Privacy Policy

This policy covers personal data processed by Klair Tech ("Company", "we") when you use Insighter. For enterprise organizations, the organization is the data fiduciary for content processed through its account and we act on its instructions; a data processing addendum is available on request.

• Account details: name, email address, and sign-in records.
• Organization and workspace membership and roles.
• Credit, billing, and usage records, including per-run metering.
• Content you choose to upload or connect for analysis, including files, database results, and documents from connected sources.
• Conversations with the agent, feedback you give on answers, and preferences the agent stores at your instruction (viewable and erasable from your profile).
• Technical logs needed to operate and secure the service.

We do not collect data from your connected sources except to answer the questions you ask, and all such access is read-only.

Personal data is used to run the analyses you request, operate your account and organization, meter and bill usage, send transactional email (sign-in, invitations, alerts you configure, receipts, low balance notices), and keep the service secure. We do not sell personal data and we do not use your content for advertising or to train AI models.

Questions and the relevant data context are sent to our AI model providers, Anthropic and AWS Bedrock, to generate answers. Model providers process this data for the duration of the request and do not train on it under our agreements. Consequential actions require your explicit consent in the product, and an audit trail records them. AI outputs can be wrong; they are decision support, not professional advice.

We share personal data only with the subprocessors needed to run the service:

• Amazon Web Services: hosting, storage, and email, Mumbai region.
• Anthropic: AI model inference, United States.
• Supabase: managed database.
• Razorpay: payment processing, India. Card details never touch our servers.

We may also disclose data where law requires, with notice to you where legally permitted.

Our infrastructure runs in the AWS Mumbai region. Data sent to AI model providers can be processed outside India, currently in the United States, for the duration of the request. Transfers are limited to countries not restricted by the Government of India under the DPDP Act, and contractual safeguards apply to each subprocessor.

Connector credentials are encrypted at rest with per-organization keys held in a managed key service. Sessions are isolated per user and per workspace. All data-source access is read-only by design. Administrative functions are role-gated and audited. If a breach affects your personal data we will notify you and the relevant authorities as the law requires, including the Data Protection Board of India where applicable.

Account data and conversations are retained while your account is active. After account deletion, personal data is removed within 30 days and backup copies age out within 90 days. Audit and billing records are kept for the period the law requires. Agent memories about you can be erased by you at any time from your profile.

You can export everything we hold about you, remove connectors and files, erase the agent's memories, and delete your account from the Profile page without asking us. You may also request access, correction, or erasure, object to processing, withdraw any consent-based processing, and nominate a person to exercise your rights in case of death or incapacity as provided by the DPDP Act. Requests made through the contact page are acknowledged within 48 hours.

Insighter uses essential cookies for sign-in and, only with your consent, analytics cookies. The separate Cookie Policy lists each cookie and its purpose and explains how to change your choice.

Insighter is not intended for anyone under 18 and we do not knowingly process children's data. If we learn that we hold such data we will delete it promptly.

Concerns about personal data are handled by our Grievance Officer, Klair Tech, Hyderabad, India, reachable through the contact page with the subject "Grievance". We acknowledge grievances within 48 hours and resolve them within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

Material changes are announced in the product and require fresh acceptance before continued use. The version and effective date at the top identify the current text; earlier versions are available on request.