Legal
Privacy Notice
This notice explains what personal data Insight Audit™ collects, why, and who we share it with.
Who we are and our role
Insight Audit™ is operated by Adejayan Mayowa, an individual sole trader trading as InsightWeave. We are the data controller for the personal data described here, which means we decide why and how it is processed. Contact us at support@insightweave.net for any privacy matter.
Personal data we collect
Account data (name, email address, login credentials managed by our authentication provider); product data (the website URLs you submit, audit scores, findings and history, plan and credit usage); support data (messages you send us through the support form or email); technical data (IP address, device and browser identifiers, log and telemetry data about how the product is used).
Why we use it and our legal basis
Account and product data: to create your account and deliver the audits you request (performance of our contract with you). Plan and usage data: to enforce credit allowances and manage your subscription (contract). Technical data: to keep the service secure, prevent fraud and abuse, and improve reliability (our legitimate interests). Support data: to answer your questions (contract and legitimate interests). Marketing emails, where used: only with your consent, withdrawable at any time. Legal and tax records: to comply with legal obligations.
Who we share it with
Service providers and subprocessors acting on our instructions — hosting and database infrastructure, AI model providers used to generate audit analysis, and email delivery (Resend) for transactional messages. Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing. Professional advisers such as legal and accounting support where needed. Authorities where we are required to disclose by law. We do not sell your personal data and your audits are visible only to your account.
International transfers
Our providers may process data outside your country, including in the EEA, UK and United States. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
Retention
Account and audit data is kept while your account is active so your history stays comparable, and for up to 30 days after account deletion to allow recovery. Support messages are kept up to 24 months. Technical logs are kept up to 12 months. Billing and tax records are kept as long as the law requires. After that, data is deleted or anonymised.
Your rights
Depending on where you live, you may request access to your data, correction, erasure, restriction of processing, portability, or object to processing based on legitimate interests, and you may withdraw consent for marketing at any time. Email support@insightweave.net and we will respond within one month. If you are in the UK or EEA you may also complain to your local data protection supervisory authority.
Security
We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls so audits are readable only by their owner, restricted administrative access and secret management for API keys. No system is perfectly secure, but we work to protect your data and will notify you of any breach affecting you where required by law.
Cookies
We use essential cookies and local storage to keep you signed in and to remember your session and plan selection; these cannot be switched off without breaking the product. Any analytics or marketing cookies are optional and only set with your consent, which you can change in your browser settings or by clearing site data. See our Cookie Policy for details.
Changes
We may update this notice as the product develops and will publish the revised version on this page with an updated date.
Questions? Contact InsightWeave via insightweave.net/contact