Privacy
Privacy policy.
What we collect, why, how long we keep it, and how to have it deleted — for the website, the dashboard and the app for Shopify.
Last updated: 12 November 2026. InsightFuse is operated by Peakdrive LTD.
Who this covers
This policy covers the InsightFuse website, the InsightFuse dashboard, and the InsightFuse app for Shopify. It explains what we collect, why, how long we keep it, and how to have it deleted.
Your account
For a dashboard account we keep your name, email address and a salted hash of your password (never the password itself), your plan, and the campaigns, lists and send history you create. See Security & data for how credentials are protected.
What the Shopify app reads from your store
The app asks for one permission: read_products. With it we read your store's name, description, contact email, owner name, address country, currency and primary domain, and your active products: titles, descriptions, types, tags, prices, product links and launch dates. We use this only to write your PR brief, choose which journalists fit your story, and decide when a new launch is worth pitching.
The app does not read your customers, orders, payments or inventory. We never receive personal data about your shoppers.
Your mailbox
- Gmail or Outlook, connected through our provider Composio: you sign in with Google or Microsoft and we hold only an identifier for that connection, never your password. You can revoke it from your Google or Microsoft account at any time, and we revoke it when you disconnect or uninstall.
- Any other provider (SMTP/IMAP): the password is encrypted before it is stored, used only to send your pitches and read replies to them, never shown again, and deleted when you disconnect, uninstall, or ask us to.
We read only replies from journalists you pitched, to stop follow-ups to people who already answered.
What we create while working
- The pitches the agent drafts and sends, who they went to, and replies from those journalists.
- Public news articles that mention your brand, found through Google News.
Journalists we contact
Our database holds professional contact details of journalists. Each pitch names the brand it is sent for and includes an opt-out; anyone who replies "unsubscribe" is not contacted again. Journalists can ask us to delete their details at support@insightfuse.com.
Service providers
- Vercel — hosting.
- Upstash / Vercel KV — storage of accounts, campaign state, encrypted credentials and access tokens.
- Pollinations — the language model that drafts briefs and pitches. It receives your brief and campaign context, not your credentials.
- Composio — holds the Gmail or Outlook connection if you use one.
- Resend — sends account emails such as password links.
- Stripe and Shopify — billing, depending on where you subscribed.
We do not sell your data or use it for advertising.
How long we keep it
While your account or the Shopify app is active we keep what it needs to run. When you uninstall the Shopify app, we stop all campaigns, delete our access token, and revoke or delete your mailbox connection immediately. Shopify then asks us to erase the store's data (about 48 hours later), and we delete everything we hold about the store: the brief, settings, campaign history and coverage. Dashboard accounts can be deleted from the settings page or by email.
Your rights
You can ask for a copy of your data, a correction, or deletion at any time by writing to support@insightfuse.com. Depending on where you live you may have further rights under laws such as the GDPR, UK GDPR or CCPA/CPRA, including the right to complain to your data protection authority.
Contact
support@insightfuse.com · Peakdrive LTD