Insytical
العربيةStart free trial
Legal

Privacy Policy

Last updated: October 15, 2026

This Privacy Policy describes how Insytical.com (“Insytical”, “we”, “us”, or “our”) collects, uses, stores, processes, and protects information when you access or use our software-as-a-service platform, website, and related services (collectively, the “Services”). This policy is designed to satisfy applicable privacy and data protection laws, as well as the requirements of third-party platforms and APIs that integrate with Insytical.

1Scope of This Policy

This Privacy Policy applies to:

  • Visitors to our website
  • Users who create or access an Insytical account
  • Users who connect third-party platforms to the Services

This policy does not apply to third-party services, websites, or platforms that are accessed through Insytical, which are governed by their own privacy policies and terms.

2Information We Collect

2.1 Information You Provide

We may collect information that you voluntarily provide, including:

  • Name, email address, and business or company information
  • Account credentials
  • Subscription and billing-related information
  • Communications and support requests

2.2 Information Accessed From Connected Platforms

When you connect a third-party platform to Insytical.com, you explicitly authorize us to access certain data made available by that platform through its APIs.

The scope of data accessed depends on the platform and the permissions you grant, and is limited to what is reasonably necessary to provide the Services and their user-facing features.

Data accessed through integrations is generally analytical, operational, or performance-related in nature and is accessed on a read-only basis, unless otherwise disclosed.

Specifically for Google Ads, we access campaign performance metrics (such as clicks, impressions, and conversions), account metadata, and budget settings. When you ask it to, Insytical also creates, pauses or resumes the Google Ads campaigns you build and approve in Insytical.

If you choose to connect Google Analytics, we access, on a read-only basis, the list of Google Analytics properties (websites) your Google account can view and, for the properties you select, aggregated website reports: sessions, users and engagement, traffic sources and campaigns, landing pages, key events, and purchases and purchase revenue. We read these reports from Google when they are needed; a copy is kept for at most 36 hours and is deleted as soon as you disconnect Google Analytics. We never change anything in your Google Analytics account.

AI features: if you ask Insytical’s AI assistant about your website, it reads your Google Analytics reports to answer you. To write the answer, the figures it needs are processed by our AI model provider (Google’s Gemini API), which doesn’t use them to train its models. Answers are saved in your chat history like any other chat, for up to 90 days, and a downloaded answer file is kept for up to 30 days. If you connect your own AI assistant (for example Claude or ChatGPT) to Insytical, it can read the same reports when you ask it to; how that provider handles them is governed by your agreement with them. Insytical never uses Google Analytics data to train AI models.

3How We Use Information

We use information collected through the Services to:

  • Provide, operate, and maintain the Services
  • Generate dashboards, reports, analytics, and insights visible within your account
  • Deliver performance monitoring, alerts, and recommendations
  • Improve functionality, reliability, and user experience
  • Provide customer support and respond to inquiries
  • Comply with legal, regulatory, and contractual obligations

We do not use data obtained from connected platforms for advertising purposes outside of Insytical.

4Data Storage, Processing, and Retention

Information accessed from connected platforms may be stored on secure servers in order to provide analytics and reporting functionality. Our infrastructure is hosted in a secured cloud environment that follows industry-standard security practices, including physical security controls, network security, access controls, encryption at rest and in transit, regular vulnerability management, and continuous monitoring.

Servers used to operate the Services are located in the United States and Canada, and all data is processed in accordance with applicable U.S. and Canadian laws. Data obtained from a connected platform is retained only for as long as the relevant integration remains active. If you disconnect an integration from within the Services, the associated data for that platform is deleted from our systems. Certain account-level information may be retained as required to meet legal, accounting, or security obligations.

5Analytics and Tracking

We may use third-party service providers to monitor and analyze the use of our Services.

Google Analytics

Google Analytics is a web analytics service provided by Google that tracks and reports website usage. Google Analytics collects information such as pages visited, time spent on the site, and general usage patterns. This information is used to analyze and improve the performance and usability of the Services.

Google may use the collected data to contextualize and personalize ads within its own advertising network. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, which prevents Google Analytics JavaScript from sharing visit information.

For more information on Google’s data practices, please review Google’s Privacy Policy.

6Behavioral Remarketing

We may use remarketing services to advertise Insytical on third-party websites after you have visited our website. These services use cookies and similar technologies to inform, optimize, and serve advertisements based on past visits to the Services.

Google Ads Remarketing

Google Ads remarketing services are provided by Google. You can opt out of Google Analytics for Display Advertising and customize Google Display Network ads through Google’s Ads Settings. You may also use the Google Analytics Opt-out Browser Add-on to prevent your data from being used by Google Analytics.

For additional information, please review Google’s Privacy Policy.

7Payments

We may offer paid products or services through the Services. Payment processing is handled by third-party payment processors.

  • We do not store or collect payment card details.
  • Payment information is provided directly to our payment processors and is governed by their respective privacy policies.
  • Payment processors we work with adhere to PCI-DSS standards as managed by the PCI Security Standards Council.

8Data Sharing and Disclosure

Insytical does not sell or rent personal data. We may share information only in the following circumstances:

  • With service providers who perform services on our behalf and are bound by confidentiality and data protection obligations
  • To comply with applicable laws, regulations, legal processes, or lawful requests
  • To protect the rights, security, or integrity of Insytical, our users, or others

In addition, information may be disclosed or transferred as part of a business transaction, such as a merger, acquisition, reorganization, financing, or sale of assets, where such information is necessary to complete the transaction and remains subject to appropriate confidentiality protections. We may also disclose information in response to court orders, subpoenas, or other lawful requests by public authorities, including to meet national security or law enforcement requirements.

9Google API Services User Data

Insytical’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Information obtained from Google APIs is:

  • Used solely to provide or improve user-facing features within Insytical
  • Not sold or used for advertising
  • Not transferred to third parties except as necessary to operate core functionality

10TikTok Data

If you connect a TikTok account using Log in with TikTok, you authorize Insytical to access the following through TikTok’s APIs, limited to the permissions you approve on TikTok’s own authorization screen:

  • Profile information: your display name, username, profile picture and TikTok account identifiers, used to show which account is connected and which account a post will go to.
  • Your public videos and their statistics, such as descriptions, cover images, links, views, likes, comments and shares, used to show how your content performs in your dashboards, reports and insights.
  • Posting: used only to send the videos and photos you choose to your TikTok account. Each post is either published with the settings you pick for it (such as who can view it, whether comments, Duets and Stitches are allowed, and content disclosure labels) or delivered to your TikTok inbox as a draft for you to finish in the TikTok app. Before each post we read your account’s current posting options from TikTok, such as the visibility choices available and the longest video you can post, so the post follows TikTok’s rules.

Insytical posts to TikTok only content you have created or approved and chosen to publish or schedule. We never post to your TikTok account on our own initiative. Once a post is published, you manage it in TikTok.

TikTok data is used only to provide these features to you, including AI-assisted features you choose to use, such as suggestions for future posts based on how your past posts performed. It is never sold, never used for advertising, and never shared with third parties other than the service providers that operate the Services on our behalf under confidentiality obligations. Access tokens are stored encrypted.

You can disconnect a TikTok account at any time from Integrations, or remove Insytical’s access in your TikTok account settings. When you disconnect, we revoke Insytical’s access with TikTok straight away and delete the stored access tokens, and the TikTok video data we imported is deleted once no TikTok account remains connected to your workspace. Posts already published stay on TikTok. TikTok’s own handling of your data is governed by the TikTok Privacy Policy.

11Data Security

We employ reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction.

While we follow generally accepted industry standards, no method of transmission or storage is completely secure, and absolute security cannot be guaranteed. We strictly limit human access to data obtained via our APIs based on section 4.

12Children’s Privacy

The Services are intended for business users and are not directed to individuals under the age of 16.

We do not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has provided personal data to Insytical, please contact us. If we become aware that we have collected personal data from a minor without appropriate consent, we will take steps to delete such information.

13Your Rights

Depending on your jurisdiction, you may have rights to:

  • Access or receive a copy of your information
  • Request correction or deletion of your information
  • Disconnect third-party integrations at any time
  • Close your account

Requests can be made through your account settings or by contacting us.

14International Data Transfers

Your information may be transferred to and processed in jurisdictions outside your country of residence. Where required by law, appropriate safeguards are implemented.

15Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

16Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Privacy inquiries
privacy@insytical.com

By using the Services, you acknowledge that you have read and understood this Privacy Policy.