Legal

Privacy Policy

Last updated: 9 October 2026

InsightFlow Hub (“InsightFlow Hub”, “we”, “us”) operates the website insightflowhub.com and the InsightFlow Hub service: a marketing intelligence platform that connects a company's website, Google Ads, Google Analytics 4 (GA4), Microsoft Clarity and lead forms in one place, analyses them and recommends specific changes. This policy explains what data we collect, why, how we protect it and how you can control it. It applies to visitors of this website and to customers who use the service, including the trial and pilot programmes.

We process personal data in line with Vietnam's Decree 13/2023/ND-CP on personal data protection and, where it applies to our customers, the EU General Data Protection Regulation (GDPR).

1. Data we collect on this website

• Contact form. When you request a trial or a demo we receive the details you type: your name, work email, phone or WhatsApp number, website and message. We use them only to reply to you and to set up the trial or demo you asked for.
• Technical logs. The site is served by Cloudflare. Cloudflare records standard request data (IP address, browser type, requested page, time) to keep the site secure and available. We do not combine these logs with your identity.
• No cookies, no trackers. This website sets no cookies and loads no analytics or advertising scripts. Fonts are loaded from Google Fonts, which receives your IP address to deliver the font files.

2. Data we process in the service

• Account details. Your name, work email, company name and the settings you choose.
• Connected sources. With your permission we read data from the accounts you connect: Google Ads (campaigns, keywords, spend, conversions), GA4 (sessions, events, conversions), Microsoft Clarity (session recordings, heatmaps and their metrics), your website (pages and events) and your lead forms (submissions). Access is read-only. We never change campaigns, budgets, bids or your website.
• Sign-in tokens. Each source connects through its own official sign-in (for example Google OAuth). We never see or store your passwords. The access tokens we receive are stored encrypted and are used only to read the data described above. You can revoke them at any time in the service or in your Google or Microsoft account settings.
• Your customers' data. Lead-form submissions and analytics data may contain personal data of your own customers, such as names and contact details. We process this data on your behalf and on your instructions. You remain the controller of that data and are responsible for having a lawful basis to share it with us.
• Questions you ask. When you ask questions about your data through our MCP server in Claude Desktop, we process the question and the data needed to answer it.

3. How we use data

• To produce the analysis, dashboards and recommendations you asked for, each with the evidence behind it.
• To answer the questions you ask about your own data.
• To operate, secure, support and improve the service, and to tell you about changes that affect you.
• To reply to your messages and to manage your trial, pilot or subscription.

We do not sell personal data. We do not use your data for advertising. We do not use your data to train artificial intelligence models, and we do not allow our providers to do so.

4. Analysis with Claude

The analysis in InsightFlow Hub is produced with Claude models made by Anthropic. To produce a recommendation or to answer a question, we send the relevant data to Anthropic's API under Anthropic's commercial terms, which do not allow Anthropic to train models on that data. We send only the data needed for the analysis you requested, and we keep the amount of personal data in those requests to a minimum.

5. Google user data

InsightFlow Hub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In practice this means we use Google data only to provide and improve the features you see in InsightFlow Hub, we do not transfer it to third parties except as needed to provide those features (for example to our hosting and AI providers named below) or when required by law, we do not use it for advertising, and humans read it only with your permission, for security reasons, or to comply with the law.

6. Who we share data with

We share data only with the providers we need to run the service, and only for that purpose:

• Cloudflare: hosting, security and delivery of the contact-form emails.
• Anthropic: the Claude models that produce the analysis (see section 4).
• Google and Microsoft: the sources you choose to connect, under their own terms and privacy policies.

We may also disclose data when the law requires it, or to protect the rights and safety of our customers, the public or InsightFlow Hub.

7. International transfers

Our providers may process data outside Vietnam, including in the United States and the European Union. Where this happens we rely on the providers' contractual safeguards and keep the transfers to what the service needs.

8. How long we keep data

• Contact-form messages: as long as needed to reply and to follow up on your request, and no longer than 24 months.
• Service data: while your account or pilot is active. When you disconnect a source, the data from that source is deleted within 30 days. When you delete your account, all of your data is deleted within 30 days, and from backups within 90 days.
• Technical logs: a short period defined by our hosting provider, for security only.

9. Your choices and rights

You can disconnect any source or delete all of your data at any time from your account settings. Depending on where you live, you may also have the right to access, correct, export or delete your personal data, to object to or restrict its processing, and to withdraw consent. To exercise any of these rights, email contact@insightflowhub.com. We answer within 30 days. If you believe we have not handled your data correctly, you can also complain to your local data-protection authority.

10. Security

Data is encrypted in transit and at rest. Access tokens are stored encrypted and used with the smallest set of read-only permissions each source allows. Access to customer data inside InsightFlow Hub is limited to the people who need it to run the service and support you. No method of storage or transmission is completely secure, so we cannot promise absolute security, but we work to protect your data in line with industry practice.

11. Children

InsightFlow Hub is a business service. It is not intended for anyone under 18, and we do not knowingly collect data from them.

12. Changes to this policy

We may update this policy as the service changes. We will post the new version here with a new date, and we will tell active customers by email about changes that matter to them.

13. Contact

InsightFlow Hub, Vietnam.
Email: contact@insightflowhub.com