Privacy Policy

What we collect

• Account information: your email address, username, full name, and avatar. We use this to create and identify your account, and to show your name and avatar to teammates in your organization.
• What you save: the links, notes, and tags you save to Insight, and whether each save is marked public (visible to your organization) or private.
• Sources you watch: the LinkedIn profiles, companies, or search terms you choose to track, and the posts pulled in from them (author, content, publish date, thumbnail) so they can appear in your Feed.
• Organization membership: which organization you belong to and your role in it. This is how we scope what you and your teammates can see.
• Product analytics: anonymized usage events (for example, "a source was watched" or "a save was made public") through PostHog. We use this to see which features actually get used. We don't track your browsing outside Insight.

The browser extension specifically

The extension only acts when you use it. It doesn't run in the background collecting data from your general browsing. A few specifics:

• When you open the popup to save a page, it reads that tab's URL, title, and page meta-description to prefill the save form. Nothing is sent to Insight until you press Save.
• On linkedin.com, a content script reads posts in your feed, but only from profiles and companies you've explicitly chosen to track. That's what lets new posts show up in your Insight Feed without waiting for the next scheduled sync.
• Your Insight sign-in session (an access token) lives in the extension's local browser storage (chrome.storage.local), so you don't have to reconnect every time you open the popup. It never goes anywhere except Insight's own backend.

LinkedIn content

Posts from watched sources are fetched through Apify, a third-party web-data platform acting on our behalf, for scheduled syncs. For sources you're actively viewing, posts can also be captured directly from your own browser session. Either way, Insight only pulls posts from public LinkedIn profiles and pages you've chosen to track. It does not touch private messages, connections, or anything on LinkedIn beyond public post content.

Who we share data with

We don't sell your data. A handful of services process it on our behalf, strictly to run the product:

• Supabase: our database, authentication, and file storage.
• Apify: fetches public LinkedIn posts for the sources you watch.
• Resend: sends the optional daily sync-summary email, if you turn it on.
• PostHog: the anonymized product analytics described above.
• Vercel: hosts the web app.
• Discord: only comes into play if an organization admin adds a Discord webhook URL for sync notifications. Nothing is sent to Discord otherwise.

Anything you mark public is visible to other members of your organization inside Insight. We never share it outside your organization, and we don't make it publicly indexable.

Data retention & deletion

We keep your data for as long as your account is active. Want your account and data deleted? Email us at the address below. There's no self-serve delete button yet, but we'll act on the request promptly.

Children's privacy

Insight is a workplace tool. It's not directed at, and we don't knowingly let, children under 13 use it.

Changes to this policy

If this policy changes in any material way, we'll update the "Last updated" date above. Continuing to use Insight after a change means you accept the update.

Contact

Questions about this policy or your data? Email hey@coffeeinc.in.