INSEN — Privacy Policy

1. Data controller

The controller of your personal data is PMC Tomasz Paśko, ul. Żywiecka 14, 34-321 Łękawica, Śląskie, Poland, Tax ID (NIP): 5532328643 ("INSEN", "we"), operating insen.app and dashboard.insen.app. Privacy contact: hi@insen.app.

2. Data we process

Account and profile: email address (magic-link sign-in), name, profile image, Instagram handle and public profile information.

Public Instagram content: public Reels (captions, transcripts, engagement counts) and public comments on your Reels, retrieved from publicly accessible sources for search, analysis and product generation.

Usage and device: app activity, log data, IP address, browser information, cookies and identifiers.

Payments: processed by Stripe. We receive limited billing metadata (e.g. status, plan) but do not store full card numbers.

Buyers of products: buyers' email addresses and order details, to fulfil transactions.

3. Purposes and legal bases (GDPR)

• Providing the Service (account, indexing, AI search, storefront, product delivery) — Art. 6(1)(b) (contract).
• Payments and fraud prevention — Art. 6(1)(b) and (f).
• Product improvement, security, analytics — Art. 6(1)(f).
• Advertising measurement (Meta Pixel / Conversions API) — Art. 6(1)(a) (consent) where required.
• Transactional emails — (b)/(f); marketing emails only with consent (a), with an opt-out in every message.

4. AI processing

We use AI providers to transcribe, index, analyse content and generate product drafts and audience insights. We send them only public content or content you provide — never your Instagram login credentials.

5. Recipients (processors and partners)

Stripe (payments, payouts), Supabase (database, authentication, file storage/hosting), Resend (transactional email), AI providers (transcription, generation, analysis), Meta Platforms (advertising measurement), public-data providers (retrieval of public Instagram content), infrastructure/hosting providers (e.g. Vercel), and, where legally required, advisors or authorities. We do not sell personal data.

6. Cookies and advertising measurement

We use essential cookies to run the Service (e.g. sign-in) and, subject to consent where required, the Meta Pixel and Conversions API to measure advertising effectiveness. This may involve sending Meta hashed identifiers (e.g. a hashed email) and event data. You can manage consent via our cookie banner and your browser settings.

7. International transfers

Some providers process data outside the EEA. Such transfers are covered by appropriate safeguards, e.g. the EU Standard Contractual Clauses (SCC) or an adequacy decision.

8. Retention

We keep personal data while your account is active and as needed to provide the Service, then for the period required by legal, accounting and tax obligations, after which it is deleted or anonymised.

9. Your rights (GDPR)

You have the right to access, rectify, erase, restrict, port, and object to processing, and to withdraw consent at any time (without affecting prior processing). Contact hi@insen.app. You may also lodge a complaint with the Polish supervisory authority — the President of the Personal Data Protection Office (UODO).

10. Third-party data (commenters)

When processing public comments on a Creator's Reels, we may process their authors' personal data (e.g. username, comment text) under legitimate interests (Art. 6(1)(f)) to provide audience analysis to the Creator, using only publicly available data; we honour valid objection/erasure requests.

11. Children

The Service is not directed to persons under 18 and we do not knowingly collect their data.

12. Security

We use technical and organisational measures (encryption in transit, access controls, secret management) to protect personal data. No system is fully secure.

13. Changes

We may update this Policy. Material changes will be notified by email or in the app.

14. Contact

PMC Tomasz Paśko — ul. Żywiecka 14, 34-321 Łękawica, Poland · hi@insen.app