Insight Hunter LLC ("Insight Hunter," "we," "us," or "our") operates the financial management platform available at insighthunter.app (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

1. Information We Collect

Information You Provide Directly

• Account registration: Name, email address, password, business name, and business type
• Business formation (BizForma): Legal business name, state of formation, registered address, EIN application information, and owner/member details required for state filings
• Financial data: Transaction records, income, expenses, and bank account information you import via CSV or connect via bank sync
• Payment information: Billing name, address, and card details (processed by Stripe — we do not store raw card numbers)
• Phone number: Mobile phone number if you opt in to SMS notifications via our consent form or provide it for PBX services
• Communications: Messages you send to our support team

Information Collected Automatically

• Usage data: Pages visited, features used, clicks, session duration, and error logs
• Device & connection: IP address, browser type, operating system, and referring URL
• Cookies: Session tokens and preference cookies (see Section 8)

2. How We Use Your Information

• Provide and improve the Service: Process transactions, generate financial reports, run AI forecasting, and manage your account
• Business formation: File formation documents with state agencies on your behalf
• Billing: Process payments and send receipts via Stripe
• SMS notifications: Send account alerts, formation status updates, compliance reminders, and security codes — only to users who have opted in (see Section 7)
• Customer support: Respond to inquiries and resolve issues
• Legal compliance: Meet tax, financial reporting, and regulatory obligations
• Security: Detect fraud, unauthorized access, and protect user accounts

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, our legal basis for processing your data is:

• Performance of a contract — to deliver the Service you signed up for
• Legitimate interests — for security, fraud prevention, and product improvement
• Consent — for SMS marketing communications (which you may withdraw at any time)
• Legal obligation — to comply with applicable laws

4. How We Share Your Information

We do not sell your personal information. We share data only in these circumstances:

Recipient	Purpose	Data Shared
Stripe	Payment processing	Name, email, billing address
Twilio	SMS & phone call delivery	Phone number, message content
Cloudflare	Hosting, CDN, edge compute	IP address, request metadata
State agencies	Business formation filing	Business & owner details you provide
Registered agent partner	Registered agent service	Entity name, state, registered address
Law enforcement	Legal obligation only	As required by valid legal process

5. Data Retention

• Account data: Retained while your account is active and for 3 years after deletion
• Financial records: Retained for 7 years to comply with IRS recordkeeping requirements
• Formation documents: Retained indefinitely (these are business records)
• SMS consent records: Retained for a minimum of 4 years from the date of consent or last interaction, as required by TCPA regulations
• Audit logs: Retained for 4 years
• Support communications: Retained for 2 years

6. Security

We protect your data using industry-standard measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, bcrypt password hashing, JWT-based session tokens with expiry, and rate limiting on all authentication endpoints. We use Cloudflare's edge network for DDoS protection and Web Application Firewall rules. However, no system is 100% secure — please use a strong, unique password and enable two-factor authentication.

SMS & Text Message Communications

Opt-In

We only send SMS messages to users who have explicitly opted in by:

• Submitting their mobile number via our SMS opt-in form at insighthunter.app/sms-optin.html with a clear consent disclosure, or
• Texting a keyword (e.g., START) to our business number, or
• Providing verbal consent which is documented and stored

Message Types

• Transactional messages — account confirmations, formation status updates, security codes, plan alerts, compliance deadline reminders
• Marketing messages — promotions, product updates, and offers (only sent to users who opted in to marketing)

Message Frequency

Message frequency varies based on account activity. Typical users receive 2–8 messages per month for transactional notifications. Marketing messages are sent no more than 4 times per month.

Opt-Out

You may opt out of SMS messages at any time by replying STOP to any message from us. You may also reply STOPALL, CANCEL, END, QUIT, or UNSUBSCRIBE. Upon receiving an opt-out keyword, we will send one final confirmation message and immediately cease sending messages to your number. Your opt-out is recorded and honored permanently unless you re-subscribe by replying START.

Help

Reply HELP to any message for assistance, or contact us at support@insighthunter.app or insighthunter.app/contact.

Costs

Message and data rates may apply depending on your mobile carrier plan. Insight Hunter does not charge for SMS messages, but standard carrier rates may apply.

Supported Carriers

SMS services are available on all major US carriers including AT&T, T-Mobile, Verizon, Sprint, Boost Mobile, US Cellular, and others. Carrier support may vary.

Phone Number Privacy

Your mobile phone number is stored securely in our database. We share it with Twilio solely for the purpose of delivering SMS messages you have requested. We do not sell, rent, or share your phone number with third parties for their marketing purposes.

8. Cookies & Tracking

We use the following cookies:

• ih_token (session): Authentication session token — required for login. Expires in 7 days.
• ih_prefs (functional): Stores dashboard layout and display preferences. Expires in 1 year.

We do not use advertising, tracking, or third-party analytics cookies. We do not use Google Analytics, Facebook Pixel, or similar third-party trackers.

9. Your Rights & Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and personal data (subject to legal retention requirements)
• Portability: Request your financial data in CSV format
• Opt-out of SMS: Reply STOP to any message or email us
• Do Not Sell: We do not sell personal data. California residents have rights under CCPA.

To exercise your rights, email privacy@insighthunter.app. We will respond within 30 days.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will delete that information promptly. If you believe a child has provided us information, contact us at privacy@insighthunter.app.

11. Third-Party Services

Our Service integrates with the following third-party providers, each with their own privacy policies:

• Stripe — Payment processing: stripe.com/privacy
• Twilio — SMS and phone services: twilio.com/legal/privacy
• Cloudflare — Infrastructure: cloudflare.com/privacypolicy

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date and, where required by law, by sending you an email or in-app notification. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact Us