Data Usage Policy

User-Provided Data

• • Email: For early access signup, contact requests, newsletters
• • Profile info: Name, company, role, message (optional, from contact forms)
• • Search rules & preferences: Keywords, filters, frequency (when accounts launch)
• • Engagement notes: Any annotations or comments you add
• • Explicit: We do not collect LinkedIn credentials, private profile data, or engagement history

Automatically Collected Data

• • Analytics: Via Vercel Analytics (privacy-first, cookieless)—page views, referrer, device/browser type, general location (country-level only)
• • Server logs: IP address, timestamp, request type (for security and debugging). Logs typically retained for 30 days, then deleted
• • Error tracking: Bug reports and errors (anonymized)

Derived Data

• • Aggregated analytics: "X searches per day", "Y users from country Z"
• • Search trend analysis: Patterns across all users (anonymized)
• • Note: Individual search histories are not sold or shared

Legitimate Uses

1. 1. Service operation: Operate InSights, process searches, deliver results
2. 2. Improvements: Analyze how users interact with InSights to improve UX
3. 3. Product development: Understand feature usage to prioritize roadmap
4. 4. Security: Detect abuse, prevent fraud, maintain system integrity
5. 5. Communication: Send transactional emails (early access confirmations, etc.)
6. 6. Optional communications: Send newsletters or product updates (with opt-out)

Uses We DON'T Do

• • Build behavioral profiles or targeting data
• • Sell data to advertisers, brokers, or third parties
• • Share individual search histories with anyone
• • Train AI models on user data (without explicit consent)
• • Track you across the web using cookies or pixels
• • Combine InSights data with other data sources about you

How We Handle Search Queries

• • Queries logged: Search queries may be logged temporarily for service operation and debugging
• • Retention: Search history typically retained for 30 days, then anonymized or deleted
• • Aggregation: Queries are aggregated and anonymized to identify trends
• • Explicit: Individual search histories are never sold, shared, or used for targeting
• • User control (future): When accounts launch, users can delete their search history anytime

What We Analyze (Aggregated)

• • Total searches per day/week
• • Most common keywords (anonymized)
• • Device/browser breakdown
• • Geographic distribution
• • Feature engagement

How We Share Aggregated Insights

• • Internally: To improve InSights
• • Publicly (optional): We may publish annual reports with anonymized trends
• • Note: Any public reports will be anonymized and high-level
• • Not shared: No third-party access to raw or identifiable data

Services That Handle Your Data

• • Email service: Stores and sends email. Covered by their privacy policy
• • Hosting (Vercel): Hosts the site. Privacy policy available on Vercel's site
• • Analytics (Vercel Analytics): Privacy-first analytics (no cookies). No personal data shared
• • Database (Supabase): Stores user emails and signup data. EU-based, GDPR-compliant
• • Search infrastructure (Google Custom Search): Our searches run on Google's infrastructure. Google's privacy policy applies

Data Processing Agreements

• • All third-party services are contractually obligated to protect your data and comply with applicable privacy laws
• • We may change third-party services as our business evolves

You Can

• • Request all data: Email info@visaoenhance.com to request a copy of your data
• • Delete your data: Request deletion of your email and associated data
• • Opt-out of updates: Click "unsubscribe" in any email or contact us
• • Modify your info: Contact us to update your name/company (future, when accounts exist)

Response Timeframe

• • We will respond to data access/deletion requests within 7–10 business days
• • Some data may take longer to delete due to system architecture

GDPR/CCPA Compliance

• • GDPR: EU users have rights to access, rectification, erasure, and portability
• • CCPA: California users have similar rights
• • We will honor these requests to the extent applicable to InSights' operations

What We Do

• • Encryption: All data in transit uses HTTPS
• • At-rest encryption: Database encrypted at rest (Supabase provides this)
• • Access control: Limited employee access to production data
• • No credentials stored: We don't keep your LinkedIn password or secrets
• • Regular audits: We review data handling practices

What We DON'T Promise

• • No system is 100% secure. While we take security seriously, we cannot guarantee complete protection against data breaches
• • Incident response: If we experience a data breach, we will notify affected users as soon as practicable, typically within 72 hours

Current

• • InSights does not currently train AI models on your data
• • Suggested comments (Pro/Premium) use general AI models, not your personal search history

Future

• • If we build AI features using user data, we will notify you and obtain explicit consent
• • No opt-out needed for analytics, but you can opt-out of AI-powered features