Privacy Policy

Last updated: April 1, 2026

InsiteChat.ai ("InsiteChat", "we", "us", or "our") is operated by Nitish Yadav. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at insitechat.ai and our services.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Name and email address
  • Password (stored as a salted hash — we never store plain-text passwords)
  • Billing information (processed by Razorpay; we do not store card details)

1.2 Content You Provide

When you use our service to train chatbots, we process:

  • Website URLs you submit for crawling
  • Documents you upload (PDFs, DOCX, PPTX, etc.)
  • Text content you paste directly
  • Content imported from third-party integrations (Google Drive, Notion, Dropbox)

This content is processed to create text embeddings for your chatbot's knowledge base. Original uploaded files are stored temporarily for processing and may be deleted after embedding.

1.3 Third-Party Integration Data

When you connect Google Drive, Notion, or Dropbox, we request read-only access to your files. We store OAuth tokens to maintain the connection. We only access files you explicitly select for import. We never modify, delete, or share your third-party data.

1.4 Chat Conversations

We store conversations between your chatbot and its end users to provide you with analytics, conversation history, and to improve response quality. Conversations are associated with your chatbot and are not shared with other users.

1.5 Automatically Collected Information

  • IP address, browser type, operating system
  • Pages visited, time spent, referring URL
  • We use Ahrefs analytics for website traffic analysis

2. How We Use Your Information

  • To provide, maintain, and improve our services
  • To process your transactions and send billing-related communications
  • To create and maintain your chatbot knowledge base
  • To provide customer support
  • To send service-related notifications
  • To detect and prevent fraud or abuse
  • To comply with legal obligations

3. Data Storage and Security

  • Data is stored on servers hosted on Oracle Cloud Infrastructure (Mumbai, India)
  • All data is encrypted in transit (TLS/HTTPS)
  • Database access is restricted and password-protected
  • OAuth tokens for third-party integrations are stored securely
  • Passwords are hashed using industry-standard algorithms
  • We use JWT tokens for authentication with short expiry times

4. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with:

  • Razorpay — for payment processing (PCI-DSS compliant)
  • Google, Notion, Dropbox — only when you explicitly connect these integrations
  • AI model providers (Google Gemini, OpenAI) — your chatbot content is sent to these providers to generate responses. We do not send personal user data.
  • Law enforcement — if required by law or to protect our rights

5. Your Rights

5.1 Under GDPR (EU Users)

  • Right of access — request a copy of your data
  • Right to rectification — correct inaccurate data
  • Right to erasure — request deletion of your data
  • Right to portability — receive your data in a portable format
  • Right to object — object to data processing
  • Right to withdraw consent — withdraw consent at any time

5.2 Under India DPDPA 2023

  • Right to access your personal data
  • Right to correction and erasure
  • Right to grievance redressal
  • Right to nominate another person to exercise rights

To exercise any of these rights, email us at nitish@insitechat.ai.

6. Data Retention

  • Account data is retained as long as your account is active
  • Chatbot training data (embeddings) is retained until you delete the source or chatbot
  • Chat conversations are retained until you delete them
  • Payment records are retained for 7 years (legal/tax requirement)
  • When you delete your account, all associated data is permanently deleted within 30 days

7. Cookies

We use minimal cookies for authentication (JWT tokens stored in localStorage) and analytics. See our Cookie Policy for details.

8. Children's Privacy

Our service is not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Your continued use of the service after changes constitutes acceptance.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights: