INSIGHTS WIZARD
Privacy Notice
Welcome to INSIGHTS WIZARD! This Privacy Notice outlines how we handle information when you use the Insight Wizard add-on. By accessing or using INSIGHTS WIZARD, you agree to be bound by the terms set forth below. Please take a moment to review them carefully, and feel free to contact us if you have any questions.
Our USAGE TERMS
1. What Data We Process
| Type | Source | Purpose | Stored? |
|---|---|---|---|
| Files you upload (CSV, XLS/XLSX, TXT) | You | Generate summaries & data stories | No. Held in memory only for analysis; never written to disk. |
| Add‑on usage logs (API endpoint, timestamp, status code) | Automatic | Reliability & abuse prevention | 30 days in Google Cloud Logging, regional (us‑central1). |
| Anonymous analytics (feature clicks, error events) | Optional opt‑in | Product improvement | Aggregated; no personal identifiers. |
We do not collect: account passwords, credit‑card data, or marketing identifiers.
2. How Processing Works
When you request an analysis, the file you upload is transmitted to our backend over an encrypted HTTPS connection. Once it arrives, the service reads a sample of up to one thousand rows directly in memory and forwards that sample, along with your chosen settings, to Google Gemini for processing. After the model returns its structured JSON response, the service immediately sends that response back to you and purges the in‑memory copy of your data. At no point is the file written to disk or stored after the analysis is complete.
3. Legal Basis
We rely on your explicit request (performance of a contract, Art. 6 (1)(b) GDPR) to process the content you upload. Anonymous debug data is processed under legitimate interest to maintain the service (Art. 6 (1)(f) GDPR).
4. Data retention & deletion
We retain your data only for as long as it is genuinely needed. Uploaded files remain in memory just long enough to generate your analysis and are discarded immediately afterward, so their retention time is effectively zero seconds. Service‑level log entries, which record the endpoint, timestamp, and status code, are kept for thirty days and are then deleted automatically. Aggregated analytics, which are stored in a form that cannot identify any individual user, are retained indefinitely so that we can track long‑term product trends without compromising your privacy.
5. Security Measures
All network traffic is encrypted with TLS 1.3, ensuring that data in transit cannot be read or altered by unauthorised parties. API keys and other secrets are stored in Google Secret Manager, so they never appear in code or logs. Access to cloud resources follows the principle of least privilege, meaning that each service account receives only the permissions it absolutely requires. The container images that power Insight Wizard are scanned continuously for known vulnerabilities, and any critical issues are patched or rebuilt as soon as updates become available.
6. Sharing with Third Parties
We share your data only with Google Cloud Platform, which provides hosting and log storage, and with Google Generative AI (Gemini), which performs the model inference. No other third parties receive your information.
7. International Transfers
Processing takes place in the United States (GCP us‑central1). Google LLC is certified under the EU‑US Data Privacy Framework.
8. Your Rights
You may request access, deletion, or restriction of any personal data we hold (primarily limited to log entries). Email us at hello@virtuhelper.co.za
9. Contact Us
If you have any questions or concerns regarding these Terms and Conditions, please contact us at hello@virtuhelper.co.za
By using Insight Wizard you acknowledge this privacy notice and consent to the processing described above.