Privacy Policy

This Privacy Policy describes how Datanapis, LLC, a California limited liability company that provides the 10x Insights service (in this policy, “10x Insights”, “we”, “our”, or “us”), collects, uses, and shares information when you use our website, applications, and other services available through 10xinsights.com (collectively, the “Services”). If you do not agree with our handling of personal data as described here, please do not use the Services.

Information We Collect

• Account information. When you create an account, we collect your email address and any additional information you provide (such as name or organization). Authentication is handled through our identity provider, AWS Cognito.
• Billing information. If you purchase a paid subscription, our payment processor (Stripe) collects and stores your payment details on our behalf. We receive limited transaction information from Stripe — for example, the last four digits of the card, the billing country, and the status of the charge — but we do not store full payment card numbers.
• Prompts, conversations, and uploaded content. When you use AI-assisted features, we store the prompts you submit, the model responses returned, any files or data you upload for analysis, and metadata about the session (such as timestamps and the model used). These are tied to your account.
• Usage and log data. We collect information about how you interact with the Services, including pages viewed, features used, and the timing of those interactions. Our servers also automatically record standard log information such as IP address, browser type, request paths, and response codes.
• Communications you send us. If you email us with questions, support requests, or feedback, we retain those messages and any information you choose to include in them.

How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the Services;
• Authenticate users and protect the Services from abuse;
• Process payments and manage subscriptions;
• Respond to support requests and send service-related communications;
• Evaluate and improve the quality of our analysis, including by reviewing prompts and responses, fixing defects, tuning prompts, and benchmarking changes;
• Comply with legal obligations and enforce our Terms.

We do not currently use your prompts or conversations to train AI models. We reserve the right to do so in the future. If we begin using customer content for model training, we will update this Privacy Policy and give you advance notice through the Services or by email before the change takes effect, and we will offer a way to opt out where required by applicable law.

Third-Party AI Provider Keys (BYOK)

Certain features may allow you to bring your own API key from a third-party AI provider (currently Anthropic). When you use a BYOK feature, your prompts are sent to that provider on your behalf and the usage is billed to your account with that provider. The provider's handling of your data is governed by its own terms of service and privacy policy. We continue to store the prompts and responses associated with your account as described above so that you can revisit your conversations within the Services. We do not store your third-party API key in plaintext and we do not share it with other 10x Insights users.

Service Providers and Sub-processors

We rely on a small number of third-party providers to operate the Services. They process information only on our instructions and are bound to confidentiality and security obligations:

• Amazon Web Services — application hosting, storage, and server logs.
• AWS Cognito — user authentication and account management.
• Stripe — payment processing and subscription billing.
• Google Analytics — aggregate web analytics about how the Services are used.
• Google AdSense — delivery and measurement of advertising, where advertising is shown.
• Anthropic — AI model inference, including for prompts you submit through BYOK features.

Cookies

We use cookies and similar technologies for three purposes: (i) to keep you signed in and to make the Services function correctly, (ii) to gather aggregate analytics about how the Services are used, and (iii) where we display advertising, to serve and measure it.

Advertising, where shown, appears only to signed-out visitors and to free accounts — never to paying subscribers. It is served by Google, and Google and its partners use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalized advertising through Google’s Ad Settings at adssettings.google.com, and you can manage or block cookies in your browser; blocking them may affect your ability to sign in or use certain features. Where advertising is shown, you can also review or change your consent choices at any time using the “Manage cookies” link in the site footer.

Data Retention

We retain account information, billing records, and prompts and conversations for as long as your account remains open. Closing your account does not automatically delete your prompts and conversations; if you want them deleted, please contact us as described below. We may retain log and aggregate analytics data for longer for security, debugging, and product improvement, and we may retain information for longer where required by law (for example, tax records).

Your Choices and Deletion

You can request access to, correction of, or deletion of personal information we hold about you, including your prompts and conversations, through our contact page. We may need to verify your identity before acting on a request, and we may retain certain information where required by law or to enforce our agreements. We will not retaliate against you for exercising any of these rights.

If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including rights of access, deletion, correction, and to opt out of any sale or sharing of personal information. We do not sell personal information. Where we display advertising, the advertising cookies described above may constitute “sharing” for cross-context behavioral advertising under that law; you can opt out through Google’s Ad Settings and through your browser’s cookie controls. To exercise your rights, contact us. You may also designate an authorized agent to act on your behalf.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Changes to this Policy

We may update this Privacy Policy from time to time. The current version is always available on this page. For material changes — including any expansion of how we use your prompts or conversations — we will give advance notice through the Services or by email before the change takes effect.

Contact

Questions, comments, or requests about this Privacy Policy or your information? Reach us through ourcontact page.