Privacy Policy

Insite Platform (“Insite”, “we”, “us”, or the “Service”) is a SaaS platform commercialized by Martín Stein Biler, the holder of a sole proprietorship registered in Uruguay (the “Commercial Provider”). This Policy explains how personal data is handled when a person visits https://www.insite.sh, creates an account, or uses the Service.

Certain technical functionalities, including integrations with the WhatsApp Business Platform, Instagram, and Facebook Messenger, operate through infrastructure and permissions administered by INVESTUY S.A.S., which may process data as a technology provider following the instructions necessary to provide the Service.

When a client business uses Insite to communicate with its own contacts, that business normally determines the purposes of such processing. In those cases, the client business acts as the data controller, and Insite and its providers act as processors or service providers, as applicable.

• Account and contact data: name, email, phone number, organization, role, and access credentials.
• Connected channel data: account and page identifiers, WhatsApp Business numbers, permissions, and access tokens provided by external platforms.
• Messages and contacts: conversation content, attachments, sender and recipient identifiers, dates, delivery status, and contact data.
• Integration data: emails, calendar events, advertising information, or other data the user authorizes us to sync.
• Content submitted to AI features: instructions, text, images, documents, conversations, or other materials submitted to generate outputs.
• Payment and billing data: contracted plan, amount, currency, status, transaction reference, and data needed to invoice. Insite does not store full card data processed by dLocal Go or other payment providers.
• Usage and security data: IP address, browser, device, technical logs, activity within the Service, cookies, and events necessary for security, support, and analytics.

We use the information we collect to:

• Create, authenticate, and manage accounts and teams
• Provide contracted features and execute user instructions
• Connect channels, send and receive messages, and retain authorized history
• Process payments, subscriptions, credits, and billing documentation
• Provide support, respond to inquiries, and communicate operational updates
• Prevent fraud, abuse, unauthorized access, and security incidents
• Analyze the Service’s performance and develop improvements
• Comply with legal obligations and enforce our agreements

Depending on the context and applicable regulations, we process information to perform our contract with the user, comply with legal obligations, protect legitimate interests related to security and improvement of the Service, or on the basis of consent when required.

The client business is responsible for having the authorizations and legal bases necessary regarding the data of its contacts, customers, employees, and other individuals whose data it incorporates or processes through Insite.

When a user connects WhatsApp Business, Instagram, Facebook Messenger, Gmail, Google Calendar, or another service, Insite accesses only the information necessary to enable the authorized features.

The exchange of data with Meta Platforms, Inc., Google, and other providers takes place through their interfaces and is also subject to their own terms and privacy policies. The user may revoke permissions from the relevant provider’s settings or disconnect the integration from Insite where that feature is available.

We may share limited information with the following categories of recipients:

• INVESTUY S.A.S.: to operate certain technical features and integrations with Meta products.
• Meta Platforms, Inc., Google, and other providers: for integrations selected by the user.
• dLocal Go and other payment processors: to manage charges, subscriptions, anti-fraud verification, and refunds.
• Infrastructure providers: hosting, database, security, support, email, analytics, and AI model providers necessary to operate Insite.
• Authorities or other parties: when there is a legal obligation, a valid order, or a need to protect rights and safety.
• Acquirers or successors: in a reorganization, merger, acquisition, or business transfer, subject to appropriate safeguards.

When a user uses AI features, the data provided may be sent to model providers to generate the requested output. We seek to limit the information shared to what is necessary to perform the function.

The user must not include sensitive, confidential, or third-party personal data without authorization. Outputs may be retained with the account’s history to allow review and improve the experience, in accordance with applicable settings and retention periods.

Some providers may process information outside Uruguay. Where applicable, we adopt reasonable contractual, technical, or organizational measures to protect data and comply with applicable regulations.

We retain information while an account is active and for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, and protect security.

Channel access tokens are deleted or invalidated when an integration is disconnected, subject to the provider’s technical limitations. After an account is closed, some data may be temporarily retained in backups or where a legal obligation exists.

We apply reasonable technical and organizational measures to protect data against loss, unauthorized access, alteration, or disclosure. These measures may include encryption, access controls, security logs, and restrictions for authorized personnel.

No system is completely secure. Users must protect their credentials, use appropriate settings, and immediately report any suspicion of unauthorized access.

In accordance with applicable law, an individual may request access, update, correction, deletion, or portability of their data, as well as object to or request the restriction of certain processing.

Requests may be sent to the email address below. We may request reasonable information to verify identity. If the data was provided by a client business of Insite, the request may be forwarded to that business for handling as the data controller.

Insite uses cookies and similar technologies to maintain sessions, remember preferences, protect accounts, and understand use of the Service. We may also use analytics tools to obtain product metrics and improve features.

You can manage cookies through the consent notice or your browser settings. Disabling certain cookies may affect how the Service functions.

Insite is a business service and is not directed at individuals under 18. We do not knowingly collect data from minors to create accounts. If we learn that a minor’s information has been processed without authorization, deletion may be requested.

We may update this Policy to reflect legal, technical, or business changes. We will publish the current version with its update date and, when a change is material, we will seek to communicate it through a reasonable means.

Insite Platform

Commercial provider: Martín Stein Biler

Technology provider for certain Meta integrations: INVESTUY S.A.S.

Email: equipo@insite.sh

Website: https://www.insite.sh