Privacy Policy

How we collect, use, and protect your personal data across the MyInsider.AI website and apps — in compliance with GDPR.

This policy applies to the MyInsider.AI marketing website and to the MyInsider.AI applications (web, iOS, and Android), together “the Service.” It explains what personal data we process, why, who we share it with, and the rights you have.

Data Controller

Meyn & Schlickum GbR

Oldesloer Straße 4

23867 Sülfeld

Germany

Email: [email protected]

Legal Basis for Processing

  • Performance of a contract (Art. 6(1)(b) GDPR) — to create and operate your account and provide the app’s core features (storing your captures, notes, and personas; delivering your feed).
  • Legitimate interest (Art. 6(1)(f) GDPR) — to secure the Service and to understand and improve how it is used (product analytics).
  • Consent (Art. 6(1)(a) GDPR) — for the early-access form, marketing communications, and website tracking cookies. You may withdraw consent at any time by contacting [email protected]. Withdrawal does not affect processing carried out before withdrawal.

Data We Collect

Account & identity

Your name and email address; your password, which is stored only as a salted hash (we never see or store it in plain text); and, if you sign in with Apple or LinkedIn, the identifier and basic profile (name, email) those providers return. Your optional profile — role, industry, focus areas, and how you like information filtered.

Content you create

The captures, notes, saved links, articles and documents, topics, personas, and any avatar or persona images you add. This is your data — we store it to provide the Service to you and do not sell it.

Voice notes

When you dictate a note, the audio is transcribed on your device — the audio recording is temporary and is never uploaded to our servers or any third party. Only the resulting text is saved with your note.

Subscription & billing

If you subscribe, payment and billing details are entered on our payment processor’s (Stripe) secure checkout. We do not receive or store your card details — only your plan, subscription status, and Stripe reference identifiers.

Technical & usage data

Product-analytics events (see Product Analytics below), app version, device and operating-system type, language, and — as with any internet service — the IP address your requests are made from, used for security and delivery (not to determine your location).

Early-access form (website)

If you apply for early access, we collect your name and email, professional role and areas of expertise, desired outcomes and blockers, any notes you add, and UTM / referrer attribution parameters.

Website Analytics

On our marketing website we use a self-hosted instance of Plausible Analytics, hosted on an EU server. Plausible is cookieless — it does not track individuals across sessions or store IP addresses. No consent is required for Plausible.

With your consent, we also load the HubSpot tracking script, which sets cookies to identify returning visitors and associate page views with CRM contacts. You can accept or decline this via the cookie banner and change your preference at any time by clearing your browser’s local storage.

Product Analytics

In the MyInsider.AI app (web and mobile) we use PostHog to understand how the product is used so we can improve it. PostHog runs on PostHog’s EU Cloud (Frankfurt), and all product-analytics data is stored within the European Union.

We record product events — for example signing up, creating a capture, sending an invitation, or a change to your subscription — together with limited technical properties such as your subscription tier, plan, platform, and language. Events are linked to your account through an internal user identifier. We do not send the content of your notes, captures, or topics to PostHog, we do not include your name or email in analytics events, and we do not use analytics to determine your location.

We process this product-usage data on the basis of our legitimate interest in operating, securing, and improving the Service (Art. 6(1)(f) GDPR).

How We Use Your Data

  • Provide and operate the Service — your account, captures, notes, personas, and feed
  • Process subscriptions and payments
  • Send you service messages such as email verification and password resets
  • Keep the Service secure and prevent abuse
  • Understand usage to improve the product
  • With your consent, send product updates and marketing

Third-Party Processors

We use the following processors to operate the Service. Each acts under a Data Processing Agreement (DPA); transfers to providers outside the EU are covered by Standard Contractual Clauses (SCCs).

  • MongoDB Atlas — Primary database hosting. Data stored within the EU.
  • Hetzner Online GmbH (Germany) — Object storage for images and files you upload. EU-hosted.
  • Stripe, Inc. (USA) — Payment processing and subscription billing. We store only plan status and Stripe reference IDs. SCCs.
  • Postmark (Wildbit, LLC) (USA) — Transactional email such as verification codes and password resets. SCCs.
  • PostHog, Inc. (EU Cloud, Frankfurt) — Product-usage analytics. Data stored within the EU. DPA + SCCs.
  • Cloudflare, Inc. (USA) — DNS, CDN, and DDoS protection; all web traffic passes through Cloudflare. SCCs.
  • HubSpot, Inc. (USA) — CRM, email communication, and website visitor tracking (only with your consent). SCCs.
  • Apple & LinkedIn — Only if you choose “Sign in with Apple” or LinkedIn, to authenticate you and return basic profile data.

When you save a link, we may fetch public metadata from that URL (for example from YouTube or the linked web page) to display a preview.

International Data Transfers

Your account data, content, and analytics are stored within the EU. Some processors listed above are based in the United States; where personal data is transferred to them, the transfer is safeguarded by EU Standard Contractual Clauses.

Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your personal data
Portability: Receive your data in a structured format
Objection: Object to processing of your data
Restriction: Request limitation of processing

Deleting Your Account

You can delete your account and all associated content at any time from within the app: Profile → Profile & plan → Data & privacy → Delete the account. Deletion is immediate and permanent. If you no longer have access to the app, you can request deletion by email or follow the steps at myinsider.ai/delete-account.

Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, your personal data and content are erased; residual copies in encrypted backups are purged within 30 days. Limited billing records may be retained by our payment processor where required by tax and accounting law.

Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement. The competent authority for Meyn & Schlickum GbR is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD).

Contact

For privacy-related questions, data requests, or to exercise your rights, contact us at: [email protected]

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date below.

Last updated: 10 July 2026