Last updated:
Privacy policy
Understand how Insōla handles data when you explore the site, try a demo, shop, book or contact us.
Audience measurement is optional. You can refuse it or withdraw your consent at any time and continue using Insōla.
This notice is being finalized. The operator’s legal identity and privacy contact must be completed before it is used as the published privacy notice.
Who handles your data
This notice covers the Insōla public website, its demonstrations, project enquiries and remembering your privacy choices. Businesses using Insōla handle their own customer relationships; their communications and services have separate privacy information. This includes optional measurement of customer shopping and booking journeys on INSOLA.
Making the website work
Essential cookies and storage support your session, language, display preferences, security and privacy choices. They are separate from optional audience measurement.
While signed out, your analytics choice applies to your browser. When you sign in, your latest explicit choice is synchronized with your account and used on signed-in devices. Synchronization does not extend its validity.
Audience measurement, with your consent
If you agree and collection is enabled, we use PostHog, with analytics data hosted in the European Union, to understand which public pages and demonstrations are useful. Consent is the basis for this optional processing.
Events describe public pages viewed, predefined demonstration steps and successfully recorded contact requests. They include the language, demonstration scenario, event time and a pseudonymous identifier. This identifier is not your account ID, but it remains personal data. Predefined pricing-page interactions (buttons, sections, questions and the simulator outcome: Free, Grow or equal) may also be measured. The amount entered in the simulator stays in your browser and is never transmitted.
With your consent, we also measure product and booking views, variant and session selections, items actually added to a cart, checkout preparation, confirmed purchases and confirmed bookings. Only language, surface category, offer category and purchase mode are sent. No Business, product, booking or account identifier, amount, title or entered content is sent. Free bookings and bookings covered by a pass are not reported as paid purchases.
No name, email, typed text or video recording of your visit is sent to PostHog. We do not send your full page URL, visitor IP address or browser user agent. Views of private account and management screens are not measured.
A random identifier groups the steps of a single journey. It is stored in a protected cookie only after consent and expires after 30 minutes of inactivity or 24 hours at most. Signing in can preserve that journey when the same consent remains applicable. Withdrawal, a new explicit choice, logout or switching accounts starts a separate context. We do not link journeys to PostHog person profiles.
When you contact us
If the enquiry form is available, we use the name, email, business details and message you provide to respond to your request and discuss your project. These details are available to authorized Insōla staff. Resend delivers the acknowledgement and internal notification emails; Cloudflare Turnstile helps protect the form from abuse.
Responding to a request about using Insōla involves steps taken at your request before entering into a contract. Abuse prevention serves our legitimate interest in protecting the service. Reading this notice does not subscribe you to marketing emails or grant analytics consent.
Contact details and messages are separate from analytics: PostHog can receive a contact event only with your consent, and never receives the form’s contents.
How long data is kept
An acceptance or refusal remains valid for six calendar months. Analytics events are retained for up to twelve months. Records of privacy decisions are retained for eighteen months to document the choices applying to those events.
The website’s stored enquiry form details are scheduled for deletion after ninety days. This does not automatically delete emails already sent or the associated support history. Their retention depends on the follow-up needed for the enquiry and any applicable record-keeping obligations.
For a checkout started with consent, a restricted internal reference may be retained for up to 30 days to associate a delayed confirmation with its original journey. The same consent is checked again before export. This reference is then deleted; commercial records retain their separate business retention rules.
Changing your choice
Use “Customize my choices” on this page, in the website footer or in your account to accept, refuse or withdraw consent. Refusing does not prevent access to the website or your account.
Withdrawal stops new analytics collection. If saving fails, collection stays paused on this device; retry to synchronize the refusal with your other devices. Withdrawal does not recall events already sent or affect the lawfulness of processing before withdrawal. You can request deletion separately.
Your rights
Depending on the processing and applicable conditions, you can request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. You can also withdraw consent.
Use the privacy contact above to exercise your rights. We may need information to verify your request and locate the relevant data. You may lodge a complaint with the CNIL or your local data protection authority.