insta.page Privacy Policy
Last updated: 10/15/2026
1. Information We Collect
We collect information when you:
- Create an account
- Use our SaaS services
- Make payments
- Contact customer support
Automatically Collected Information:
- IP address and device characteristics
- Browser type and operating system
- Referring URLs and page interactions
- Usage patterns through cookies
2. How We Use Your Information
We process your data based on:
- Contractual necessity to provide our services
- Legitimate business interests
- Legal compliance
- Your explicit consent
Specific purposes include:
- Account creation and authentication
- Service personalization
- Fraud prevention and security
- Payment processing (Stripe)
- Marketing communications (opt-out available)
- Service improvement through analytics
- Legal compliance (Norwegian tax laws)
3. Data Sharing
We might share information with:
- Service Providers:
- Payment processors (Stripe)
- Cloud hosting providers (EU-based)
- Analytics services (Google Analytics)
- AI decision service (TypeSafe, via Vercel AI Gateway)
- Legal Requirements:
- Court orders/subpoenas
- Government requests
- Fraud investigations
We never sell your personal data. Third-party partners are contractually bound to:
- Use data only for specified purposes
- Maintain confidentiality
- Implement adequate security
Automated page adaptation:
Some pages ask a third-party decision service which version of a section to show you — for example which summaries to recommend next. What we send describes the visit, not you: the page you are on and its category, your device class (mobile, tablet or desktop), your country code, the category of site that referred you, which pages you have viewed during this visit, and whether you have used features such as search, the mindmap or Ask AI. It never includes your IP address, email address, name or account ID, and the visit identifier is replaced with a salted hash. Every request is sent with zero-data-retention and no-training flags, so the provider neither stores it nor learns from it. We keep our own record of the request and the answer for up to 30 days to check the quality of these decisions, and longer only for individual decisions we flag for review. If the service is slow or unavailable the page simply falls back to its standard version, so this never affects what you can access.
4. Cookies & Tracking
We use:
- Essential Cookies: Session management
- Preference Cookies: Language settings
- Analytical Cookies: Service optimization
- Advertising Cookies: Targeted campaigns
5. Data Retention
We retain data:
- Active accounts: Until deletion request
- Inactive accounts: 2 years
- Payment records: 5 years (Norwegian Bookkeeping Act)
- Page-adaptation decision logs: 30 days, or until reviewed
Backup data is securely isolated and deleted during regular purge cycles.
6. Security
- AES-256 encryption
- Regular penetration testing
- Role-based access controls
- SOC 2 compliant infrastructure
While we implement enterprise-grade security, absolute internet security cannot be guaranteed.
7. International Transfers
Data is primarily processed in EU/EEA. When transferred outside:
- We use EU-approved Standard Contractual Clauses
- Ensure adequacy decisions where applicable
- Implement supplementary safeguards
8. Policy Updates
We update this policy annually or when required by law. Material changes will be:
- Emailed to active users
- Posted on our website 30 days before effect
- Archived with version history available
Contact Information
Leanback AS
Email: post@leanback.no