applicable law and provide an unsubscribe link in each marketing email. Unsubscribing from marketing does not stop necessary account, security, payment or study messages.
- To keep the Service secure, prevent abuse, and fix problems.
- To improve the Service, using aggregated information that does not identify you.
- To comply with the law.
4. About the simulated consumers
The responses in an InstaSights study are generated by consumer models. No person is recruited or surveyed for those generated responses. However, briefs, uploaded documents, questionnaires and other study content may contain personal information supplied by users. The models were built by Simsurveys from historical survey data. We do not use your briefs, questionnaires or study results to train those models.
5. Who we share it with
We do not sell personal information. We share it for advertising only if you allow marketing cookies (see section 9). Otherwise we share it only as follows.
Providers who work for us
| Provider | What they do | What they receive |
|---|---|---|
| Simsurveys, LLC | Runs the simulation that produces study responses | Your questionnaire and audience definition, and a study identifier. We do not send account name or email as separate fields; study content may itself contain personal information. |
| Anthropic | Automated writing used to draft questionnaires and summaries | Your brief, attached documents, questionnaire and study results. Anthropic does not use this to train its models. |
| Stripe | Payment processing | Your name, email, billing address and card details, which you enter directly with Stripe. |
| Amazon Web Services | Hosting and storage | All Service data, encrypted in transit and at rest. |
| Google, Microsoft | Optional sign-in | Only if you choose them. They tell us who you are; we tell them nothing about your studies. |
| Email delivery providers | Sending sign-in codes and account email | Your email address and the message content. |
Providers process information under applicable contractual terms. Some, including payment and sign-in providers, also process information for their own legal, security and other purposes described in their privacy policies.
Other cases
- If the law, a court or a regulator requires it, or to protect the rights, safety or property of InstaSights, our users or others.
- If InstaSights is involved in a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.
- With your consent.
6. How long we keep it
- Account details: while your account is open and for up to 24 months after it closes.
- Study content and results: while your account is open, so you can return to them. Deleted on request, and within 24 months of closure.
- Billing records: up to 7 years, as tax and accounting law requires.
- Usage and security logs: up to 90 days.
- Backups: a rolling 30-day window.
These periods are subject to longer retention where necessary to meet legal obligations, resolve disputes, prevent fraud or establish, exercise or defend legal claims. Retained information is limited to what is needed for those purposes.
7. Security
Data is encrypted in transit and at rest. Access is limited to people who need it to run the Service, and is logged. Passwords are stored as salted hashes. Card details never touch our servers. No system is perfectly secure, so if you believe your account has been compromised, contact us at once.
8. Your rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong;
- delete your information, subject to records we must keep by law;
- stop sending you marketing email.
You can change your name, email and password from your profile page and close your account from there. For anything else, email support@instasights.ai. We respond within 30 days and will not treat you differently for making a request.
9. Cookies
We set the cookies needed to keep you signed in and to complete sign-in and payment. Analytics cookies (Google Analytics) and advertising cookies (from Google, Meta, LinkedIn and Microsoft, to measure which ads lead to sign-ups and purchases) are used only if you allow them in “Cookie settings”, which you can change at any time. If you allow advertising cookies, those companies receive information about your visit, such as pages viewed, an advertising identifier and whether you signed up or bought a study, under their own privacy policies. The full list is in our Cookie Policy. This website loads its fonts from Google Fonts, so your browser requests those files from Google's servers.
10. International transfers
InstaSights is based in the United States and processes information there. If you use the Service from elsewhere, your information is transferred to the United States. For UK and EEA users, section 12 describes the safeguards we apply.
11. Children
The Service is for adults and businesses. We do not knowingly collect information from anyone under 18. If you believe we have, contact us and we will delete it.
12. UK and EEA users
This section applies where the UK GDPR or the EU GDPR governs our processing of your personal data. Where it conflicts with the rest of this policy, this section controls.
Controller
AI Constructs, LLC, operating InstaSights, Chicago, Illinois, United States. Contact: support@instasights.ai.
Lawful bases
| Purpose | Lawful basis |
|---|---|
| Creating and managing your account; running your studies | Performance of a contract |
| Billing and payment records | Performance of a contract; legal obligation |
| Support | Performance of a contract; legitimate interests |
| Security, fraud prevention and logging | Legitimate interests; legal obligation |
| Improving the Service with aggregated data | Legitimate interests |
| Analytics and advertising cookies and related attribution | Consent, which you can withdraw through Cookie settings |
| Marketing email | Consent where required; otherwise legitimate interests in promoting our services, subject to your right to object or unsubscribe |
Our legitimate interests are providing support, protecting the Service against fraud and abuse, improving its performance and promoting our services where lawful, balanced against your rights.
Transfers
We transfer personal data to the United States under the EU Standard Contractual Clauses, with the UK Addendum where the UK GDPR applies, together with supplementary measures. We are not certified under the EU-US or UK-US Data Privacy Framework.
Your rights
In addition to the rights in section 8, you may restrict or object to processing, ask for your data in a portable format, and withdraw consent without affecting earlier processing. You may complain to the UK Information Commissioner's Office at ico.org.uk or to your local EEA supervisory authority. We would welcome the chance to resolve your concern first.
Automated decisions
We do not make decisions about you with legal or similarly significant effects based solely on automated processing.
13. California residents
To the extent InstaSights is subject to the California Consumer Privacy Act and it applies to your information, you have the right to know what personal information we collect and how we use and share it (sections 2, 3 and 5), to request deletion, to correct inaccurate information, and not to be discriminated against for exercising these rights. We do not sell personal information. If you allow marketing cookies, information about your visit goes to the advertising partners named in section 9, which may count as “sharing” for cross-context behavioural advertising under California law. You can opt out at any time by choosing “Essential only” in Cookie settings, and this marketing website treats a Global Privacy Control signal from your browser as an opt-out of advertising sharing in that browser. To make a request, email support@instasights.ai. For access, correction or deletion requests, we may need to verify your identity, for example through your account email. You do not need an account or identity verification to opt out of advertising sharing through Cookie settings or Global Privacy Control.
14. Changes
We may update this policy. If a change is material, we will post the new version here with a new effective date and, where we have your email, tell you before it takes effect.
15. Contact
InstaSights, operated by AI Constructs, LLC
Email: support@instasights.ai