Insaga

    Privacy Policy

    Last updated: September 28, 2026

    1. Introduction

    Insaga ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at insaga.net and our AI animation video maker service (the "Service"). Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

    2. Information We Collect

    2.1 Account Information

    When you create an account, we collect your email address and profile information provided through Google OAuth (name, profile picture). We do not store your Google password.

    2.2 User Content

    We store the text stories you submit, generated images, videos, audio files, and project data created through the Service. This content is associated with your account and stored on our servers.

    2.3 API Keys

    If you provide your own API keys (e.g., Google Gemini), they are encrypted using AES-256-GCM encryption before storage and are never stored in plaintext.

    2.4 Payment Information

    Payment processing is handled by our merchant of record, Creem.io, and cryptocurrency payment provider NowPayments. We do not store credit card numbers or bank account details. We receive confirmation of payment status and subscription details only.

    2.5 Usage Data

    We collect anonymous analytics data through PostHog, including pages visited, features used, and generation statistics. This data helps us improve the Service.

    2.6 Cookies

    We use essential cookies for authentication (Supabase session tokens) and local storage for user preferences (language, theme, selected style). We do not use third-party advertising cookies.

    2.7 Voice Support Conversations

    If you talk to our AI support assistant by voice, your speech is processed in real time by our AI voice provider to produce the assistant's replies, and a text transcript of the conversation is saved in your support chat so our team can follow up.

    Recording is optional and happens only with your consent, which is the legal basis for it. Before your first voice conversation we ask whether we may record it. If you agree, we record the audio of the conversation (your voice and the assistant's) to review and improve the quality of our support and to resolve disputes. You can decline and use the voice assistant just the same, and you can withdraw your consent at any time during a call with the “Recording” button: the recording of that call is deleted and future calls are not recorded. Recordings are encrypted (AES-256-GCM), stored on our servers in the European Union, accessible only to our support team, never sold or shared with third parties, and never used to create voiceprints or otherwise identify you. They are deleted automatically 30 days after the call; you can ask us to delete them sooner at [email protected].

    3. How We Use Your Information

    • To provide and maintain the Service
    • To process your transactions and manage subscriptions
    • To generate images, videos, and audio content based on your requests
    • To communicate with you about the Service, including support requests
    • To review the quality of voice support conversations you allowed us to record
    • To improve the Service through analytics
    • To detect and prevent fraud or abuse

    4. Data Storage and Security

    Your account data is stored in Supabase (hosted on secure cloud infrastructure). Generated content and project files are stored on our servers located in Europe (Hetzner, Germany). We implement appropriate technical and organizational measures to protect your data, including:

    • AES-256-GCM encryption for sensitive data (API keys)
    • AES-256-GCM encryption for voice support recordings
    • HTTPS/TLS encryption for all data in transit
    • Rate limiting and access controls
    • Regular cleanup of temporary files

    5. Third-Party Services

    We use the following third-party services to provide the Service:

    • Supabase — Authentication and database
    • Creem.io — Payment processing (merchant of record)
    • NowPayments — Cryptocurrency payment processing
    • PostHog — Product analytics
    • Google Cloud / OpenAI — AI model providers for content generation

    Each third-party service has its own privacy policy governing the use of your information.

    6. Data Retention

    We retain your account data for as long as your account is active. Generated content (images, videos) is stored for up to 7 days after creation unless saved to a project. Project data is retained indefinitely while your account is active. Voice support recordings, if you allowed recording, are deleted automatically 30 days after the call. You may request deletion of your data at any time by contacting us at [email protected].

    7. Your Rights (GDPR)

    If you are located in the European Economic Area, you have the following rights:

    • Access — Request a copy of your personal data
    • Rectification — Request correction of inaccurate data
    • Erasure — Request deletion of your personal data
    • Portability — Request a machine-readable copy of your data
    • Objection — Object to processing of your data
    • Restriction — Request restriction of processing

    To exercise any of these rights, please contact us at [email protected].

    8. Children's Privacy

    The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.

    9. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

    10. Contact Us

    If you have any questions about this Privacy Policy, please contact us at: [email protected]