Privacy Policy

• Contact and account information. Name, work email, phone number, role, organisation, login credentials, workspace role, and contractual and billing details.
• Brand and workspace content. Briefs and brief documents, Brand DNA settings, Asset Library uploads, product catalogues, message templates, and the Stories and Scenes made in the workspace. These may contain personal data, for example the names of staff or clients that appear in a brief or an image.
• Public website content. When a customer asks us to configure Brand DNA from its website and social channels, we access those public pages and extract brand attributes and media, which may incidentally include personal data published there.
• Usage and device information. IP address and approximate location, browser and device data, pages viewed, actions taken in the Platform, activity logs, cookies and similar identifiers.
• Communications. Personal data in enquiries, demo requests, support conversations, surveys, feedback and recordings of calls or video meetings where you are told they are recorded.

Customers upload or connect the audiences they want to reach: typically a Recipient’s name, phone number, email address, language, market, segment and the sales advisor assigned to them. Within a campaign, audiences are held as contact references rather than as raw records wherever the Platform allows. We process audience data only on the customer’s instructions, to deliver the campaigns the customer sends and to report on them. The customer is responsible for having the right to contact each Recipient and for honouring opt-outs.

Stories and campaign messages are sent by our customers, the brands and agencies that use the Platform. The sender decides who to contact, on which channel and with what content, and is the controller of your personal data. We act as the sender’s processor.

When you open a Story we and the sender record how it was viewed: which Scenes you saw and for how long, what you clicked or shared, any form you submitted, and your device type, browser, source and approximate location derived from your IP address. Where a campaign identifies you as the Recipient, this engagement is attributed to you so that the sender knows how you responded. If a Story is forwarded to you by someone else, engagement is recorded without a named Recipient.

To stop receiving messages, to ask what the sender holds about you, or to have it corrected or deleted, contact the sender. You may also contact us at hello@inspify.ai and we will pass your request to the sender and help resolve it.

We use personal data as necessary to:

• provide, operate and secure the Platform, including producing Stories from briefs, hosting published Stories, delivering campaigns and reporting engagement (performance of contract, or the customer’s instructions where we act as processor);
• respond to enquiries and demo requests, and provide support;
• bill, manage accounts and comply with legal, tax and contractual obligations (legal obligations);
• maintain, analyse and improve the Sites and the Platform (legitimate interests);
• send service notices and, where permitted or with consent, marketing about our services, which you can opt out of at any time;
• protect our customers, users, Recipients, systems and rights.

The Creative Agency produces Stories from the briefs, brand material and assets a customer provides, through automated research, writing, design, production and review steps. Those steps use models and services from third-party providers that act as our processors under contract and process content only to provide the Platform to us. Research steps may also retrieve publicly available information about the customer’s brand, products and market.

We do not use customer content, Stories or engagement data to train models for other customers without the customer’s written consent. We keep a record of what was produced, approved and rejected in a workspace to operate the review steps and to support the customer. Customers should include in briefs only the personal data the brief needs.

We and our processors store and process personal data primarily in Singapore, and in other locations, including the United States and the European Union, as reasonably necessary to deliver the Platform, for example where a messaging channel, model provider or content delivery network operates. Where data is transferred across borders we use safeguards recognised under applicable law.

We keep personal data for as long as needed to provide the Platform, maintain our relationship with the customer and meet legal obligations. Engagement data is kept for the life of the customer’s workspace so that campaigns can be compared over time. When a workspace ends, we make its content and data available for export for 30 days and then delete or de-identify it, except where we must retain it by law.

• Service providers that act on our behalf: cloud hosting and content delivery, the AI model providers described above, messaging channels used to deliver campaigns, including the WhatsApp Business Platform and email delivery services, licensed stock media libraries, authentication, payment processing, analytics and customer support tools.
• The customer. If you use the Platform under a workspace owned by your employer or another organisation, that organisation can see your activity in it. Recipient engagement data is shared with the sending customer, as described in section 03.
• Affiliates and successors. Companies in our group, and a buyer or successor in the event of a merger, acquisition or sale of assets.
• Legal requirements. Where required by law, regulation, court order or to protect rights, safety and security.

We do not sell personal data. A current list of our sub-processors is available on request.

The Sites and the Platform use cookies and similar technologies to keep you signed in, remember preferences, measure how the Sites are used and understand which of our campaigns bring visitors. Published Stories and campaign links use identifiers, pixels and similar technologies to measure delivery and engagement for the sender, as described in section 03.

On the Sites we use our own first-party analytics and no advertising trackers. If you visit from the European Economic Area, the United Kingdom or Switzerland, analytics stays off until you accept it in the cookie bar, and we honour the Global Privacy Control browser signal as a decline. You can change your choice at any time through the “Cookie choices” link in the footer, and you can also control cookies through your browser settings. Blocking some cookies may affect how the Sites and Stories work.

We use industry-standard physical, organisational and technical measures to protect personal data, including encryption in transit and at rest where appropriate, access controls and separation of each customer’s workspace from others. Expiring links are used when content is shared for external review. No system is completely secure, and we cannot guarantee absolute security.

Depending on where you are, you may have the right to access, correct, delete or port your personal data, to restrict or object to its processing, and to withdraw consent. To exercise these rights, or to opt out of marketing from us, email hello@inspify.ai. Where we act as a processor for a customer we will refer your request to that customer and assist them. We will respond within the time required by applicable law. You may also complain to your local data protection authority.

Inspify AI Pte Ltd is the data controller for personal data of visitors, prospects, customers and their users that we collect through the Sites and in operating the Platform. For personal data in a customer’s briefs, brand content, Asset Library, audience lists, Stories and engagement data, the customer is the controller and we act as processor on its documented instructions under our Terms of Service and, where required, a data processing agreement.

The Sites and the Platform are not directed to children under 16 and we do not knowingly collect their personal data. We may update this Privacy Policy from time to time by posting a revised version on the Sites with a new date at the top.