01Introduction
This Privacy Policy explains how InnSight AI, Inc. (“InnSight AI”, “we”, “our”) collects, uses, shares and protects personal information when you visit innsightai.org, use the InnSight AI platform at portal.innsightai.org (the “Platform”), attend a demo, or otherwise communicate with us.
It is written for three groups of people: visitors to our website, people who work for a hotel, ownership group or management company that subscribes to the Platform, and business contacts we speak with about InnSight AI. If a product or feature carries its own privacy notice, that notice applies to the product in addition to this policy.
Our website and Platform are business tools and are not directed to children. We do not knowingly collect information from anyone under 16.
02Who is responsible for your data
InnSight AI, Inc., a company based in Houston, Texas, is responsible for the personal information described in this policy and decides how and why it is used. For hotel business data that a customer uploads to or connects with the Platform, the customer remains the owner and decision-maker, and InnSight AI processes that data on the customer’s instructions under its service agreement.
You can reach our privacy team at hello@innsightai.org.
03Information we collect
“Personal information” means information that identifies you or could reasonably be linked to you. Depending on how you interact with us, we may collect:
| Category | Examples |
|---|---|
| Identity & contact | Name, work email address, phone number, job title, company, property names and locations. |
| Account & contract | Username, role and permissions inside the Platform, the organization that invited you, subscription and order details. |
| Financial & transaction | Billing contact and address, invoices, and payment status. Card details are entered directly with our payment processor and are never stored on InnSight AI systems. |
| Technical | IP address, browser type and version, device and operating system, time zone, sign-in events and security logs. |
| Usage | Pages and features you use, reports you generate or schedule, support requests, and notes or recordings from demos and support calls when you are told they are being recorded. |
| Marketing & communications | Your preferences for hearing from us, and how you interact with emails we send. |
Hotel business data
Customers upload or connect performance reports, reservation and pickup files, budgets, competitor selections, rate information and similar business records (“Customer Data”). This data is about hotels, not about people, and we ask customers not to include guest-level personal information. Customer Data is handled as described in section 6.
Aggregated data
We may create statistics that cannot identify you or your organization, for example the share of users who open a report on a phone. Aggregated data is not personal information and may be used for any lawful purpose.
Sensitive information
We do not collect sensitive personal information such as health, biometric or government identification data, and we ask that you do not send it to us.
04How we collect it
- Directly from you when you request a demo, create or accept an account, contact support, attend a call, or subscribe to updates.
- From your organization when an administrator invites you to the Platform and assigns your role and hotels.
- From sign-in providers. If you sign in with Microsoft or Google, we receive only your name and email address from that provider. We never see or store your Microsoft or Google password.
- Automatically through cookies and server logs when you use our website or Platform, as explained in section 9.
- From public and professional sources such as company websites, LinkedIn, industry directories and hotel brand sites, when we research prospective customers.
- From connected systems that a customer authorizes, such as a property management system, benchmarking provider or distribution channel.
05Why we use it
We use personal information only where we have a legitimate reason to do so. The table below lists our purposes and the basis we rely on.
| Purpose | Basis |
|---|---|
| Provide the Platform, authenticate you and show you the hotels your organization has granted you | Performing our contract with your organization |
| Send service messages such as invitations, password resets, scheduled reports and billing notices | Performing our contract |
| Respond to demo requests, questions and support tickets | Our legitimate interest in serving you; performing our contract |
| Keep the Platform secure, detect misuse and troubleshoot problems | Our legitimate interest in protecting customers and InnSight AI |
| Understand how features are used and improve the product | Our legitimate interest in building a better service |
| Tell business contacts about products, features and events | Our legitimate interest in growing our business; your consent where the law requires it |
| Keep business records, bill accurately and meet tax and accounting rules | Legal obligation; our legitimate interest |
| Evaluate or complete a merger, financing or sale of InnSight AI | Our legitimate interest |
| Establish, exercise or defend legal claims and respond to lawful requests | Legal obligation; our legitimate interest |
Where we rely on consent, you can withdraw it at any time by emailing hello@innsightai.org or using the unsubscribe link in any marketing email. Withdrawing consent does not affect processing that already took place.
06Hotel data and isolation
- Customer Data belongs to the customer. We use it only to deliver, secure and support the service for that customer.
- We do not combine one customer’s hotel data with another customer’s, and we do not publish benchmarks, market reports or model training sets built from Customer Data unless a customer has opted in, in writing, to a clearly described program.
- Competitive rate information shown in the Platform is gathered from publicly available sources and is not drawn from any customer’s private data.
- We ask customers to exclude guest-level personal information from uploads. If guest information is required for a specific feature, it is processed under the customer’s service agreement and data processing terms.
07AI features
Some Platform features use artificial intelligence to summarize performance, interpret reports and suggest pricing actions. When you use these features:
- The AI works only with your organization’s own data and publicly available market information.
- Prompts and outputs are processed by AI service providers under contracts that prohibit them from using your content to train their models.
- Outputs are recommendations for a person to review, not automated decisions about you or your business.
- Please do not enter personal information about guests or employees into AI features.
10Where data is stored
InnSight AI is based in the United States and our systems are hosted on infrastructure located in the United States. If you access our services from outside the United States, your information will be transferred to and processed there. Where the law of your country requires additional safeguards for such transfers, we rely on recognized mechanisms such as standard contractual clauses, which are available on request.
11Security
We protect information with technical and organizational measures appropriate to its sensitivity, including encryption in transit and at rest, role-based access controls, credential-based isolation between hotels, logging of sign-in and administrative activity, and least-privilege access for InnSight AI staff bound by confidentiality obligations. We are pursuing a SOC 2 Type I report and run continuous control monitoring; current security information is published in our Trust Center.
If we become aware of a security incident affecting your personal information we will investigate, take corrective action and notify affected customers and regulators as the law requires.
12How long we keep data
We keep personal information only as long as needed for the purposes described above. In practice:
- Account information and Customer Data are kept for the life of the customer’s agreement and deleted or anonymized within 90 days after it ends, or sooner on written request, except where we must keep records for legal, tax or accounting reasons.
- Security and sign-in logs are kept for up to 12 months.
- Business-contact and marketing records are kept until you ask us to stop or we have had no contact with you for 24 months.
- Anonymized statistics may be kept indefinitely.
13Your rights and choices
Depending on where you live you may have the right to:
- Access the personal information we hold about you and receive a copy.
- Correct information that is inaccurate or incomplete.
- Delete your information, subject to legal exceptions.
- Receive a portable copy of information you provided to us, in a commonly used format.
- Object to or restrict certain processing, including direct marketing.
- Withdraw consent at any time where we rely on it.
- Not be discriminated against for exercising these rights.
To make a request, email hello@innsightai.org. We may ask for information to confirm your identity. We do not charge a fee for reasonable requests and aim to respond within 30 days; if a request is complex we will tell you and keep you informed. If you are a Platform user, your organization’s administrator can also update or remove your account directly.
Residents of California and other U.S. states with privacy laws have the rights those laws provide. We do not sell or share personal information as those terms are defined in such laws. If you are in the United Kingdom, European Economic Area or Switzerland, you may also lodge a complaint with your local data protection authority.
14Children
Our services are for businesses and are not intended for children. If you believe a child has provided us with personal information, contact us and we will delete it.
15Third-party links
Our website and Platform may link to third-party sites and services, including sign-in providers, our Trust Center, integration partners and hotel brand sites. We do not control those sites and their privacy practices are governed by their own policies.
16Changes to this policy
We may update this policy from time to time. When we do, we will change the effective date at the top of this page and, if the changes meaningfully affect how we use your information or your rights, we will notify customer administrators or post a notice before the change takes effect.
17Contact us
InnSight AI, Inc.
Houston, Texas
Email: hello@innsightai.org
Technical support: techsupport@innsightai.org
Questions about this document?
Email hello@innsightai.org and our team will respond within a few business days.