Insight First AI’s Privacy Policy

WHY AND FOR WHOM?

Insight First AI is a brand owned by Insight First Consultancy AB. At Insight First Consultancy AB org. no. (559288-0719) ("Insight First AI", "we", "us", "ours") we care about your personal integrity. This means we respect and safeguard your privacy and the right to control and transparency in processing your personal data.

Insight First AI is responsible for Personal Data according to the Processing of Personal Data listed in this Privacy Policy (the "Policy"). The Policy describes for what purposes we need your Personal Data; what lawful basis we rely on and what measures we take to protect your Personal Data. We also provide information on how you exercise the rights you have related to our Processing of your Personal Data.

The policy informs you about our handling of Personal Data in cases where you communicate with us, use the research platform “Insight First AI”, or visit our website InsightFirst.ai

This policy is aimed at:

  1. Users of the Service ("Users", “you”)

  2. Visitors to our website ("Visitors", “you”)

DEFINITIONS

"Applicable law" means the legislation applicable to the Processing of Personal Data, including the Data Protection Regulation (GDPR), supplementary national legislation, as well as practices, guidelines and recommendations issued by a national or European supervisory authority.

"Data subject" means a living, natural person whose Personal Data is processed.

"Personal Data” is all kinds of information that can be linked to an identifiable, living person.

"Personal Data Controller" is the company/organization that decides for what purposes and in what way the Personal Data should be processed and thus is also responsible for the Personal Data being processed in accordance with Applicable Law.

"Personal Data Processor" is the company/organization that processes Personal Data on behalf of the Personal Data Controller and may thus only Process the Personal Data in accordance with the Personal Data Controller's instructions and applicable legislation.

"Processing" of Personal Data is anything that can be done with Personal Data, e.g. storage, modification, reading, handover.

INSIGHT FIRST AI'S PERSONAL DATA RESPONSIBILITY

The information in this Policy includes the Processing of Personal Data that Insight First AI is responsible for as Personal Data Controller, i.e., the processes for which we determine the purpose (why a Processing is done) and the means (in what way, what Personal Data, how long, etc.).

Insight First AI provides an online platform to conduct UX research and usability testing with voice-to-voice AI moderation. To provide our Services, we need access to your Personal Data.

INSIGHT FIRST AI'S PROCESSING OF PERSONAL DATA

We have a responsibility to describe and show how we meet the requirements placed on us when we process your Personal Data. This section aims to provide information regarding:

  • Why the Processing of Personal Data is necessary in relation to the purpose.

  • What lawful basis we have identified for the Processing.

LAWFUL BASIS

Agreement – The Processing is necessary to fulfill obligations in an agreement between us and the Data Subject, or to prepare to enter into such an agreement. We may not provide the Service without access to the Personal Data processed under this lawful basis.

Legitimate interest – Several of the purposes for which we process Personal Data are based on our legitimate interests, which we state in more detail below in connection with the specific purposes. We have balanced, on the one hand, our legitimate interests and, on the other hand, the interests and rights of our Users and Visitors, and concluded that our legitimate interests can be exercised without constituting a disproportionate infringement on their privacy. To find out more about our assessment, contact us via the information provided later in this Policy.

Legal obligations – We may have legal obligations to process Personal Data, such as complying with orders from law enforcement agencies, or where additional Personal Data is required for us to fulfill requests to exercise rights under the GDPR.

HOW LONG DO WE STORE YOUR PERSONAL DATA?

We store your Personal Data for as long as is necessary for the purpose for which it was collected. Depending on the lawful basis on which we process the data, retention may:

a) follow from an agreement,
b) depend on a valid consent,
c) be required by legislation, or
d) result from an internal assessment based on the purposes of the Processing.

PROCESSING

We will primarily use your Personal Data to be able to provide the Service and continuously improve it. To fulfill this, we will process Personal Data for the purposes described below.  

1.1. Service/Product: Insight First AI Platform

1.2. Purpose:

1.2.1. To provide the Service in accordance with the Terms of Use between Insight First AI and you.
1.2.2. To analyse and develop new services

1.3. Personal Data:

E-mail, name, phone number

1.4. Lawful basis:

In order to fulfill our contractual commitments to you and to satisfy our legitimate interest in developing and improving our products and services.

2.1. Service/Product: Customer contact

2.2. Purpose:

To handle customer communication, marketing, sales, and user research

2.3. Personal Data:

E-mail, name, phone number

1.4. Lawful basis:

In order to fulfill our contractual commitments to you.

3.1. Purpose:

Fulfillment of legal obligations and protection of our legal interests

3.2. Personal Data:

All personal data processed by Insight First AI

3.3. Lawful basis:

In order to comply with applicable laws and to meet our legitimate interests, to defend our legal interests, to protect our service, our users, third parties, and observe our rights.

SOURCE

The email address, name, and phone number come directly from the Data Subject or from public sources online.

Period of storage: We store your information for as long as necessary to fulfill the purposes of this Privacy Policy, agreements, and legal or regulatory requirements.

YOUR RIGHTS

You are the one who decides over your Personal Data. We always strive to ensure that you can exercise your rights as efficiently and smoothly as possible.

  • Access – You always have the right to receive information about the Personal Data Processing that concerns you. We only disclose information to you if we have been able to confirm your identity.

  • Correction – If you find that the Personal Data we are Processing is incorrect, please contact us and we will amend it. Information that is automatically retrieved from external sources, such as expenses, cannot be corrected manually.

  • Deletion – You have the right to request the deletion of your Personal Data when it is no longer necessary for the purpose it was collected. If we are required to retain your information by law or an agreement, we will restrict its Processing to the specific legal purpose and delete it as soon as allowed.

  • Objection – If you disagree with our legitimate interest basis for Processing your data, we will re-evaluate whether it is justified. If you object to direct marketing, we will stop such Processing immediately without re-assessment.

  • Restriction – You may request that we limit the Processing of your data:

    • While your request for correction, objection, or deletion is being assessed

    • When the data is no longer needed for its original purpose, but you want us to retain it for legal claims

  • Data portability – You can request a copy of your Personal Data in a machine-readable format for transfer to another Personal Data Controller.

  • Withdrawal of consent – You can withdraw your consent for any future Processing of your Personal Data at any time. Past Processing based on consent remains lawful.

HOW TO EXERCISE YOUR RIGHTS

If you decide to revoke your consent, it will not affect the legality of our Processing of your Personal Data up to the time of revocation.

TRANSFER OF PERSONAL DATA

We may use third parties as Personal Data Processors. These processors are not allowed to share or use your Personal Data for any purposes other than what is outlined in this Privacy Policy.

We do not transfer your data outside the EU/EEA. In cases where a processor does so, we ensure that:

  • The European Commission has deemed the country to offer adequate protection, or

  • Standard Contractual Clauses (SCCs) approved by the European Commission are used, or

  • Other legal safeguards are implemented in compliance with applicable law.

We may also be required to disclose your Personal Data to certain authorities if obligated by law or governmental decision.

IF WE DO NOT KEEP WHAT WE PROMISE

If you have questions about how we process your Personal Data, feel free to contact us at:
jazgul@insightfirst.se

If you feel we have mishandled your data even after contacting us, you have the right to submit a complaint to the Swedish Privacy Protection Authority (IMY): imy@imy.se

CHANGES TO THIS POLICY

We reserve the right to make changes to this Policy. If the change affects your rights or our obligations, we will notify you in advance to allow you to review the updated version. If changes require new consent, we will request it.

The latest version of the Privacy Policy will always be available at: insightfirst.se/privacy-policy

If we update the purposes for Processing or categories of Personal Data, you will be informed via app notification.

CONTACT 

Insight First AI has appointed Jazgul Ismailova as a Data Protection Officer, whom you can contact if you have questions regarding Personal Data and privacy by sending an email to: jazgul@insightfirst.se