Last updated: June 10, 2026
This Privacy Policy explains how Insite Labs Ltd. ("Insite Labs", "we", "us" or "our") collects, uses, discloses and protects information in connection with our website at insitelabs.ai (the "Site") and our product Insite AI, including its website widget, dashboards and related services (together, the "Service").
By using the Site or the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Site or the Service.
Insite Labs is an AI product lab. Insite AI provides AI-powered search, an on-site assistant, voice features, content insights and analytics that site owners can add to their websites.
Our responsibilities depend on whose data is involved:
As a controller.
We act as a data controller for information about our customers and account holders (for example, site owners who sign up for or install Insite AI), for billing information, and for visitors to our own Site at insitelabs.ai.
As a processor.
When Insite AI is installed on a customer's website, we process the personal data of that website's end visitors (such as search queries, questions and interaction data) on behalf of, and under the instructions of, the site owner, who is the data controller for that data. If you are an end visitor and wish to exercise your rights over that data, please contact the relevant site owner. We will assist site owners in responding to such requests as required by law and by our agreement with them.
Account and customer information.
When a site owner signs up for or installs Insite AI, we may collect a name, email address, business details, authentication identifiers, and information needed to provision and manage the account, including platform identifiers (for example, a Wix instance ID).
Billing information.
Payments are handled by our third-party payment providers. We do not store full payment card numbers on our systems. We may retain transaction records, plan details and billing status.
Website content.
To provide search and assistant features, the Service indexes and stores content from the customer's website (such as page text, product information and metadata). This content is processed to build and operate the search index and to generate answers.
End-visitor interaction data.
When a visitor uses the widget on a customer's site, we may process search queries, questions, chat and voice input, the answers returned, and related interaction and analytics events (such as pages viewed, clicks, conversion events, approximate location derived from IP, device and browser information, and timestamps).
Information collected automatically.
When you use the Site or the Service, we and our providers may automatically collect IP address, device and browser data, log data, and information collected through cookies and similar technologies (see Section 10).
Support communications.
If you contact us, we collect the information you provide (such as your email address and the contents of your message).
We use information to:
We do not sell personal data.
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
Performance of a contract
to provide the Service to our customers.
Legitimate interests
to operate, secure, improve and promote the Service, where these interests are not overridden by your rights.
Consent
where required, for example for certain cookies or marketing communications. You may withdraw consent at any time.
Legal obligation
to comply with applicable law.
The Service uses artificial intelligence, including third-party AI providers, to generate search results, answers and suggestions. Inputs such as website content and visitor queries may be transmitted to and processed by these providers solely to return a response to the request.
Our AI providers are engaged under terms that restrict their use of the data to providing the service to us, and we do not authorize the use of customer or end-visitor content to train third-party foundation models. AI-generated output may be inaccurate or incomplete and should not be relied upon as professional advice.
We share information only as described below:
Service providers and subprocessors
cloud hosting and infrastructure, AI processing, database and storage, payment processing, analytics, email and customer support providers, who process data on our behalf under appropriate contractual safeguards. A current list of our subprocessors is available on request.
Platform partners
where you install Insite AI through a platform (such as a website app market), we exchange the data necessary to provision, bill and operate the app on that platform.
Legal and safety
where required by law, regulation, legal process or governmental request, or to protect the rights, property or safety of Insite Labs, our users or others.
Business transfers
in connection with a merger, acquisition, financing or sale of assets, subject to this Policy.
We and our providers may process information in countries other than the country in which you reside, including outside the European Economic Area, the United Kingdom and Israel. Where required, we put in place appropriate safeguards for such transfers, such as Standard Contractual Clauses or transfers to jurisdictions recognized as providing adequate protection.
We retain information for as long as necessary to provide the Service, fulfil the purposes described in this Policy, comply with our legal obligations, resolve disputes and enforce our agreements. Retention periods vary depending on the type of data and the purpose for which it is processed. When data is no longer needed, we delete or anonymize it. Website content and end-visitor data processed on behalf of a site owner are retained and deleted in accordance with our agreement with that site owner.
We implement reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse or alteration, including encryption of data in transit and at rest, access controls and secrets management. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The Site and the Service use cookies and similar technologies (such as local storage) for essential functionality, security, preferences and analytics. Where required by law, we obtain consent before placing non-essential cookies, and you can manage your preferences through the consent tools provided or your browser settings. Disabling certain cookies may affect how the Service functions.
Depending on where you live, you may have rights regarding your personal data, including the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent. If you are in California, you may have rights under the CCPA/CPRA, including the right to know, delete and opt out of the "sale" or "sharing" of personal information (we do not sell personal information).
To exercise your rights regarding data for which we are the controller, contact us using the details in Section 14. If your request concerns data processed through the widget on another company's website, please contact that site owner, as they are the controller of that data.
You also have the right to lodge a complaint with your local data protection authority.
The Service is not directed to children, and we do not knowingly collect personal data from children under the age of 16 (or the minimum age required by applicable law). If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.
The Site and the Service may contain links to, or integrations with, third-party websites and services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their practices. Please review their privacy policies.
If you have questions about this Policy or our data practices, contact us at:
We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Site or the Service after changes take effect constitutes acceptance of the updated Policy.
This Policy is governed by the laws of the State of Israel, without regard to its conflict-of-laws principles, except where mandatory local data protection law applies to you.