Privacy Policy
This Privacy Policy explains how InsightEntry ("InsightEntry", "we", "us") collects, uses, stores, shares, and protects information when you use our reporting and monitoring platform (the "Service"), including data accessed through Google APIs. If you have questions, contact us at contacto@insightentry.com.
1. Who we are
InsightEntry is a multi-tenant SaaS that turns your business data into financial report dashboards and monitors the availability of your services. Each customer (a "tenant") and its users access only their own data.
2. Information we collect
- Account information. When you sign in via our identity provider we receive your name, email address, and the tenant/role you belong to.
- Data you connect or upload. The spreadsheets and datasets you provide — uploaded via our on-prem agent or connected from a cloud drive (see §4) — and the report data we compute from them.
- Usage and technical data. Logs, IP address, device/browser information, and timestamps needed to operate and secure the Service.
3. How we use information
- To provide the Service: generate and refresh your report dashboards, run monitoring checks, and send the reports/alerts you configure.
- To authenticate you and enforce per-tenant and per-company access controls.
- To secure, debug, and improve the Service, and to comply with legal obligations.
4. Google user data (Google API Services)
When you connect a Google Drive spreadsheet as a data source, you authorize InsightEntry through Google OAuth. This section discloses exactly how our application accesses, uses, shares, stores, retains, and deletes Google user data. We request the minimum scopes needed.
Data accessed
https://www.googleapis.com/auth/drive.file— the contents and basic metadata (file name, id, last-modified time) of only the specific Google Drive spreadsheet file(s) you explicitly select through the Google Picker. This scope does not allow us to list, view, or access any other file in your Google Drive.https://www.googleapis.com/auth/userinfo.emailandopenid— your Google account email address and identifier, used to identify and label the connected account.
Data usage
- We read the selected spreadsheet(s) to compute and periodically refresh your financial report dashboard inside InsightEntry, on the sync schedule you choose.
- We use your email address solely to show which Google account a data source is connected to.
- We do not use Google user data for advertising, and we do not use it to develop, improve, or train generalized artificial-intelligence or machine-learning models.
Data sharing
We do not sell Google user data and do not transfer it to third parties, except with the infrastructure sub-processors strictly necessary to operate the Service (cloud hosting/database, and — only when you choose to send a report — the email/PDF delivery provider), under confidentiality obligations, or when required by law. Google user data is never shared for advertising purposes.
Data storage & protection
- The Google OAuth refresh token is stored encrypted at rest with AES-256-GCM; all traffic is served over HTTPS/TLS.
- Data is isolated per tenant with role- and company-level access controls — only the users you authorize can see it.
- It is hosted on reputable cloud infrastructure with access controls and audit logging.
Data retention & deletion
- We retain the stored token and the report data computed from your file only while the source is connected and your account is active.
- You can disconnect a source at any time in the app, which deletes the stored OAuth token and stops all further access to your Google data.
- You may also revoke InsightEntry's access from your Google Account permissions.
- To request deletion of all your data, email contacto@insightentry.com; we delete or anonymize it, subject to any legal retention requirements.
Limited Use. InsightEntry's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not transfer it to others except as needed to provide or improve the feature (or as required by law), and we do not allow humans to read it except with your explicit consent, for security, or to comply with applicable law.
5. How we store and protect data
- Data is isolated per tenant; users only access data they are authorized to see.
- Secrets (such as OAuth refresh tokens) are encrypted at rest; traffic is served over HTTPS.
- Data is hosted on reputable cloud infrastructure with access controls and logging.
6. Sharing and disclosure
We do not sell your data. We share it only with service providers that help us run the Service (e.g. cloud hosting and email delivery) under appropriate confidentiality obligations, or when required by law. Google user data is never sold or used for ads.
7. Data retention
We keep your data for as long as your account is active or as needed to provide the Service. You can delete connected sources and request deletion of your data by contacting us; we delete or anonymize data when no longer needed, subject to legal retention requirements.
8. Your rights
You may request access to, correction of, or deletion of your personal data, and you may disconnect any cloud source or revoke Google access at any time. Contact contacto@insightentry.com to exercise these rights.
9. Children
The Service is intended for businesses and is not directed to children under 13 (or the minimum age in your jurisdiction).
10. Changes to this policy
We may update this policy; we will post the new version here and update the "Last updated" date. Material changes will be communicated through the Service.
11. Contact
Questions about this policy or your data: contacto@insightentry.com.