Legal

Privacy Policy

Last updated: April 15, 2026

Insolla (“we,” “us,” “our”) operates the website at insolla.ai and the tools and services described on it. This policy explains what data we collect, how we use it, and what rights you have.

1. What we collect

We collect only the data necessary to deliver our services:

  • Account information. Email address, name (if provided), and authentication data when you create an account through Clerk.
  • Billing information. Payment details are collected and processed by Stripe. We never see or store your full card number. We store only a Stripe customer ID to link your subscription to your account.
  • Tool inputs. Text you type or files you upload to our tools (Workflow Analyzer, SOP Generator, List Enricher). See “File uploads” below for how these are handled.
  • Form submissions. Name, email, and message content when you submit a contact form, complete a scorecard, or request an ROI report.
  • Usage data. Page views, feature usage, and interaction events collected through Vercel Analytics. This data is anonymous and not linked to your identity.

2. File uploads

When you upload a file to one of our tools, the file is read into server memory, sent to Anthropic's Claude API for processing, and the results are returned to your browser. The original file is not written to disk, stored in a database, or retained after the request completes.

Anthropic does not use data submitted through their API to train models. Your uploaded content is processed and discarded per Anthropic's privacy policy.

All file transfers occur over TLS-encrypted connections. For more details, see our Security page.

3. How we use your data

We use the data we collect to:

  • Deliver results from our tools (analysis, reports, enriched data)
  • Manage your account and subscription
  • Respond to your inquiries and support requests
  • Send transactional emails (welcome, receipts, follow-ups)
  • Improve our tools and services based on anonymous usage patterns

We do not sell your data. We do not use your data for advertising. We do not share your personal information with third parties for their own marketing purposes.

4. Third-party processors

We rely on a small set of trusted providers to operate our services. Each processes data on our behalf under their own privacy policies:

  • Anthropic (Claude API) for AI-powered analysis and generation. Does not train on API inputs.
  • Stripe for payment processing. PCI DSS Level 1 certified.
  • Clerk for authentication and identity management. SOC 2 Type II certified.
  • Vercel for hosting, edge network, and analytics. SOC 2 Type II certified.
  • Supabase for database and user profile storage. SOC 2 Type II certified.
  • Resend for transactional email delivery. GDPR compliant.

5. Data retention

  • File uploads: Not retained. Processed in memory and discarded immediately.
  • Account data: Retained while your account is active. Deleted upon account deletion or upon request.
  • Form submissions: Contact form messages and scorecard results are retained for business purposes. You can request deletion at any time.
  • Billing data: Managed by Stripe per their retention policies and applicable financial regulations.
  • Analytics: Anonymous usage data is retained by Vercel per their data policies.

6. Cookies and analytics

We use essential cookies for authentication and session management (set by Clerk). We use Vercel Analytics for anonymous, aggregate usage statistics. We do not use advertising cookies or third-party tracking pixels.

You can disable cookies in your browser settings. Disabling cookies may affect authentication functionality.

7. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent for optional data processing
  • Lodge a complaint with a supervisory authority

To exercise any of these rights, email us at Info@Insolla.ai. We will respond within 30 days.

8. Children's privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by email or by placing a notice on our website. The “last updated” date at the top of this page reflects the most recent revision.

10. Contact

For questions about this policy, your data, or anything else privacy-related:

Info@Insolla.ai

Insolla
United States

Also see our Security page for details on how we protect your data in practice.