Privacy Policy
Last updated: 2026-10-15
This policy explains how the Insightr website, PWA, and Telegram Mini App (the "Service") process data.
1. Data we process
Account and identity data: depending on your sign-in choice, this may include email, Google, or Telegram account identifiers and public profile basics, plus a browser session.
Content you create: watchlists, screen definitions, scan snapshots, schedules, notification preferences, and language preferences.
Notification data: in-app records, email delivery state, Web Push endpoints and required keys, and a linked Telegram destination.
Payment data: item, amount, time, and transaction identifiers.
Consent and necessary security records: consent version, source, and time, plus minimal records for abuse prevention, login security, and error diagnosis.
De-identified visit records: for each page load, the server records the time, country, a coarse network (for example 1.2.x.x), a salted, non-reversible hash of the IP address, the device type, the page visited, the referring site's domain, campaign codes in the link (utm parameters), whether the page was opened in an in-app browser, and the browser language. These records contain no full IP address, email, or account identity, are never combined with account data, are used only to count visits, measure traffic sources, and exclude bots, and are deleted after at most 90 days.
2. Purposes
To provide sign-in, scanning, screening, market and news views, watchlists, schedules, notifications, payments, and support.
To maintain security, detect abuse, diagnose errors, and meet legal obligations.
Account product analytics are off by default and record allowlisted events only after explicit consent and server-side enablement.
Anonymous analytics are off until you accept them in the banner. They record allowlisted events, the pages visited, and coarse device and country information under an identifier that lasts only for the browser tab session; they never record your IP address, email, or account identity, and are never combined with account data. You can withdraw at any time by clearing the consent, after which collection stops.
3. Third parties and public networks
Depending on the feature, Google, Telegram, email or browser push delivery services, hosting and error-monitoring services, and market-data providers may process data within their roles.
We do not sell or rent personal data.
4. Retention, controls, and deletion
Settings let you manage notifications, consent, linked identities, and your account. Unlinking Telegram is separate from deleting the entire account.
Verified account deletion first revokes sessions, one-time sign-in links, Push, schedules, and non-essential notifications, followed by a seven-day email recovery period.
After recovery expires, personal data is deleted or de-identified. Minimal transaction records may remain where required by law or a billing dispute.
5. Contact
Email privacy or data requests to [email protected].