Privacy Policy

This Privacy Policy explains how InsightCrafter (“InsightCrafter”, “we”, “us”, “our”) collects, uses, stores, shares, and protects information when you visit insightcrafter.com(the “Website”), contact us, or use any application we publish that connects to third-party services (each, an “App”).

If you do not agree with this policy, please do not use the Website or the Apps.

1. Who we are

InsightCrafter is a boutique business-intelligence consultancy. We are the data controller for the personal data described in this policy. You can reach us at hello@insightcrafter.com.

2. Information we collect

Contact form. When you submit our discovery-call form we collect your name, email address, company name, company size, and the description of your data needs that you write in the message field. We use this only to respond to your enquiry.

Newsletter. If you subscribe, we store your email address so we can send you BI insights. Every email includes an unsubscribe link, and you can also ask us to remove you at any time.

Technical data. Our hosting provider records standard server logs (IP address, user agent, requested URL, timestamp) for security, abuse prevention, and reliability. Your light/dark theme preference is stored locally in your own browser and is never sent to us.

What we do not do. The Website does not use advertising cookies, cross-site tracking pixels, or sell data to data brokers.

3. Google user data

This section applies to Apps published by InsightCrafter that you authorise to access your Google Account. It describes our handling of data received from Google APIs. It does not apply to the Website, which never asks for your Google Account.

3.1 What we access

With your explicit consent, our Drive application requests access to Google Drive files and file metadata, specifically file names, types, sizes, folder structure, and modification timestamps, for the files you select or the folders you connect. The specific access is limited to the scopes shown on the Google consent screen when you authorise the App. We do not access your Gmail, Google Calendar, Google Contacts, or Google Photos.

3.2 How we use it

Google user data is used solely to provide the feature you asked for: listing, transferring, or synchronising the Drive files you designate with the destination you choose, and reporting the status of that transfer. We do not use Google user data for advertising, profiling, creditworthiness, or to train or improve machine-learning models. No automated decision-making with legal effect is performed on it.

3.3 Human access

We do not allow humans to read your Google user data unless: (a) you give us explicit permission for a specific support request; (b) it is necessary for security purposes such as investigating abuse or a technical fault; (c) it is required by applicable law; or (d) the data has been aggregated and anonymised so that it no longer identifies you.

3.4 Storage and security

OAuth access and refresh tokens are stored in encrypted form on infrastructure we control and are never shared with third parties. File content is processed only as long as the transfer requires; it is not retained afterwards, and any copy that exists is held in storage that you own or control. Access to production systems is restricted to the operator of the App and protected by multi-factor authentication.

3.5 Sharing

We do not sell, rent, or trade Google user data. We do not transfer it to third parties for advertising, marketing, or profiling, and we do not allow third parties to read it. A limited set of infrastructure providers process data on our behalf under contract, Google Cloud (the APIs themselves), Vercel (Website hosting), and Neon (database hosting for contact-form and newsletter records). None of them receive Google Drive file content. We may disclose information if compelled by a valid legal process, and we will notify you unless prohibited from doing so.

3.6 Retention and deletion

Tokens are deleted when you disconnect the App, or when you revoke access at Google. File content is not stored by us, so there is nothing to delete on our side once a transfer completes. If you would like us to delete any record associated with your Google Account, email hello@insightcrafter.com and we will do so within 30 days, subject to any legal retention obligation.

3.7 How to revoke access

You can remove the App’s access to your Google Account at any time at myaccount.google.com/permissions. Revoking access immediately stops any further use of your Google user data.

3.8 Limited Use disclosure

InsightCrafter’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Legal bases for processing

Where the EU/UK General Data Protection Regulation applies, we process personal data on the basis of: your consent (Google Account authorisation, newsletter subscription); performance of a contract or steps prior to entering one (responding to your enquiry, delivering engaged services); and our legitimate interests in operating, securing, and improving our business, balanced against your rights.

5. International transfers

Our service providers may process data outside your country, including in the United States. Where that happens, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

6. Your rights

You have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to receive it in a portable format. You also have the right to withdraw consent at any time. To exercise any of these rights, email hello@insightcrafter.com. If you believe we have handled your data unlawfully, you may lodge a complaint with your local supervisory authority. In Bangladesh the Bangladesh Data Protection Act framework applies. with your national supervisory authority. The imy.se).

7. Data retention

Contact enquiries are kept for up to 24 months after our last correspondence. Newsletter subscriptions are kept until you unsubscribe. Server logs are kept for a short period consistent with our hosting provider’s defaults. Google user data is kept only as described in section 3.6.

8. Children

The Website and the Apps are intended for business use and are not directed to children under 16. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this policy as our services change. The “Last updated” date at the top always reflects the current version. Material changes affecting Google user data will be announced on this page.

10. Contact

Questions about this policy or about how we handle your data: hello@insightcrafter.com.