Introduction.

Insighta, Inc. (“Insighta”) provides various data analytics and marketing services (“Insighta Services”) to its clients. Insighta is committed to protecting your privacy. This Privacy Policy (“Policy”) describes our privacy practices regarding information that we collect, store, use and disclose when you use our Insighta Services such as interacting with www.insighta.io (the “Site”) registering for an account, or using our technology platform (the “Insighta Platform”) to access the Insighta Services.

By accessing the Site or interacting with us as described above, you consent to and are agreeing to all the terms set forth in this Policy. When you interact with us on behalf of a client, including through an advertising agency or independent consultant of client, we may collect information from you as a customer representative.  If you do not agree to this Privacy Policy, do not use the Site, interact with us, or give us any information.

The Insighta Services are designed for businesses and are not intended for personal or household use. Accordingly, we treat all personal data covered by this Policy, including information about any visitors to our Site, as pertaining to individuals acting as business representatives, rather than in their personal capacity.

Information we collect.

We may collect the following types of information:

• Personal Information: Name, email address, phone number, job title, name, billing address, and other identifiers.

• Usage Data: Information about how you interact with our software, including log data, device information, browser type, and IP address.

• Cookies and Tracking Technologies: We use cookies and similar technologies to enhance user experience and analyze usage patterns.

If you communicate with us via email or complete online forms, any information provided in such communication may also be collected as Personal Information. When you contact our support team or otherwise interact with us, we collect the information, files, materials, or data that you voluntarily provide.

Information Collected From Clients and prospective Clients: When you become a client, we collect an email address and ask you to create a password for logging into our Insighta Platform. We may also request your phone number, title, company address, and billing details.

We collect information from current and prospective clients to market our Insighta Services. We provide clear options to opt out of marketing communications as required by law. Before using your Personal Information for a materially different purpose than originally collected or later authorized, we will notify you and provide the opportunity to opt out.

Cookies and Tracking Technologies: Insighta uses cookies so our servers can recognize returning visitors as unique users. Cookies are small text files placed in the "Cookies" folder on your device. Cookies set by Insighta are readable only to Insighta and cannot access, read, or modify other data on your device.

All browsers offer the option to refuse cookies. Refusing Insighta cookies may require you to re-enter certain information during each visit or may prevent us from customizing Site features to your preferences. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

How we use your information.

Insighta may use personal data for the following purposes:

• Providing and maintaining our Insighta Services, including monitoring their usage.

• Managing client accounts and enabling access to functionalities of the Insighta Services as a registered user.

• Fulfilling contracts, processing transactions, and delivering requested products or Insighta Services.

• Contacting you via email, phone, SMS, or push notifications for updates, security alerts, or service-related communications.

• Providing news, special offers, and general information about similar goods or services, unless you opt out.

• Responding to and managing your requests.

• For analytics, research, and improvement of our Insighta Services, products, and marketing strategies.
  
  

Sharing of information.

We do not sell your personal data. However, we may share your information with:

• Service Providers: Third-party vendors who assist in providing our Insighta Services.

• Legal Compliance: When required by law or to protect our rights.

• Business Transfers: In connection with mergers, acquisitions, or business reorganizations.

• With your consent.
  
  

Data security.

Insighta implements and maintains technical and organizational measures for protection of Personal Information (including protection against unauthorized or unlawful Processing and against unauthorized access, alteration, disclosure, or destruction).  Once we receive your transmission, we make reasonable efforts to ensure security on our systems.  All information is transmitted via Secure Socket Layer (SSL) technology and encrypted on our servers. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we strive to protect your Personal Information, we cannot ensure or warrant the security of any information you transmit to us or from our online services, and you do so at your own risk.

Data retention.

We retain your information for as long as necessary to fulfill the purposes outlined in this Policy unless a longer retention period is required by law.  Please note that except as required by applicable law or our specific agreements with you, we will not be obligated to retain your personal data for any particular period, and we are free to securely delete, anonymize or restrict access to it for any reason and at any time, with or without notice to you.

Your rights.

Depending on your location, you may have rights to: access, update, opt out, or delete your personal information; object to or restrict processing of your data; withdraw consent where processing is based on consent. To exercise these rights, please contact us at insighta@insighta.io.  We will respond to your request within thirty (30) days.

Third-party links.

This Privacy Statement applies only to the Site and not any other websites. The Site may contain links to third-party sites or applications, including social media sites, which may have privacy policies that differ from our own. We are not responsible for the practices of such sites or applications. The links to third-party sites from the Sites do not imply that we endorse or have reviewed the third-party sites.

Children's privacy.

Our Insighta Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 13 without verification of parental consent, we take steps to remove that information from our servers.

If we need to rely on consent as a legal basis for processing your information and your country requires consent from a parent, we may require your parent’s consent before we collect and use that information.

Changes to this Privacy Policy.

Insighta may change this Policy from time to time. If we make any changes to this Policy, we will change the "Last Updated" date above. You agree that your continued use of our Site, Insighta Platform or Insighta Services after such changes have been published to our Policy will constitute your acceptance of such revised Policy.

CCPA & GDPR

California Data Subjects

Starting January 1, 2020, the California Consumer Privacy Act (CCPA) provides additional privacy protections for California data subjects and users, under certain conditions, including: a) the right to see what data we have about you, your computer or Device (i.e., the right to know), b) the right to delete the data we have about you, your computer or Device (i.e., the right to delete) and c) the right to opt-out of the sale of data about you, your computer or device to certain third parties (i.e., the right to opt-out from sales of your information). We do not discriminate against you if you exercise any of the above rights. Moreover, we may not be able to honor a right if doing so violates applicable law.

As a California data subject, if you make a subject access request as set out in this Policy, You are entitled to see and delete the personal information that we have about You. We will confirm your request within 10 days and make a good faith attempt to fulfill your request within 45 days. 

Under the CCPA, your request to see the personal information that we have about you may include: (1) specific pieces of personal information that we may have about you; (2) categories of personal information we have collected about you; (3) categories of sources from which the Personal Information is collected; (4) categories of Personal Information that we sold or disclosed for a business purpose about you; (5) categories of third parties to whom the Personal Information was sold or disclosed for a business purpose under the CCPA; and (6) the business or commercial purpose for collecting or selling Personal Information.

We may take reasonable steps to verify your request. We will fulfill requests we are able to verify so long as we are not prohibited from doing so by applicable law and/or the information is not essential for us for billing, fraud prevention or security purposes. We will share our reason(s) for denying your request if we are unable to fulfill your request.

You may make an access or deletion request via an authorized agent by having such agent follow the process below. Please note that we will request any authorized agent demonstrate that they have been authorized by You to make a request on your behalf. And we will attempt to verify your request. We require any authorized agents to provide us with contact details such as an email address and phone number so that we may ensure a timely response.

European Economic Area

The General Data Privacy Regulation (“GDPR”) affords additional data protection rights to EU data subjects. For example, with respect to EU data subjects, the definition of personal data includes pseudonymous data such as an IP address, a mobile advertising ID or a cookie ID. EU data subjects have the right to complain to EU Supervisory Authorities and the right to access, port, correct and delete certain personal data processed by us (e.g., via the Site) and those partners that serve ads on our behalf to EU data subjects via the Company. 

While we do not physically store personal data in the context of the company, we do have clients located in the EU and we do place media buys on behalf of clients which may collect data from data subjects located in the EU. Our clients and publishers direct us to process data under their general instructions, but we may direct our technology partners to adjust advertising campaigns where we feel appropriate. We rely on the consent of the individual to process personal data in some instances (for example, when the user inputs personal data onto a web form of our Site). On other occasions, we may process personal data when needed to fulfill a contract with a client or partner or where required to do so by law.

We may also process data when it is in our or our clients’ legitimate interests to do this and when these interests are not overridden by the individual’s data protection rights (which may vary based on an individual’s jurisdiction). Certain Publishers, Clients and Partners choose not to operate in the EU and/or collect data from EU data subjects – and each has a process to ensure they are not collecting personal data from the EU in relation to the Agency.

To the extent that our processing activities require the transfer of personal data from EU data subjects to a jurisdiction that does not have an adequacy designation from the EU, we have entered into the Standard Contractual Clauses which provide appropriate safeguards under GDPR. Information we collect is transferred and stored in Google cloud platform (GCP) servers in the United States. We do not use automated decision making regarding your Personal Information.

Contact us

If you have any questions regarding this Policy, please contact Insighta, Inc. at 249 North Peters Road, Suite 201, Knoxville, Tennessee 37923 or cindy@insighta.io