PSF Insight ("we", "us", "our") operates the website psfinsight.com (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.
1. Information We Collect
Account information: When you sign in with Google or Apple, the provider sends us an identity token. Our server verifies that token, uses the verified email address, name, and any available profile picture to create or update your account, and exchanges it for a signed, essential PSF Insight session cookie. We do not receive or store your provider password or retain the Google or Apple identity token.
Usage data: We record account, subscription, quota, and authenticated feature activity needed to provide and secure the Service. Inputs and outputs from authenticated AI features, including submitted property details or prompts, may be retained in operational logs associated with your account. This operational logging is separate from the bounded analytics described below.
Analytics data: We use bounded first-party product analytics with a random browser session identifier. Analytics event fields are non-PII and limited to an allowlisted event name, source, subscription tier, and optional result count; signed-in events may also be associated server-side with an internal user ID. They do not include search text, project names, email addresses, AI prompts, or Google or Apple provider tokens. This frontend does not use Google Analytics.
Payment information: If you subscribe to a paid plan, Stripe processes checkout, card details, and billing. We store the Stripe customer identifier and subscription status needed to manage your plan, but we do not store your credit card number or full payment details on our servers.
2. How We Use Your Information
- To provide and maintain the Service
- To manage your account and AI usage quota
- To process subscription payments
- To improve the Service based on usage patterns
- To communicate with you about your account or the Service
- To detect and prevent fraud or abuse
3. Data Storage and Security
Your data is stored on secure servers. We use industry-standard security measures to protect your information. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
4. Third-Party Services
We use the following third-party services:
- Google and Apple: Their sign-in services provide the identity tokens that our server verifies before creating an application session. Their handling of sign-in data is subject to Google's Privacy Policy (opens in a new tab) or Apple's Privacy Policy (opens in a new tab), as applicable.
- AWS: AWS provides AI infrastructure used to process property details and prompts submitted to AI features and return generated analysis.
- Stripe: Stripe provides subscription checkout, payment processing, and the billing portal. Stripe handles your card and full payment details under its own privacy policy.
5. Data Retention
We retain account information and operational usage history while your account is active or as needed to provide, secure, and account for the Service. First-party analytics events are automatically removed after 180 days and analytics storage is capped at 500,000 events. If you wish to delete your account and associated data, please contact us at the email below.
6. Cookies
After sign-in, we set an essential PSF Insight session cookie containing a signed application session token. The cookie expires after seven days, is HTTP-only, uses SameSite=Lax, and is marked Secure outside local development. First-party analytics uses a random identifier in browser local storage rather than an analytics cookie. This frontend does not use Google Analytics.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent for data processing
8. Children's Privacy
The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us at help@northstareducation.io.