How Insightoryx collects, uses, stores, and protects your personal data. This policy applies to all visitors and users of our website and platform services.
Insightoryx ("we," "us," or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at insightoryx.cyou and use our AI-powered digital marketing analytics platform.
Insightoryx is operated by Insightoryx Inc., located at 130 King Street West, Toronto, ON M5X 1A9, Canada. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), the General Data Protection Regulation (GDPR) for users in the European Economic Area and the United Kingdom, and applicable provincial privacy legislation in Canada.
By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please discontinue use of our website immediately. We encourage you to review this policy periodically, as we may update it to reflect changes in our data practices or legal requirements. Changes will be notified via a homepage banner at least 14 days before taking effect.
This policy was last updated on January 15, 2026, and is effective as of January 15, 2026.
When you interact with our website and services, we may collect the following categories of information:
We collect this data through direct interactions (when you fill out forms or contact us), automated technologies (cookies, pixels, and server logs), and third-party services (analytics and advertising platforms) as described in subsequent sections of this policy.
Our cookie consent banner provides three options: "Accept All," "Reject Non-Essential," and "Manage Preferences." The banner does not block access to content and can be dismissed without accepting, in which case only essential cookies remain active. Your choice is stored in your browser's local storage for 12 months, after which you will be asked again.
Analytics and marketing cookies are never activated until you explicitly click "Accept All" or enable them individually through the "Manage Preferences" panel. The consent banner links directly to this Privacy Policy for your reference.
By clicking "Accept All Cookies," you consent to the storing of cookies on your device for analytics and advertising purposes, including personalized advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.
Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.
You may withdraw consent at any time by clicking "Manage cookie preferences" in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid.
We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:
Cookie identifiers, conversion events, anonymized behavioral data, remarketing lists. Governed by Google's Privacy Policy: https://policies.google.com/privacy
Pixel events, conversion data, custom audiences. Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy
We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only and is not resold to unaffiliated third parties.
Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.
When you submit a contact form, request a quote, or register interest in our services, we collect the information you provide. This typically includes: full name, email address, phone number, and your message.
Legal basis: Consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b). Under PIPEDA, collection is based on meaningful consent obtained at the time of form submission.
Retention: Form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law.
You may request deletion of your data at any time by contacting us at the email address provided at the bottom of this policy.
A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.
This website uses the following Google services:
Collects anonymized usage data, device info, and behavioral signals. IP anonymization is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
Records when a user completes a defined action (form submission, call, purchase) after clicking one of our ads. This data is used solely for measuring ad campaign performance.
Allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).
Deploys tracking tags on our behalf. No personal data is collected by GTM itself; it acts as a container for the tags listed above.
Google's advertising products are governed by: https://policies.google.com/technologies/ads
This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:
We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.
Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy
To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/
This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full.
The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.
This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at the address provided in this policy if you believe we have received data from a minor.
Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.
These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly.
For transfers from Canada, we ensure compliance with PIPEDA requirements for cross-border data transfers, including an assessment that the receiving jurisdiction provides an adequate level of protection for personal information.
If you are located in the EEA or UK, you have the following rights under the General Data Protection Regulation:
Request a copy of data we hold about you.
Correct inaccurate or incomplete data.
Request deletion ("right to be forgotten").
Limit how we process your data.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interest.
Revoke consent at any time without penalty.
To exercise any right, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:
Canadian users may also exercise rights under PIPEDA, including the right to access, correct, and challenge the accuracy of personal information held by Insightoryx. Requests should be directed to the contact information below.
| Data Type | Legal Basis |
|---|---|
| Contact form data | Consent (Art. 6.1.a) and contract performance (Art. 6.1.b) |
| Analytics data | Consent (Art. 6.1.a) |
| Marketing / remarketing data | Consent (Art. 6.1.a) |
| Security and fraud prevention | Legitimate interest (Art. 6.1.f) |
| Data Category | Retention Period |
|---|---|
| Contact form submissions | 2 years |
| Analytics data (GA4) | 14 months |
| Marketing cookies (Google Ads) | Up to 540 days |
| Email communications | Duration of relationship + 1 year |
| Server logs | 90 days |
| Cookie consent records | 3 years (audit requirement) |
After the applicable retention period expires, personal data is securely deleted or anonymized. Anonymized data may be retained indefinitely for statistical purposes, as it can no longer be linked to an individual.
If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a data protection concern, please contact us using the information below:
Data access requests: within 30 days
Data deletion requests: within 30 days
General privacy inquiries: within 5 business days
Policy change notifications: minimum 14 days advance notice via homepage banner