Insofy — AI agents for people, not platforms

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support.

Information You Provide Directly

Account details such as your name, email address, phone number, date of birth and password.
Payment and financial information. We do not currently collect payment or financial information. However, if you choose to use payment-enabled features or services we may introduce in the future, we may collect necessary details (such as bank account or payment credentials) to process those transactions securely.
Profile information and user preferences, such as your display name, profile photo, interests, or language preferences, and, if you choose to provide it, additional details like your birth date, mailing address, or demographic information.
Messages, posts, and other content you send, upload, or share through the platform.
Information provided when you contact us for support or participate in surveys or promotions.

Information Collected Automatically

Device and technical data such as IP address, browser type, operating system, device identifiers, language preferences, and access times.
Usage data including pages visited, features used, links clicked, and interaction patterns.
Analytics and Tracking Information: We and our partners use cookies, SDKs, and similar technologies to analyze user behavior, personalize content, and improve functionality.
Cookies and similar technologies that help us analyze usage and improve functionality (see our Cookie Policy for details).
Approximate location data and diagnostic information, such as log files, crash data, and usage errors, to help us maintain and improve our Services.
Log data such as login timestamps, session durations, and network event information used to maintain security and prevent unauthorized access.

Information from Third Parties

If you choose to link third-party accounts or sign in using external services, we may receive certain profile and account information from those services in accordance with their privacy settings.

2. How We Use Your Information

We use your personal information for the following purposes:

To provide, maintain, and improve our Services.
To create, manage, and authenticate your account.
To secure our Services and prevent fraud or unauthorized access.
To send you important administrative notifications.
To personalize your experience and provide recommendations.
To analyze usage patterns and improve platform performance.
To comply with applicable legal, regulatory, or tax obligations.
With your consent, to send promotional or marketing communications. You may withdraw this consent at any time by following the unsubscribe instructions in those communications or contacting us directly.

3. Data Security

We employ physical, technical, and organizational safeguards to protect your personal information against loss, theft, misuse, and unauthorized access.

Our Security Measures

End-to-end encryption of messages, when enabled by the user.
Encryption of sensitive personal data in transit and at rest.
Secure authentication and access control.
Routine security audits and vulnerability assessments.

In the event of a data breach that affects your personal information, we will notify you and relevant authorities without undue delay, as required by applicable law.

4. Your Privacy Controls

You have control over your privacy settings and data and can manage it in the following ways:

Adjust visibility and communication preferences.
Opt out of certain analytics and marketing data collection.
Access, update, or correct your personal information.
Delete your account and associated data. Your private chat with Aura is deleted with it; messages in group chats stay on our chat server, and your chat account is disabled.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances described below.

With Your Consent

We may share your personal information with third parties when you explicitly consent to such sharing. For example, if you choose to connect your account with another service or authorize data sharing for a specific feature, we will share only the information necessary to fulfill that request.

Legal Compliance

We may disclose your information to comply with applicable laws, legal processes, or governmental requests. This includes responding to lawful subpoenas, court orders, or regulatory requirements, or when disclosure is necessary to protect our legal rights or the safety of our users and the public.

Service Providers

We share personal information with trusted service providers who help us operate and improve our Services. These providers may offer services such as hosting, analytics, customer support, payment processing, and security. All service providers are bound by strict contractual obligations to protect your information and use it only for authorized purposes.

Business Transactions

If we are involved in a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such transfer and any changes to the handling of your personal information.

Transactional Interactions

When you interact with businesses through our platform (such as making reservations, placing orders, or booking services), we share only the information necessary to complete the transaction — such as your name, contact details, and booking preferences. Their collection, use, and retention of your information are governed solely by their own privacy policies.

Important: Third-Party Business Data

When you use our platform to interact with third-party businesses through our platform (restaurants, hotels, etc.), your information becomes part of their records. These businesses have their own privacy policies and data handling practices. We recommend reviewing their privacy policies to understand how they handle your information. We are not responsible for, and disclaim all liability for, the privacy practices of third-party businesses with whom you choose to engage.

6. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy or as required by law. Retention periods may vary depending on the type of data:

Account information: Retained for as long as your account is active.
Transaction records: Retained for legal, tax, and audit purposes (typically up to seven years).
Communication: Retained in accordance with our data retention policy and legal obligations.
Marketing preferences: Retained until you withdraw consent or delete your account.

Please note: When you complete transactions with businesses through our platform, those businesses may retain your information according to their own retention policies, independent of our data retention practices. To request deletion of data held by those businesses, you must contact them directly.

7. YouTube API Services

Insofy uses YouTube API Services to upload our own videos to our own YouTube channel. We do not use YouTube API Services to access, collect, store, or share information about YouTube users.

When you watch a YouTube video on our website, the YouTube Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://policies.google.com/privacy) apply.

Our uploader keeps only the sign-in token for our own channel and the id of each video it uploads. We delete the token when we stop using the uploader, or within 7 days of access being revoked. You can revoke an app’s access to your Google account at any time at Google security settings (https://myaccount.google.com/permissions).

Questions: legal@inductivesolution.ai.

8. Your Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. These may include the rights to access, correct, or delete your data, to request data portability, and to object to or restrict certain processing activities. U.S. residents may also have specific rights under applicable state privacy laws (such as the California Consumer Privacy Act or similar laws in other jurisdictions). International users, including those in the European Economic Area or Canada, may have additional rights under their local data protection laws.

Data Subject Rights

You may be entitled to exercise the following rights:

Access: Obtain a copy of the personal data we hold about you.
Correction: Request that we correct inaccurate or incomplete information.
Deletion: Request deletion of your personal information (subject to legal exceptions).
Withdrawal of Consent: Withdraw consent to data processing at any time.
Portability: Request a copy of your data in a portable format, where technically feasible.
Complaint: File a complaint with a privacy regulator in your jurisdiction.

We may request additional information to verify your identity before processing certain requests. Please note that some rights may be subject to legal exceptions – for example, we may retain certain data for tax, compliance, or legal purposes even after a deletion request.

Note on Data Deletion

While we can delete your data from our systems, messages in group chats stay on our chat server (see “Your Privacy Controls”), and we cannot control or delete data that has been shared with business partners during transaction processing. You may need to contact those businesses directly to request deletion of your data from their systems.

9. International Data Transfers

Your personal information may be transferred to and processed in jurisdictions outside your province, state, or country – including the United States, where we are headquartered and where your data may be governed by Delaware law – where data protection laws may differ from those in your jurisdiction. In certain jurisdictions, government authorities or law enforcement agencies may have access to your personal information under applicable laws. In some cases, these jurisdictions may not provide the same level of privacy protection as your home country’s laws. When this occurs, we implement contractual, organizational, and technical safeguards — such as standard contractual clauses — to help ensure your personal information remains protected to an equivalent standard.

10. Children’s Privacy

Our Services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from anyone under 13 years old. By using our Services, you represent and warrant that you are at least 13 years of age. If we become aware that we have inadvertently collected personal information from a child under 13 without verified parental consent, we will take steps to delete such information as quickly as possible. If you believe that we may have collected information from a child under 13, please contact us using the details provided below.

11. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service features. When significant changes are made, we will notify you by email or through our platform before they take effect. The “Last Updated” date above reflects the date of the most recent revision.

12. Governing Laws and Dispute Resolution

This Privacy Policy and any disputes arising from or relating to it shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law principles. Any disputes arising under this Privacy Policy shall be resolved in accordance with the dispute resolution procedures set forth in our Terms of Service. By continuing to use our Services, you agree to resolve any privacy-related disputes through binding arbitration in Wilmington, Delaware, as described in those Terms.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the details below. We will respond to all privacy-related inquiries and requests within the timeframes required by applicable law (typically within 30 to 45 days).

Contact Information

Email:legal@inductivesolution.ai

Mailing Address: 1506 Providence Highway, unit 28, Norwood, MA 02062

Google User Data

Google account (Gmail and Google Calendar). When you connect a Google account, Insofy asks Google for permission to read your mail, send mail, save drafts, see your calendar list and see and edit your calendar events. Insofy uses these only when you ask it to, in your own chat: it lists, finds, reads and summarizes your mail; it sends an email only after showing you the recipient, subject and full text and receiving your yes, and with no answer in five minutes it saves the email to your Gmail drafts instead; it saves a draft when you ask for one; it shows your Google calendar events next to your Insofy events, checks your free time before booking, and changes, deletes or copies an event when you ask.

What is stored. Insofy keeps the sign-in tokens Google issues, encrypted, so it can act for you until you disconnect. It keeps the list of your calendars and which ones you ticked. Mail you read in a conversation, and emails Aura drafts for you there, stay in that conversation’s memory until the conversation resets (after an hour idle, and at least once a day). An email Aura asks you to approve is held, with its recipient, subject and text, only until it is sent, saved to your drafts or cancelled, or, for an email a task you set up has prepared, until you answer or cancel that task; after that the held copy is cleared and only a record of what happened to it is kept. Contacts that an earlier version of Insofy’s email feature saved from your Gmail, and contacts you ask Aura to save from mail it reads for you, stay in your contact list, with details such as names, email addresses, how you know each person and how you correspond, also after you disconnect Google, until you ask Aura to delete them or you delete your account. Aura’s messages in your chats, including the questions asking you to approve an email and replies that can quote your mail, are kept on Insofy’s chat server. When you delete your account, Insofy deletes your private chat with Aura from that server; messages in group chats stay there, and your chat account is disabled. Apart from that, what you ask Aura to save (such as a note or a contact), and the backups, your mail and calendar events are not copied into any other database. Backup copies of everything described here, other than the chat server’s, are deleted within 30 days.

What Insofy learns. When you connect Google, Insofy reads the mail you sent in the last 90 days, the mail you ask Aura to read, and your calendar from 30 days back to 60 days ahead, to learn facts that help Aura assist you (for example who your colleagues are, how to reach them, your routines). When learning, Insofy skips mail carrying a one-time code or a password reset, and masks card numbers, codes and passwords before anything reaches the AI model. Only the facts are kept, with a pointer to where each came from; the mail and events themselves are not stored. The facts are your personal memory: they stay when you disconnect a Google account or remove Insofy from your Google account settings, you can see and delete them in your workspace, and deleting your Insofy account erases them (for backup copies, see “What is stored”). These facts are used only for you and are never used to train a general model.

AI providers. To answer you, Insofy sends the mail and calendar text you asked about, and the facts it learned, to AI model providers that process it for your request under terms that forbid retaining the data or training on it.

Nobody else reads it. Insofy does not sell Google user data, does not use it for advertising, and does not let staff read it except with your explicit agreement for support, for security investigation, or as required by law.

Disconnecting. You can disconnect a Google account at any time from Settings; Insofy then revokes its access at Google and deletes the tokens, the calendar list and the learning cursors. You can also remove Insofy from your Google account’s third-party access page; Insofy then marks the account as needing reconnection and stops using it.

Insofy’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

For Canadian Residents

If you are located in Canada and have concerns about how we handle your personal information, you also have the right to contact the Office of the Privacy Commissioner of Canada or your provincial or territorial privacy authority for further assistance. Please note that while we comply with applicable Canadian privacy laws, this Privacy Policy and any disputes will be governed by the laws of the State of Delaware, United States, as described above.

Effective Date

This Privacy Policy is effective as of October 17th, 2026.