Insightly
- The policy allows AI training; it does not describe an opt-out.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
CRM that takes contacts, ads tracking, Copilot prompts, auto-renews with no refunds.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
- Uses your content for AI training with no opt-out
Collected
Account info, imported contacts, device and ad IDs, logs, location, and Copilot prompts or emails if you enable those.
Read the exact line
Privacy policy
“This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data, mobile device identifiers, and advertising identifiers.”
Training
They run the CRM, market to you, run ads, and use Copilot prompts to improve AI accuracy.
Read the exact line
Privacy policy
“This information is used to enhance user experience, improve AI accuracy, and provide actionable insights tailored to your workflow.”
Sharing
Vendors, affiliates, business partners, and third-party ad partners can get data; they say they do not sell it under .
Read the exact line
Privacy policy
“Insightly may allow third-party advertising partners to set tracking tools (e.g., cookies) to collect information regarding your activities (e.g., your IP address, page(s) visited, time of day).”
Kept
They keep it while your account is active; after a subscription ends they may delete your data within 24 hours.
Read the exact line
Privacy policy
“Insightly will retain your information for as long as your account is active or as needed to provide you with services.”
Controls
Change account info in Settings, disable Copilot, unsubscribe from marketing, or email support to delete some data.
Read the exact line
Privacy policy
“You may choose not to use Copilot or disable Copilot functionalities in your user settings.”
Fine print
Subscriptions auto-renew with no refunds; you them.
No exact line could be verified.
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Disable Copilot in user settings
User settings (privacy policy: disable Copilot functionalities)
Opt out of interest-based ads
www.networkadvertising.org/managing/optout.asp and www.aboutads.info/choices/ (EU: youronlinechoices.eu)
Cancel auto-renew at least 30 days early
Email support-ins@unbounce.com at least 30 days before the term ends
Export CRM data before you leave
Request export within ten days before the effective termination date (Terms §12.7)
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If you cancel mid-term, you generally do not get money back and may still owe the rest of the term.
Read the exact line
Terms of service
“EXCEPT FOR YOUR TERMINATION RIGHTS UNDER SECTION 12.4, NO REFUNDS OR CREDITS FOR SUBSCRIPTION FEES WILL BE PROVIDED IF YOU TERMINATE OR CANCEL YOUR SUBSCRIPTION TO A SERVICE PRIOR TO THE END OF A SUBSCRIPTION TERM.”
For example, if you cancel a yearly plan after two months, they keep the rest of the year’s fee.
You may have to pay their legal bills if someone sues over how you used the product or what you uploaded.
Read the exact line
Terms of service
“You will and Insightly and its officers, directors, employees and agents, from and against any claims, disputes, demands, liabilities, damages, losses, and costs and expenses, including, without limitation, reasonable legal and accounting fees arising out of or in any way connected with (i) your access to or use of the Services or Our Content, (ii) Your Data, or (iii) your violation of these Terms.”
For example, if a contact you imported sues over privacy, you could be on the hook for Insightly’s lawyers.
When the subscription ends, they can wipe your CRM data very quickly unless you asked for an export in time.
Read the exact line
Terms of service
“We may delete Your Data from the Services within twenty-four (24) hours upon expiration or termination of your Subscription.”
For example, if you forget to export contacts before canceling, they may be gone the next day.
Ad companies can track you across sites to show targeted ads.
Read the exact line
Privacy policy
“Our third party partner may use technologies such as cookies to gather information about your activities on this Site and other sites in order to provide you advertising based upon your browsing activities and interests.”
For example, visiting the pricing page could later show Insightly ads on other websites.
The product is built to pull in your address book, not just your own account details.
Read the exact line
Privacy policy
“You can import your basic contact information from your Google Contacts using Insightly’s automated contact import wizard.”
For example, connecting Google can upload names and emails of people who never signed up for Insightly.
What you type into Copilot can be used to make their AI better, not only to answer you in the moment.
Read the exact line
Privacy policy
“This information is used to enhance user experience, improve AI accuracy, and provide actionable insights tailored to your workflow.”
For example, a prompt about a sales deal could help tune Copilot for other users’ workflows.
They say they will not feed your CRM data into public AI models like a general chatbot on the internet.
Read the exact line
Privacy policy
“nor does Insightly use Customer Data to train any publicly available machine learning models.”
For example, your private notes should not show up as training for an open public model.
Your CRM records stay yours, and they say they only look at them to run the product.
Read the exact line
Terms of service
“You own your CRM Data. We will not access your CRM Data for any purpose other than in connection with the provision of Services.”
For example, your lead list is still yours, not Insightly’s to resell as a mailing list.
They claim they do not sell personal information as California defines a sale.
Read the exact line
Privacy policy
“For purposes of the , Insightly does not “sell” Personal Information, nor do we have actual knowledge of any “sale” of Personal Information of minors under 16 years of age.”
For example, they say they are not selling your email to data brokers as a “sale.”
They say an independent SOC 2 standard applies and they encrypt some sensitive traffic.
Read the exact line
Privacy policy
“Insightly is SOC 2 compliant and maintains reasonable security measures to protect your information from loss, destruction, misuse, unauthorized access or disclosure.”
For example, credit-card entry is described as using SSL, and they claim SOC 2 compliance.
Words to know
Legal words from the lines above, in plain English.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- model training
- Using your content and conversations as examples to teach an AI system, which can then echo them in future answers. For example, a story you write in a chatbot may be studied by the company to make the next version of the bot.
- CCPA
- California's privacy law, which gives residents the right to see, delete and stop the sale of their data. For example, a Californian can ask the app to stop selling their data and it must comply.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
How we got here · grade F · score 34/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
They collect more than account and messages: imported contacts, IP and device IDs, ad IDs, clickstream, optional location, and email bodies if you connect email.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Copilot prompts are used to improve AI accuracy. They say they do not train publicly available models on customer data, and you can only disable Copilot rather than opt out of training while using it.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Third parties set cookies and they partner for interest-based ads and Google Analytics.
Do they sell or share your data, and can you opt out?
They say they do not sell under CCPA, but they share with affiliates, business partners, and ad partners, with an opt-out for ad sharing.
What rights do they take over what you type and what the AI makes?
You own CRM data. Site posts get a royalty-free license so they can operate the service.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data while the account is active. Some deletion is in Settings; email and AI summaries need a support request, with no 30-day wipe promise.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they are SOC 2 compliant and use SSL, TLS, and AES-256 for some data.
Is there a real age gate, and are teens protected?
The service is not intended for children under 16 and they say they do not knowingly collect from them. There is no age-proofing described.
Will they tell you when the rules change, and is the policy specific?
Policies are dated. They say they will email or post before material privacy changes, but continued use still binds you, and retention is not a fixed period.
Can they close your account without warning, and can you get your data out first?
They can end access for cause without notice if you violate the privacy policy, may delete data within 24 hours, and export is only if you ask in a short window before the end.
If something goes wrong, who pays?
The service is as-is, liability is capped at fees paid or $100, and you must indemnify them for claims tied to your use or data.
Do subscriptions renew on their own, and can you get a refund?
Subscriptions auto-renew. Price can change with 30 days’ notice. Except for their uncured breach, they give no refunds if you cancel early.
The privacy policy is 5,981 words at a college graduate level (Flesch reading ease 36.1); the terms are 4,927 words at a college level.
