Privacy Policy

This document informs you about which personal data Insightful (operated by Magellan Financial, hereinafter "Insightful", "we", "us") collects, processes, and uses on this website and on funnels published through the Insightful platform, the purposes for which this is done, and how you can exercise your rights regarding your personal data.

1. General notes and responsible party

When you use this website, various personal data may be collected. Personal data is data with which you can be personally identified. We try to collect as little data as possible, and when we do, we treat it sensitively and carefully. We do not sell personal data, and we do not run third-party advertising or analytics trackers on this website or on published funnels.

This privacy policy applies to data processing by: Insightful, a product of Magellan Financial. Contact for privacy matters: privacy@insightfulstudio.com.

2. Collection and storage of personal data, and the nature and purpose of their use

2.1 Provision of the website and hosting logs

I. Description and scope. Each time you visit our website or a published funnel, our hosting infrastructure automatically records technical information from the requesting device, which may include: browser type and version, operating system, IP address, date and time of access, and the referring website. This data is stored in standard server log files and is not combined with other personal data.

II. Purpose. This processing is necessary to deliver the website to your device, to ensure connection stability and security, and for administrative purposes. These purposes constitute our legitimate interest in the processing.

III. Duration. Log data is retained by our hosting providers for a short, infrastructure-standard period and then deleted.

2.2 Account registration and login

I. Description and scope. If you create an Insightful account, we collect your email address and a password. Passwords are stored only in cryptographically hashed form via our authentication provider (Supabase). Content you create in your account — funnels, pages, uploaded images and logos, settings — is stored so we can provide the service to you.

II. Purpose. The processing is necessary to provide the software service you signed up for (performance of a contract).

III. Duration. Account data is stored for as long as your account exists. You can request deletion of your account at any time via the contact above, after which your data is deleted except where retention is legally required.

2.3 Funnel visitors: answers, contact details, and usage statistics

I. Description and scope. When you fill out a funnel published through Insightful (for example a quiz or assessment), the following data may be collected:

• The answers you select or enter, including any contact details you provide (such as name, email address, or phone number)
• A random session identifier, stored in your browser's sessionStorage (it is not a tracking cookie, is not shared across websites, and expires when you close the tab)
• Page-view and completion events, including your device category (mobile or desktop) and, where a funnel tests multiple layouts, which layout variant you were shown

II. Roles. The business that published the funnel is the controller of this data and decides how it is used (for example, to contact you about your request). Insightful processes and stores this data on the publisher's behalf. Requests regarding data you submitted through a funnel are best directed to the business that operates that funnel; we assist publishers in fulfilling such requests.

III. Purpose. Answers and contact details are collected so the publisher can respond to your inquiry. Aggregate usage events exist so publishers can understand where visitors drop off and improve their funnels.

IV. Duration. This data is stored until the publisher deletes it or deletes their funnel or account.

2.4 Third-party content delivery (fonts and emoji images)

I. Description and scope. To display consistent typography and emoji graphics, this website and published funnels load assets from content delivery networks: web fonts from Google Fonts (Google Ireland Limited) and emoji images (Twemoji) from the jsDelivr CDN. When these assets load, your IP address is technically transmitted to the respective CDN. No cookies are set by us in this process.

II. Purpose. Consistent, reliable rendering of text and emoji across devices. This constitutes our legitimate interest.

3. Disclosure of data and processors

We only share data with service providers that support the operation of the platform, and only to the extent necessary:

• Supabase — database, authentication, and file storage for all platform data
• Our web hosting provider — serving the website and funnels, including standard access logs
• Google Fonts — font file delivery
• jsDelivr — emoji image delivery

Where a funnel publisher configures a booking or scheduling link (for example a calendar page), and you click it, the details you provided may be passed to that booking page to pre-fill the form. This happens only through your own navigation to that provider, whose own privacy policy then applies.

4. Your rights

If your personal data is processed by us, you have the following rights in relation to us:

• Right to information — you can request confirmation of whether and which personal data concerning you we process
• Right to rectification — you can request correction or completion of inaccurate or incomplete data
• Right to erasure — you can request that we delete your personal data without undue delay
• Right to restriction of processing — you can request that processing of your data be restricted while a request is being verified
• Right to data portability — you can receive the data you provided in a structured, commonly used, machine-readable format
• Right to object — you can object to processing based on legitimate interest on grounds relating to your particular situation
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting prior processing
• Right to lodge a complaint — with a data protection supervisory authority competent for your place of residence

To exercise any of these rights, contact us at privacy@insightfulstudio.com. For data you submitted through a specific funnel, you may also contact the business operating that funnel directly.

5. Data security

All data is transmitted over encrypted connections (TLS). Stored data is protected with row-level access controls so that funnel data and leads are only accessible to the account that owns them. Passwords are stored only as cryptographic hashes.

6. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements, or to reflect changes to our services. The new privacy policy will then apply to your next visit.