1. Introduction
Welcome to InsightSync.ai (“we,” “our,” or “us”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have when you use our research analysis platform and services.
By accessing or using InsightSync.ai, you agree to the terms of this Privacy Policy.
2. Information We Collect
We collect personal information that you voluntarily provide to us when you register on the services, express an interest in obtaining information about us or our products and services, or otherwise when you contact us.
A. Personal Information Provided by You
Based on our system architecture, we collect:
- Account Information: Full name and email address when you register or sign up for newsletters.
- Credentials: Passwords (which are cryptographically hashed and salted before storage).
- Payment Data: We use Stripe for payment processing. We do not store your credit card numbers on our servers. We store only the Stripe Customer ID and subscription status details.
- User Content: Research papers (PDFs), text inputs, research queries, and conversation history with our AI assistant.
B. Information Automatically Collected
- Usage Data: We collect analytics regarding how you interact with the platform, such as the number of papers processed, ideas generated, and features used (e.g., the “Deep Research” or “Experiment Generator” tools).
- Feedback Data: When you provide thumbs-up/down ratings or text feedback on AI responses, this data is stored to improve system performance.
3. How We Use Your Information
We use the information we collect for the following purposes:
To Provide Services
To process your uploaded research papers, extract insights, generate summaries, and surface research gaps and trends.
AI Processing
Your uploaded documents and queries are processed by Large Language Models (LLMs) to provide the core functionality of InsightSync.
To Manage Your Account
To facilitate account creation, authentication, and manage user subscriptions.
To Send Communications
We use Mailgun to send email digests (based on your subscription preferences), verification emails, and administrative updates.
To Improve Our Services
We analyze usage patterns and user feedback to refine our algorithms and AI prompts.
4. How We Share Your Information
✓ We do not sell your personal information.
However, to provide our services, we share data with the following third-party service providers:
AI Service Providers
- OpenAI & Anthropic: Text content extracted from your uploaded PDFs and your chat queries are sent to these providers to generate summaries, insights, and chat responses.
- LlamaIndex: Used for indexing and retrieving context from your documents.
Payment Processors
Stripe: Used for handling all billing and subscription transactions.
Academic Data Sources
OpenAlex & Semantic Scholar: We query these services using keywords derived from your papers to fetch citation counts, publication years, and trend data.
Email Services
Mailgun: Used to deliver transactional emails and research digests.
5. Intellectual Property and Research Data
We understand that the research papers and ideas you upload may contain sensitive or proprietary intellectual property.
- Ownership: You retain all ownership rights to the documents you upload.
- Isolation: Your uploaded papers are indexed specifically for your user account. Our RAG (Retrieval-Augmented Generation) system uses user-specific filtering to ensure your documents are not accessible to other users.
6. Data Retention
We retain your personal information and uploaded content only for as long as is necessary for the purposes set out in this Privacy Policy.
Account Deletion: If you request to delete your account or specific projects/papers, our system is designed to remove the database records, vector embeddings, and stored physical files (PDFs and extracted images).
7. Data Security
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process.
Encryption
Data is encrypted in transit using TLS/SSL protocols.
Access Control
We use JWT (JSON Web Tokens) for secure authentication.
Storage
Files are stored securely with restricted database access.
8. Your Privacy Rights
Depending on your location, you may have the following rights:
Right to Access
Request a copy of the personal information we process about you.
Right to Rectification
Request correction of inaccurate data.
Right to Erasure
Request deletion of your data (Delete Account functionality is available in your settings).
Right to Data Portability
Receive your data in a structured, commonly used format.
9. Children's Privacy
We do not knowingly solicit data from or market to children under 18 years of age. By using our services, you represent that you are at least 18 years old or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the services.
10. Updates to This Policy
We may update this privacy policy from time to time. The updated version will be indicated by an updated “Last Updated” date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy policy frequently to stay informed about how we are protecting your information.
11. Contact Us
If you have questions or comments about this policy, you may contact us at:
InsightSync Support
Email: privacy@insightsync.ai