Privacy Policy

insightSci Tecnologia e Inteligencia Cientifica Ltda. is committed to protecting personal data. This Privacy Policy explains what we collect, how we use it, your rights, and how to contact us.

This Policy applies to insightSci at insightsci.com and is designed to comply with LGPD, GDPR and other applicable privacy frameworks.

The data controller is insightSci Tecnologia e Inteligencia Cientifica Ltda., Vitoria, Espirito Santo, Brazil.

Privacy questions may be sent to hello@insightsci.com. Support requests may be sent to support@insightsci.com. Data protection requests may also be sent to vilker@insightsci.com.

Account data includes full name, email address, institutional affiliation when provided, country and password credentials stored only as hashed values by the authentication provider.

Usage data includes search queries, features accessed, session duration, pages visited, export actions and subscription tier. We use this to operate and improve the platform and do not sell it to third parties.

User-generated content includes research notes, concept tags, library collections and annotations you create in the workspace.

Payment data is processed by payment providers. insightSci does not store full payment card details.

AI interaction data may include selected references, objectives and generated drafts used to provide the AI Literature Review feature.

Technical data includes browser, device, IP address, session cookies and logs needed for security and platform operation.

We use data to create and manage accounts, authenticate sessions, provide topic searches and analytics, store private workspaces and libraries, generate exports and literature review drafts, provide support, improve reliability and detect abuse.

We may process payments and invoices, send account confirmation, password reset, subscription receipt and important service notices, and send product updates or newsletters when you consent.

We do not sell, rent or share personal data with third parties for their own marketing purposes.

We share data only with service providers required to operate insightSci, such as Supabase for database and authentication, Cloudflare for CDN and R2 storage, ASAAS and Stripe for payment processing, AI providers for requested Premium generation, and hosting infrastructure providers.

AI prompts are sent only upon user request for AI Literature Review features and are not used for model training under our agreements unless a user explicitly opts in.

We may disclose information when required by law, to enforce our terms, or to protect users, third parties or the platform.

We use strictly necessary cookies for session management and authentication. With consent where required, we may use analytics cookies to understand platform usage.

We do not use advertising or third-party behavioural tracking cookies.

Your data may be processed in countries outside your country of residence where our infrastructure and processors operate. When required, we use appropriate safeguards for international transfers.

Account data is retained for the duration of the account plus the legally required period after closure.

Usage logs are retained on a rolling basis for security and service improvement. Payment records are retained according to Brazilian fiscal requirements.

User-generated content such as library collections, notes, tags and annotations is retained while your account is active and deleted within 30 days of account closure upon request, subject to legal obligations.

AI interaction data is retained for 30 days, then permanently deleted unless earlier deletion is requested or longer retention is required by law.

Depending on your location, you may request access, correction, deletion, portability, restriction, objection, information about sharing, review of automated decisions, or withdrawal of consent.

To exercise rights, contact hello@insightsci.com or vilker@insightsci.com. We will respond within applicable LGPD or GDPR timelines and may need to verify your identity before completing a request.

We use technical and organisational safeguards designed to protect accounts, private workspaces and research data. No internet service can guarantee absolute security.

The Service is not intended for children under 18.

We may update this Policy periodically and will notify users of material changes before they take effect.