Privacy Policy
Last Updated: October 4, 2026
Insightful Foundation, Inc. (“Insightful,” “we,” “us,” or “our”) respects your privacy.
This Privacy Policy explains what personal information we collect, how we use and disclose it, how long we retain it, and the choices available to you when you visit insightful.foundation (the “Website”) or interact with Insightful.
What information do we collect?
The information we collect depends on how you interact with us.
Information you provide directly
We may collect:
• Name
• Email address
• Phone number
• Mailing address
• Company name
• Scheduling and appointment information
• Email and text communications
• Information you voluntarily share in connection with a session or service
• The engagement you select or request
• Electronic signatures and information associated with agreements
• Invoice, transaction, and payment-related information
• Permission associated with case studies or testimonials
Please provide only information reasonably necessary for your interaction with Insightful.
Information collected through the Website
Our Website is hosted by Squarespace and uses Squarespace's built-in analytics.
Depending on your cookie choices and the functionality you use, information collected through the Website may include IP address, browser, network and device information, referring information, pages visited, and information about how you interact with the Website.
We do not currently use Google Analytics or Meta Pixel.
Where does personal information come from?
We collect personal information:
• Directly from you
• Through the Website and Squarespace
• Through Calendly when you schedule with us or access certain recordings
• Through Typeform when you select or confirm an engagement
• Through DocuSeal when you enter into and electronically sign an agreement
• Through Zoom when you participate in an online session
• Through Xero in connection with invoicing and accounting
• Through email and text communications
• Through payment services when you make a payment
• Through Website interactions with embedded content
How do we use personal information?
We may use personal information to:
• Respond to and communicate with you
• Schedule and provide sessions and services
• Prepare for and conduct an engagement
• Allow you to select or confirm an engagement
• Prepare, execute, and maintain agreements
• Process payments
• Prepare and maintain invoices and accounting records
• Maintain appropriate business and transaction records
• Operate, secure, understand, and improve the Website
• Display case studies and testimonials with permission
• Protect our rights and prevent misuse, fraud, or security incidents
• Comply with applicable legal obligations
We do not currently operate an email marketing newsletter or send promotional email or text campaigns.
What are our legal bases for processing personal information?
Where the UK GDPR, EU GDPR, or another law requiring a legal basis applies, the legal basis depends on the purpose for which we process the information.
Depending on the circumstances, we may process personal information because:
• It is necessary to take steps at your request before entering into an agreement or to perform an agreement with you
• It is necessary for our legitimate interests in operating and protecting our business, communicating with you, maintaining appropriate business records, improving our Website, and providing our services, where those interests are not overridden by your rights
• You have given consent for a particular use
• Processing is necessary to comply with a legal obligation
Where we rely on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
Do we sell your personal information?
No.
Insightful does not sell or rent your personal information.
We do not use your personal information for cross-context behavioral advertising.
Who may receive your information?
We use third-party service providers to operate our Website and business and to provide services you request.
Depending on how you interact with Insightful, these include:
Squarespace for Website hosting, Squarespace Payments, and built-in Website analytics.
Calendly for scheduling and storage of certain meeting information and recordings.
Typeform for allowing prospective or existing clients to select or confirm the engagement they would like to request.
DocuSeal for electronic agreements and signatures.
Zoom for online meetings and recording sessions when applicable.
Google/Gmail for email communications.
SMS/iMessage through our business mobile phone for direct communications.
Xero for invoicing, accounting, and financial recordkeeping.
Zelle for certain payments.
Vimeo for hosting and displaying case-study videos.
Spotify for media embedded on the Website.
These providers may process information necessary to provide their respective services and are subject to their own applicable privacy practices and terms.
We may also disclose personal information when reasonably necessary to comply with law or legal process, protect our rights or the rights of others, investigate fraud or security concerns, enforce our agreements, or complete a business transaction involving Insightful where permitted by applicable law.
How is Typeform used?
We use Typeform only to allow prospective or existing clients to select or confirm the engagement they would like to request.
We do not use Typeform to request sensitive personal information.
Please do not submit sensitive personal information through Typeform.
How are agreements and electronic signatures handled?
We use DocuSeal.com to prepare and execute electronic agreements.
When you enter into an agreement with Insightful, we may collect through DocuSeal your:
• Name
• Email address
• Mailing address
• Company name
• Electronic signature
DocuSeal may also process technical and electronic-identification information associated with the signing process, such as IP address, device and browser information, and time zone.
We retain executed client agreements indefinitely as part of our business records, subject to applicable law.
How are scheduling and recordings handled?
We use Calendly for scheduling.
When you schedule with us, Calendly may process your contact information, appointment details, and other information you voluntarily provide on our behalf.
Some online sessions may be recorded. Zoom notifies participants when recording begins. Our practice is to delete the recording from Zoom and retain it through Calendly.
Session recordings retained through Calendly are generally kept unless you request deletion or we delete them as part of our records management, subject to any information we are permitted or required to retain.
Sessions and recordings may contain personal, business, or other confidential information. We treat this information with discretion and in accordance with any terms governing the engagement.
How are invoices and accounting records handled?
We use Xero for invoicing, accounting, and financial recordkeeping.
Information maintained through Xero may include your name, email address, mailing address, company name, invoice information, payment status, and transaction records.
Financial and accounting records may be retained for as long as reasonably necessary for accounting, tax, legal, contractual, and legitimate business-recordkeeping purposes, including where retention is required by law.
How are payments handled?
Online payments made through the Website are processed through Squarespace Payments.
Squarespace uses third-party providers in connection with Squarespace Payments, including Stripe for payment-processing services and Sift for fraud monitoring and detection. Insightful does not maintain a separate direct Stripe payment account for these Website payments.
Squarespace and its payment-service providers may receive and process personal and transaction information necessary to process, secure, and complete your payment.
Insightful does not receive or store your complete payment card number.
We may also accept payments through Zelle or wire transfer. Payments made through Zelle or wire transfer are subject to the privacy and security practices of Zelle or wire transfers of the financial institutions involved.
How are case-study videos handled?
We use Vimeo to host case-study videos.
We obtain permission from participants before using their case-study videos.
Case-study videos may be displayed publicly on our Website or through other authorized uses consistent with the permission provided.
When you view a Vimeo-hosted or embedded video, Vimeo may receive information about your interaction with its services, including technical information such as your IP address and browser or device information, and may use cookies or similar technologies.
Do we use cookies and analytics?
Yes.
Squarespace uses cookies necessary to operate and secure the Website. We also use Squarespace's built-in analytics to understand Website traffic and activity.
Our Website provides cookie controls that allow visitors to accept cookies, decline nonessential cookies, or manage available cookie preferences.
When Squarespace's consent-management controls are enabled, Squarespace restricts certain nonessential cookies until the visitor provides the applicable consent.
You can change your available cookie preferences using the cookie controls on the Website.
We do not currently use Google Analytics or Meta Pixel.
Can third parties collect information through the Website?
Yes.
Third-party services embedded in or connected to the Website may receive information or use cookies or similar technologies independently of Squarespace.
The Website contains content hosted by Vimeo and Spotify. When you view or interact with embedded content, your browser may communicate directly with those providers, and those providers may collect technical and usage information in accordance with their own privacy practices.
Squarespace's cookie controls can restrict certain nonessential cookies, including some third-party integrations, but may not prevent every cookie or technology used independently by a third-party service.
You may also use your browser settings and privacy controls offered by applicable third parties to manage certain tracking technologies.
How do we communicate with you?
We use Gmail, What’s App, and SMS/iMessage through our business mobile phone to communicate directly with prospective clients, clients, event organizers, professional contacts, and others who communicate with Insightful.
We do not currently send promotional email or text campaigns.
Email and text communications are generally retained until you request deletion or we delete them as part of routine records management, subject to information we are permitted or required to retain.
How long do we keep personal information?
Retention depends on the type of information and why we collected it.
Our general practices are:
• Calendly scheduling information: generally retained until you request deletion or we delete it as part of routine records management
• Session recordings: generally retained through Calendly unless you request deletion or we delete them as part of records management
• Typeform responses: generally retained until you request deletion or they are removed as part of routine storage management
• Executed client agreements: retained indefinitely as part of our business records, subject to applicable law
• Xero invoices and accounting records: retained for accounting, tax, legal, contractual, and legitimate business-recordkeeping purposes
• Gmail communications: generally retained until you request deletion or we delete them as part of routine records management
• Text communications: generally remain on our business mobile device until deleted as part of ordinary device and records management
• Case-study videos: retained for as long as we continue to use or maintain the case study, consistent with the permission provided and applicable law
We may retain information longer where reasonably necessary or permitted to comply with legal obligations, maintain appropriate financial or transaction records, establish or defend legal claims, resolve disputes, prevent fraud, enforce agreements, or protect our legal rights.
Information processed by third-party providers may also be subject to their own retention requirements and practices.
How do we protect personal information?
We use reasonable administrative and technical measures designed to protect personal information from unauthorized access, use, alteration, or disclosure.
We also use established service providers for functions including Website hosting, payments, scheduling, electronic agreements, invoicing, email, forms, video hosting, and online meetings.
No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
What privacy rights and choices do you have?
Depending on where you live and the law that applies, you may have rights concerning your personal information.
These may include rights to request:
• Access to personal information we maintain about you
• Correction of inaccurate personal information
• Deletion of certain personal information
• Restriction of certain processing
• A portable copy of certain personal information
• Objection to certain processing
Where processing is based on consent, you may also have the right to withdraw your consent.
These rights are not absolute and do not apply in every circumstance. For example, we may retain information where permitted or required for legal, tax, accounting, contractual, recordkeeping, fraud-prevention, dispute-resolution, or legal-claims purposes.
We may need to verify your identity before fulfilling a request.
To make a privacy request, contact:
What should California residents know?
California residents may have additional privacy rights under applicable California law.
Where applicable, we will honor legally required rights concerning access, correction, deletion, or other control over personal information.
Insightful does not sell personal information or use it for cross-context behavioral advertising.
California Do Not Track Disclosure
Some browsers provide a “Do Not Track” signal or similar privacy mechanism.
We do not use Google Analytics or Meta Pixel and do not use personal information for cross-context behavioral advertising.
We use Squarespace's built-in analytics and the Website cookie controls described above. We do not represent that every third-party service embedded in or connected to the Website responds to browser Do Not Track signals in the same way.
Third-party services, including embedded media providers, may collect information when you interact with their content as described in this Privacy Policy.
You may use the Website's cookie controls and your browser's privacy settings to control certain cookies and tracking technologies.
What should visitors and clients outside the United States know?
Insightful Foundation, Inc. is based in the United States and works with people internationally.
If you provide personal information from outside the United States, your information may be transferred to, stored in, or processed in the United States or other countries where our service providers operate.
For example, we use DocuSeal.com, whose primary operations involving personal data are in the United States.
Privacy and data-protection laws in the countries where information is processed may differ from those where you live.
Where applicable data-protection law requires safeguards for international transfers, we and our service providers may use legally recognized transfer mechanisms applicable to the relevant processing.
If the UK GDPR, EU GDPR, or another applicable data-protection law gives you additional rights, you may exercise those rights by contacting us at hello@insightful.foundation.
Where applicable, you may also have the right to lodge a complaint with the data-protection authority responsible for your country or region.
Is this Website intended for children?
No.
The Website and Insightful's services are intended for adults age 18 and older.
We do not knowingly collect personal information from children through the Website. If we learn that we have collected personal information from a child, we will take reasonable steps to delete it where appropriate.
What happens when you visit another website or service?
The Website may contain links to third-party websites, media, platforms, or other resources.
Insightful does not control those third parties or their independent privacy practices. When you interact directly with another website or service, that provider's privacy policy and terms govern its independent handling of your information.
Can this Privacy Policy change?
Yes.
We may update this Privacy Policy as our Website, services, technology, service providers, or legal obligations change.
When we make changes, we will update the “Last Updated” date at the top of this page. If required by applicable law, we will provide additional notice of material changes.
How can you contact Insightful?
For questions about this Privacy Policy or requests concerning your personal information:
Insightful Foundation, Inc.
PO Box 29501
San Francisco, CA 94129
hello@insightful.foundation