Privacy Policy
Last updated: April 16, 20261. Who we are
InsightGap provides restaurant operations software. This policy explains what we collect, why we collect it, and what rights you have.
2. Information we collect
- Account information — name, email, password hash, business details.
- Business data — menu, hours, specials, knowledge base, audio greetings.
- Call data — inbound caller phone numbers, call duration, transcripts, recordings, sentiment, and AI-generated responses, subject to your subscription.
- Customer / review data — CRM records, review requests, and Google review content pulled via your Google connection.
- Technical data — IP address, timestamps, device info, and request logs.
3. How we use information
- To provide and operate the Service.
- To route inbound calls to the AI assistant, transcribe them, and surface insights.
- To generate review-reply drafts and lead-scoring analytics.
- To prevent abuse, diagnose errors, and maintain security.
- To communicate with you about product updates, billing, and support.
4. Call recording disclosure
When the AI phone service is active on your account, every inbound call opens with a bilingual disclosure that the call may be recorded and handled by an automated assistant. You are responsible for any additional notice or consent required by your jurisdiction.
5. Third-party processors
- Twilio — voice call handling and SMS.
- Google — Business Profile integration for review management.
- Stripe — payments, where billing is enabled.
- AI model hosts — local Ollama instance or configured remote model for answer generation and sentiment analysis.
We share only the information necessary for each processor to perform its function on our behalf.
6. Data retention
We retain account and business data for as long as your account is active, plus a reasonable period afterward for legal, accounting, and backup purposes. You can request deletion by contacting support.
7. Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. Email support@insightgap.local to exercise these rights. We respond within 30 days.
8. Security
We use encryption in transit, hashed password storage, role-based access controls, and subscription-level gating on sensitive routes. No system is perfectly secure, but we work to protect your data.
9. Children
The Service is intended for businesses. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us so we can delete it.
10. Changes
We may update this policy from time to time. Material changes will be communicated through the Service or by email.
11. Contact
Privacy questions? Email support@insightgap.local.