Privacy Policy

This policy explains what personal data Tistasoft Private Limited (“we”) collects when you use agencyinsightlab.com, why we collect it, who we share it with and what rights you have. It covers both our website at agencyinsightlab.com and the application at app.agencyinsightlab.com.

1. Who is responsible

Tistasoft Private Limited is the data controller for the personal data described in this policy. You can reach us at support@agencyinsightlab.com or by post at:

[Registered business address]

2. What we collect

Account data. Your name, email address, password (stored only as a hash), company name, country and the details you add to your profile. If you sign in with Google, we receive your name, email address and profile picture from Google — never your Google password.

Billing data. Plan, billing period, invoices, transaction identifiers and the billing address and tax registration you provide. Card details are collected and stored by our payment gateway; we receive only a token and the last four digits.

Workspace data. The sites, keywords, backlinks, audits, articles, topical maps, reports and leads you create or import, and the data returned by the integrations you connect.

Usage data. Log records of requests to the Service, including IP address, browser and device information, pages viewed and actions taken. We use this to operate the Service, investigate problems and prevent abuse.

Enquiries. What you send us through the contact form on this website, and our correspondence with you.

Lead generation. Where you embed our audit form, we process the details a visitor submits — typically a name, an email address and a website — on your behalf, so that the audit report can be produced and delivered.

3. Why we process it

• To provide the Service — creating your account, running audits and crawls, tracking ranks, generating content, producing and sending reports. Legal basis: performance of a contract.
• To take payment — processing transactions, issuing invoices, meeting tax obligations. Legal basis: contract and legal obligation.
• To support you — answering questions and investigating faults. Legal basis: contract and legitimate interests.
• To keep the Service secure — detecting abuse, enforcing limits, preventing fraud. Legal basis: legitimate interests.
• To improve the Service — aggregate analysis of how features are used. Legal basis: legitimate interests.
• To send service messages — renewal notices, limits reached, security alerts. These are not marketing and you cannot opt out of them while you have an account.
• To send marketing — only where you have opted in, and you can withdraw at any time from the link in any such email. Legal basis: consent.

4. Google user data

When you connect Google Analytics, Search Console, Google Ads or Google Business Profile, we request read access to the properties you choose. We use that access solely to display your data in dashboards and reports inside your workspace. We do not sell it, use it for advertising, or use it to train generalised AI models. You can disconnect an integration at any time in the application, or revoke our access from your Google account security settings.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Who we share it with

We do not sell personal data. We share it only with processors who help us run the Service, each under a written agreement that limits them to our instructions:

• cloud hosting and storage providers;
• our payment gateway, for processing transactions;
• transactional email providers, for delivering reports and service messages;
• error monitoring and analytics providers;
• AI model providers, where you use content generation and have not supplied your own keys.

We may also disclose data where we are legally required to, or to establish or defend legal claims.

6. Where your data is held

The Service is hosted in [region]. Some of our processors operate in other countries. Where personal data is transferred outside its country of origin, we rely on appropriate safeguards such as standard contractual clauses.

7. How long we keep it

• Account and workspace data — for as long as your account is open, then [30] days after closure, then deleted.
• Billing records — for the period required by tax and accounting law, typically [8] years.
• Support correspondence — [24] months.
• Server logs — [90] days.
• Leads captured through your embedded forms — for as long as your account is open, or until you delete them.

8. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent you have given. Most of these you can exercise yourself in the application: your profile is editable, your data is exportable, and account deletion is self-service.

For anything else, write to support@agencyinsightlab.com. We respond within 30 days. If you are not satisfied with our response you may complain to your local data protection authority.

9. Security

We protect data in transit with TLS and at rest with encryption at the storage layer. Access to production systems is restricted, authenticated and logged. Passwords are stored only as salted hashes. No system is perfectly secure, and we will notify you and the relevant authority without undue delay if a breach affects your data.

10. Children

The Service is not intended for anyone under 18 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

11. Cookies

See our Cookie Policy for what we set and why.

12. Changes to this policy

We update this policy when our practices change. The date at the top of this page is the date of the current version, and we give notice in the application before a material change takes effect.