Privacy Policy
Effective date: July 29, 2026
XsighTeam Ltd (“InsighTeam,” “we,” “us,” or “our”) builds company-intelligence products, including the InsighTeam platform, our Voice AI Agent, and WhatsApp Control (together, the “Services”). This Privacy Policy explains what data we collect, how we use it, who we share it with, and the choices and rights available to you.
Our Services are typically deployed on behalf of a business customer (“Customer”) who controls the data ingested into the Services. Where we process personal information on a Customer’s behalf, the Customer is the data controller and InsighTeam acts as a data processor or service provider, governed by our agreement with that Customer. This policy describes our practices as that processor and, where we act as a controller (for example, for our own website visitors and prospective customers), as a controller.
1. Information We Process
Depending on which Services a Customer uses, we may process:
- Customer content— data a Customer authorizes us to ingest to provide the Services, such as documents, tickets, project and planning data, emails and message content, metadata, and, for the Voice AI Agent, call audio and transcripts, and for WhatsApp Control, WhatsApp message content and metadata.
- Account and contact information— names, work email addresses, and role information for Customer users and administrators.
- Usage and log data— product usage events, device and browser information, IP address, and diagnostic logs.
- AI processing data— prompts and responses generated while using the Services, including model traces used for debugging and quality assurance.
We collect only the data sources and access paths a Customer authorizes, and we apply relevance filtering and personal-data minimization where practical while retaining information (such as names) needed to provide accurate project and delivery insight.
2. How We Use Information
- To provide, operate, secure, support, and troubleshoot the Services.
- To generate the insights, summaries, and automated actions the Services are designed to produce.
- To maintain and improve the reliability, safety, and performance of the Services.
- To communicate with Customer users about the Services, including support and security notices.
- To comply with legal obligations and enforce our agreements.
We do not sell personal information. We do not use Customer content to train shared or general-purpose AI models, and we do not feed Customer data into AI tools that have not been approved through our internal vendor review process.
3. Voice and Messaging Data
The Voice AI Agent processes call audio and generates transcripts and summaries to provide conversational and workflow automation on a Customer’s behalf. WhatsApp Control processes WhatsApp message content and metadata through the WhatsApp Business Platform to provide messaging automation. Customers deploying these Services are responsible for providing any notices and obtaining any consents required from their own end users or contacts under applicable law and under Meta’s WhatsApp Business policies before enabling call recording or automated messaging.
4. Subprocessors and International Transfers
We rely on a limited set of vetted subprocessors to deliver the Services, including infrastructure, AI model, developer-tooling, identity, and productivity providers such as Amazon Web Services, Microsoft Azure AI Foundry, LangSmith, Auth0, GitHub, Atlassian, and Microsoft 365. Each subprocessor is reviewed under our vendor management practices before it may process Customer content. Where data is transferred internationally, we take reasonable steps to ensure it remains subject to appropriate contractual and security protections.
5. Data Retention and Deletion
We retain Customer content for as long as needed to provide the Services and as agreed with the Customer, and we delete or anonymize it thereafter unless a longer period is required by law. Log and diagnostic data is retained for a limited period for security and troubleshooting purposes.
6. Your Rights
Depending on your location, you may have the right to access, correct, export, restrict, or delete personal information we process. If personal information about you was processed through a Customer’s use of the Services, we recommend contacting that Customer directly, as they control the data. We support Customers in responding to these requests, and we log all privacy and deletion requests with the requester, date, scope, and action taken. You may also contact us directly at support@insighteam.ai and we will route your request appropriately.
7. Security
We maintain administrative, technical, and organizational safeguards designed to protect data against unauthorized access, disclosure, alteration, and destruction, consistent with our internal security and access control policies.
8. Website Analytics and Cookies
Our website uses minimal, privacy-conscious analytics to understand aggregate traffic. We do not use advertising or cross-site tracking cookies.
9. Children's Privacy
The Services are intended for business use and are not directed to children. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above, and where appropriate, we will provide additional notice to Customers.
11. Contact Us
Questions about this Privacy Policy or our data practices can be sent to support@insighteam.ai.