Privacy Policy

Last updated: October 5, 2026

1. Who We Are

Analytical Insider Inc. operates analyticalinsider.ai. We are an early-stage startup based in the United States. Contact: [email protected]

2. What We Collect

When you create an account or use the platform, we collect:

  • Your name and email address from your Google or GitHub OAuth login
  • Billing and subscription records processed by Stripe
  • Agent deployment history and usage logs
  • Standard web server logs (IP address, browser, timestamps)

We do not collect passwords. We do not store credit card numbers. Stripe handles all payment data.

3. How We Use It

  • To provide and operate the platform
  • To process payments and manage your subscription
  • To send transactional emails (account events, billing receipts)
  • To monitor for abuse and maintain service reliability

We do not sell your data. We do not use your data to train AI models.

4. Third Parties

We share data only with the services required to operate:

  • DigitalOcean: cloud hosting and managed database (United States)
  • Stripe: payment processing
  • Google / GitHub: OAuth authentication
  • Google (Gmail API, Google Cloud Pub/Sub) and Microsoft (Microsoft Graph): when a customer connects a mailbox to the AI Sales Agent service, we act through that provider on the mailbox owner's behalf to create drafts (Google mailboxes), to send the messages the customer's representatives send or schedule, and to learn that a reply has arrived so it can be recorded on the correct lead. That email is sent from the customer's own Google Workspace or Microsoft 365 mailbox, not from our servers. Each provider's own privacy terms govern its handling of that data.
  • Google Analytics: website analytics (with your consent; you may decline via the cookie banner)
  • Messaging provider: text message delivery for representatives who use Analytical Insider, including your mobile number and the messages sent to and from it.

We do not share your data with advertisers, data brokers, or any other third parties beyond those listed above.

4a. AI Sales Agent Service - Prospect Data

Customers of the AI Sales Agent service authorize us to research and process contact information for third-party business prospects on their behalf. This includes:

  • Business contact names and email addresses sourced from publicly available business directories and web data
  • Company information, including size, industry, and recent business signals
  • Email engagement data for contacts in active campaigns: replies, delivery failures, and outcomes recorded from a reply or by a representative. We do not place open-tracking pixels in outbound email and we do not rewrite links to track clicks.
  • The content of replies. When a prospect replies to a message sent through the platform, we store the subject, the body and the message headers that identify the thread, so the reply appears on the correct lead record. Mail in a connected mailbox that is not a reply to a message sent through the platform is not stored. The assigned representative may receive a notification email containing the subject and a short excerpt of the reply.

This data is processed on behalf of and under the direction of the customer. It is used solely to execute outbound email campaigns for that customer and is not used for any other purpose. Unsubscribe requests from prospects are honored within one business day and those contacts are permanently suppressed from future outreach. Prospect data is retained only for the duration of the active customer relationship and is deleted within 30 days of account termination upon written request.

Suppression records are the one exception to deletion. When a person asks not to be contacted, we keep a record of that request so a later data load cannot restart the outreach. When the related prospect data is deleted, that record is reduced to a keyed one-way hash of the email address, kept with the reason, the source and the date of the request. The email address itself and any link to a lead or message are removed. The record is checked before an email is sent or drafted through the platform and is used for nothing else.

A person who receives email sent through the platform can opt out by using the unsubscribe link in a sequence message, which takes effect when the request is received and stops further email from the customer who sent the message. A person can also reply to ask not to be contacted. The reply is recorded on the lead for the customer's representative, who is responsible for honoring it, and for mailboxes connected through Google the platform also recognizes common opt-out wording and applies it automatically. To stop email from every customer who sends through the platform, email [email protected] and we will apply the request across all customer accounts.

4b. Real Estate Leads Service - Third-Party Property Owner Data

Our Denver Metro distressed property leads product delivers personal data about third-party property owners sourced from public county records, court filings, and tax rolls. This includes:

  • Property owner names and mailing addresses from county assessor records
  • Skip-traced phone numbers appended via third-party data providers (Pro and Enterprise tiers)
  • Property details and distress indicators derived from public records

This data is sourced exclusively from public records and is delivered to subscribers for lawful real estate outreach purposes. Subscribers are responsible for their own compliance with applicable laws, including the Colorado Privacy Act (CPA), the California Consumer Privacy Act (CCPA), and the Telephone Consumer Protection Act (TCPA), when contacting property owners. Analytical Insider does not use this data for any purpose other than fulfilling subscriber deliveries.

Colorado residents whose information is included in our leads data may submit an opt-out request by emailing [email protected]. We will suppress that individual from future lead deliveries within 30 days. This paragraph covers lead deliveries. Opt-outs for outbound email are described in section 4a.

4c. AI Processing

When you deploy AI agents on this platform, the following data handling applies:

  • Task instructions and inputs you provide to agents are transmitted to third-party AI model providers (including Anthropic, OpenAI, and others) to generate outputs. Those providers' own privacy policies govern their handling of that data.
  • Files you submit for analysis are processed within the session and are not stored beyond it.
  • AI-generated outputs (agent responses, analysis results) may be logged as part of your agent deployment history for operational purposes.
  • We do not use your inputs or outputs to train our own models. We do not sell agent session data.

4d. Text Messages (SMS)

If you agree to receive text messages from Analytical Insider, we use your mobile number to send the texts you agreed to, which are about scheduling meetings and following up on conversations. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. We do not sell, rent or share your SMS opt-in data, your mobile number or your texting consent with third parties or affiliates for marketing or promotional purposes. Texts are delivered through our messaging provider.

5. Data Security

Data is stored in a managed database with SSL-required connections. All traffic is encrypted via HTTPS. API keys and secrets are stored as encrypted environment variables, not in code. We are an early-stage startup and do not hold SOC 2 or ISO 27001 certifications.

5a. Data Retention

We retain your data for the following periods:

  • Account data (name, email, OAuth ID): retained for the life of your account and deleted within 30 days of account deletion upon request.
  • Billing records: retained for 7 years as required for tax and accounting compliance.
  • Usage logs and agent deployment history: retained for up to 12 months, then deleted.
  • Web server logs (IP address, timestamps): retained for up to 90 days.
  • Prospect data (AI Sales Agent customers), including stored reply content: retained for the duration of the active customer relationship and deleted within 30 days of account termination upon written request. Suppression records are kept as described in section 4a.

6. Your Rights

Regardless of where you are located, you can request at any time:

  • Access: a copy of the personal data we hold about you
  • Correction: correction of inaccurate or incomplete data
  • Deletion: deletion of your account and associated personal data (subject to legal retention obligations)
  • Restriction: restriction of processing of your data in certain circumstances
  • Portability: a machine-readable export of your data
  • Objection: objection to processing based on legitimate interests
  • Withdraw consent: withdrawal of any consent you have provided (including analytics cookies), at any time, without affecting the lawfulness of prior processing

Email [email protected] to make a request. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.

6a. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases under Article 6 of the GDPR:

  • Contractual necessity (Art. 6(1)(b)): processing your account data, billing records, and agent deployment history is necessary to provide the Service you have signed up for.
  • Consent (Art. 6(1)(a)): Google Analytics cookies are set only with your explicit consent, which you may withdraw at any time using the cookie preference toggle below.
  • Legitimate interests (Art. 6(1)(f)): we process web server logs and usage data to maintain service security, prevent abuse, and improve reliability. These interests do not override your rights.
  • Legal obligation (Art. 6(1)(c)): billing records are retained for the period required by applicable tax and accounting laws.

We are a US-based company. Your data is stored and processed in the United States. If you are located in the EEA or UK, this constitutes an international transfer. We rely on standard contractual clauses and our service providers' own transfer mechanisms (including DigitalOcean's and Stripe's Data Processing Agreements) for these transfers. You have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.

6b. California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you the following rights:

  • Right to Know: you may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
  • Right to Delete: you may request deletion of personal information we have collected, subject to certain exceptions.
  • Right to Correct: you may request correction of inaccurate personal information.
  • Right to Opt-Out of Sale or Sharing: we do not sell or share your personal information for cross-context behavioral advertising. No opt-out action is required, but you may contact us to confirm this in writing.
  • Right to Limit Use of Sensitive Personal Information: we do not collect sensitive personal information as defined by the CPRA beyond what is necessary to provide the Service.
  • Right to Non-Discrimination: we will not discriminate against you for exercising any of these rights. You will not receive a different level of service or pricing as a result of making a request.

Categories of personal information collected in the past 12 months: identifiers (name, email, IP address); commercial information (billing and subscription records); internet or other electronic network activity (usage logs, agent deployment history). We collected this information directly from you or automatically via your use of the Service.

To exercise your CCPA rights, email [email protected] with the subject line "CCPA Request." You may also designate an authorized agent to submit a request on your behalf; we may require written authorization or a power of attorney. We will verify your identity before fulfilling the request and will respond within 45 days.

6c. Children's Privacy

The Service is not directed to children under the age of 16, and we do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected information from a child under 16, please contact us at [email protected] and we will delete it promptly.

7. Cookies and Analytics

We use the following cookies on this website:

  • Session cookie: keeps you signed in while your browser is open. Required for the platform to function.
  • Google Analytics: analytics cookies that help us understand how visitors use the site. These are only set if you accept via the cookie consent banner. You may decline at any time. Declining does not affect your ability to use the site.

We do not use advertising cookies, retargeting cookies, or third-party tracking pixels beyond Google Analytics.

8. Cookie Preferences

You can change your analytics cookie preference at any time below. Your choice is saved in your browser and takes effect immediately.

No preference set yet.

9. Contact

[email protected]

Analytical Insider Inc. · 2301 Blake St Suite 266 · Denver, CO 80205