Privacy Policy

a. On the marketing website: when you submit the contact form, we collect your full name, company name, role (optional), phone number, email address and any free-text message you choose to include. We also collect aggregated, anonymized usage data (obfuscated IP, browser type, pages visited, referrer).

b. When you sign up for the application: account details (name, email, phone, role), your company details (name, registration number, projects), and access credentials (password stored hashed).

c. While you use the application: business data you choose to enter — purchase orders, invoices, contracts, daily reports, field photos, signatures, documents and payment details (including bank account information for export to bank portals). We also record who performs which actions inside the system (who approved an invoice, who filed a daily report, etc.).

d. Information about third parties you enter: while using the application, you may enter details of subcontractors, suppliers, clients and other counterparties — including names, registration numbers, contact details and bank information. As our customer, you are responsible for the legal basis to collect and share this data with us. We act as a data processor on your behalf with respect to that data.

We use the information solely for the following purposes:

• To operate the application and provide the Service you signed up for.

• To authenticate you, manage access permissions and protect account security.

• To respond to inquiries submitted via the contact form and schedule a demo.

• To improve the Service, debug issues and analyze usage patterns (in aggregate, anonymized).

• To send necessary operational messages (system alerts, payment summaries, password resets).

• To measure the effectiveness of our marketing campaigns.

• To comply with legal and regulatory obligations.

We use professional service providers to help operate the Service. They access data only to the extent needed for their function and are bound by confidentiality:

• Google Cloud Platform (GCP) — application hosting, database, and storage of files you upload (invoices, field photos, documents).

• Firebase Hosting — hosting the marketing website.

• Microsoft Azure (Document AI) — extracting structured data from invoices you upload (reading PDFs, extracting invoice number, amounts, line items). All extractions are reviewed and confirmed by you before final save.

• Gmail / SMTP — operational email delivery (monthly summaries, payment notifications, PDF order copies).

• Google Analytics 4 / Meta Pixel / Microsoft Clarity — anonymized usage measurement on the marketing website only (not the application), subject to your consent in the cookie banner.

• FormSubmit — delivers contact-form submissions to our email.

Some providers may process data on servers outside Israel. We choose providers that meet accepted information-security and privacy standards. We do not sell, lease or transfer your information to any other commercial party beyond what is listed in this Policy.

The marketing website uses two categories of cookies:

a. Essential cookies: required for basic site functionality (for example, remembering your choice in the cookie banner). These cannot be disabled.

b. Analytics and marketing cookies: loaded only if you give explicit consent via the cookie banner. If you decline, the Google Analytics, Meta Pixel and Microsoft Clarity scripts will not be loaded. You can clear cookies via your browser settings at any time and choose anew.

The application itself (app.insight-pro.io) uses essential cookies only — for session identification and to maintain your login state.

• Account and business data in the application: retained while your account is active and for a reasonable period after termination of the Service, for backup, dispute resolution and legal-compliance purposes. You may request deletion at any time — see the "Your rights" section below.

• Contact-form inquiries from the website: up to 24 months from submission.

• Website analytics: per the respective providers' policies (GA4 — up to 14 months; Meta — per settings; Clarity — up to 13 months).

We follow accepted industry practices to protect the data — encryption in transit (HTTPS / TLS), hosting with regulated cloud providers, hashed password storage, role-based access control (RBAC), and isolation between customer accounts. However, no system is fully impervious, and we cannot guarantee absolute security.

Under the Israeli Privacy Protection Law, 1981, you have the following rights:

• The right to access information we hold about you.

• The right to request correction of inaccurate data.

• The right to request deletion of your data (subject to legal retention obligations).

• The right to withdraw consent to marketing communications.

• The right to receive a copy of your data in a portable format (Excel / PDF).

To exercise these rights, contact us at info@insight-pro.io. We will handle your request within a reasonable timeframe as required by law.

The Service is intended for a business audience and is not directed at minors. If we become aware that we have collected information about a person under 16 without guardian consent, we will delete it.

We may update this Policy from time to time. The last-updated date appears at the top of this page. Material changes will be clearly highlighted on the Site or by email.

For any privacy-related questions, contact: info@insight-pro.io