Privacy Policy

a. On the marketing website: when you submit the contact form, we collect your full name, company name, role (optional), phone number, email address and any free-text message you choose to include. We also collect aggregated, anonymized usage data (obfuscated IP, browser type, pages visited, referrer).

b. When you sign up for the application: account details (name, email, phone, role), your company details (name, registration number, projects), and access credentials (password stored hashed).

c. While you use the application: business data you choose to enter — purchase orders, invoices, contracts, daily reports, field photos, signatures, documents and payment details (including bank account information for export to bank portals). We also record who performs which actions inside the system (who approved an invoice, who filed a daily report, etc.).

d. Information about third parties you enter: while using the application, you may enter details of subcontractors, suppliers, clients and other counterparties — including names, registration numbers, contact details and bank information. As our customer, you are responsible for the legal basis to collect and share this data with us. We act as a data processor on your behalf with respect to that data.

The business data in the platform belongs to you. You decide what data to enter and store, and its use is your responsibility. We do not use your data for our own purposes beyond operating the Service for you — we do not sell it, share it commercially, or analyze it for our own ends. We use the information solely for the following purposes:

• To operate the application and provide the Service you signed up for.

• To authenticate you, manage access permissions and protect account security.

• To respond to inquiries submitted via the contact form and schedule a demo.

• To send necessary operational messages (system alerts, payment summaries, password resets).

• To comply with legal and regulatory obligations.

We do not transfer or sell your data to third parties. That said, to operate the Service, when you upload files and data to the platform we may use external processing services to derive value from them for you. These services process the data on your behalf and solely for the purpose of providing the Service:

• Cloud infrastructure & storage — hosting the application, the database and the files you upload (invoices, field photos, documents), with leading cloud providers that meet rigorous information-security standards.

• AI & OCR engines — when you upload a document, we may process it with the market's leading OCR engines and large-language models (LLMs) to extract data from it (detecting amounts, line items and invoice numbers) and to power the platform's smart tools. The data is processed on your behalf only — never used to train external models.

• Operational email services — to send messages from the system (monthly summaries, payment notifications, PDF order copies).

• Marketing-website analytics only — anonymized usage measurement on the website (not the application), subject to your consent in the cookie banner.

We follow widely accepted data-protection principles, and process personal data on one of the following legal bases:

• Performance of a contract: processing necessary to provide the Service under our Terms of Service.

• Legitimate interest: processing that serves a legitimate interest of ours — such as securing the platform, preventing fraud and improving the Service — where it does not override your rights.

• Consent: processing based on consent you have expressly given (for example, website analytics cookies). You may withdraw consent at any time.

• Legal obligation: processing required to meet legal and regulatory obligations that apply to us.

Legal requirements: we may disclose data if required to do so by law, a court order or a request from a competent authority, or to protect our legal rights and the integrity of the Service.

Business changes: in the event of a merger, acquisition, sale of assets or a similar transaction, data may transfer to the successor entity — subject to this same Privacy Policy. We will notify you of any such material change.

The marketing website uses two categories of cookies:

a. Essential cookies: required for basic site functionality (for example, remembering your choice in the cookie banner). These cannot be disabled.

b. Analytics and marketing cookies: loaded only if you give explicit consent via the cookie banner. If you decline, the Google Analytics, Meta Pixel and Microsoft Clarity scripts will not be loaded. You can clear cookies via your browser settings at any time and choose anew.

The application itself (app.insight-pro.io) uses essential cookies only — for session identification and to maintain your login state.

• Account and business data in the application: retained while your account is active and for a reasonable period after termination of the Service, for backup, dispute resolution and legal-compliance purposes. You may request deletion at any time — see the "Your rights" section below.

• Website analytics: per the respective providers' policies (GA4 — up to 14 months; Meta — per settings; Clarity — up to 13 months).

We follow accepted industry practices to protect the data — encryption in transit (HTTPS / TLS), hosting with regulated cloud providers, hashed password storage, role-based access control (RBAC), and isolation between customer accounts.

Some of our sub-processors may process and store data in various countries. In every case we use only providers that meet accepted information-security and privacy standards.

Subject to applicable law, you have the following rights regarding your personal data:

• The right to access information we hold about you.

• The right to request correction of inaccurate data.

• The right to request deletion of your data (subject to legal retention obligations).

• The right to withdraw consent to marketing communications.

• The right to receive a copy of your data in a portable format (Excel / PDF).

To exercise these rights, contact us at info@insight-pro.io. We will handle your request within a reasonable timeframe as required by law.

The Service is intended for a business audience and is not directed at minors. If we become aware that we have collected information about a person under 16 without guardian consent, we will delete it.

We may update this Policy from time to time. The last-updated date appears at the top of this page. Material changes will be clearly highlighted on the Site or by email.

For any privacy-related questions, contact: info@insight-pro.io