Privacy Policy

Last updated: 4 August 2026

This Privacy Policy explains how CleverOwl Solutions Ltd ("InsightSquirrel", "we", "us", "our") collects, uses and protects personal data when you visit our website, take a quiz built with our platform, or use InsightSquirrel as a customer. We handle personal data in line with the UK GDPR and the Data Protection Act 2018.

1. Who we are

InsightSquirrel is a product of CleverOwl Solutions Ltd, a company registered in England and Wales (Company No. 16973711, VAT No. GB519492465), registered address 82a James Carter Road, Mildenhall, Suffolk IP28 7DE. We are the data controller for the personal data described in this policy (except quiz responses, where our customers are the controller, see section 2). For any privacy question or to exercise your rights, contact [email protected].

2. Controller and processor: two roles

When you sign up for and use InsightSquirrel as a customer, we are the data controller for your account and billing information. When you build a quiz and collect responses from your own audience, you are the data controller for those respondents' personal data, and InsightSquirrel acts as a data processor, handling that data only on your instructions and for the purpose of providing the service to you.

3. Information we collect

Website visitors: if you use our contact form, the name, email address and message you provide; and, with your consent, analytics cookie data about how the site is used.
Customer account data: your name, email address and password (stored securely/hashed by our authentication provider), plan and subscription status, and billing details. Card details are entered directly with our payment provider, we never see or store your full card number.
Quiz & lead data (as processor for our customers): the questions, answers, scores and any contact details (such as name, email, phone) that respondents enter into quizzes built by our customers.
Usage & technical data: log data, IP address, device and browser information, used to operate, secure and improve the service.

4. How we use personal data

To provide, operate, maintain and improve the InsightSquirrel platform.
To create and manage your account, and to process trials, subscriptions and payments.
To respond to enquiries and provide support, and to send service-related messages (such as your welcome email and password resets).
To keep the service secure, prevent abuse and meet our legal and accounting obligations.

5. Legal bases

We rely on: performance of a contract (to provide the service you sign up for); legitimate interests (to run, secure and improve our business, and to respond to enquiries); consent (for non-essential/analytics cookies and any optional marketing, you can withdraw consent at any time); and legal obligation (for tax and accounting records).

6. Cookies

We use strictly necessary cookies to run the service and keep you signed in, these do not require consent. We use analytics cookies only with your consent, which you give or refuse via the cookie banner. If a customer adds their own Google Analytics or Meta Pixel to a quiz, those tracking cookies are only loaded after the person taking the quiz accepts the cookie notice shown on that quiz page.

7. Sharing and sub-processors

We do not sell personal data. We share it only with the service providers that help us run InsightSquirrel, under appropriate data-processing contracts:

Supabase, database & user authentication (hosted in the EU).
Vercel, hosting of the application.
Cloudflare, website hosting, DNS and email routing.
Stripe, payment processing and subscription billing.
Resend, sending transactional emails (e.g. welcome and password-reset emails).
Google Analytics / Meta, only where a customer enables them on their own quiz, and only after the respondent consents.

We may also disclose personal data where required by law.

8. Data retention

We keep customer account data for as long as your account is active. If you close your account, we delete your account and associated content, though residual copies may persist in secure backups for a short period before being overwritten. Records we must keep by law (such as invoices for tax purposes) are retained for the legally required period. Leads captured through your quizzes are kept until you delete them or close your account.

If you are in the UK or EEA, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these rights, email [email protected].

Customers can also exercise several rights directly in the app: you can export your leads as a CSV file, delete an individual lead, and delete your entire account and all associated data at any time from your account settings.

Where InsightSquirrel acts as a processor for quiz responses that our customers collect, requests from those individuals should be directed to the relevant customer as the controller; we will assist that customer in responding. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. International transfers

Some of our providers process data outside the UK or EEA. Where that happens, we rely on appropriate safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement, or Standard Contractual Clauses.

11. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and reputable infrastructure providers. No system is completely secure, but we work to protect your data and to notify you and the ICO of any breach where required.

12. Children

InsightSquirrel is intended for business use and is not directed at children under 16. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a revised "last updated" date.

Questions about privacy or your data? Email [email protected].